0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2327.613092][ T2549] usb 5-1: USB disconnect, device number 42
[ 2327.631724][ T2549] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
00:02:39 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x8}}, 0x0, 0x0, 0x0, 0x0})

00:02:39 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x800800}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x20c49b}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f014fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:39 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x31, 0xc4, {0xc4, 0x30, "f5cf641cb15ba3f8be5bfa8af2c715b0692b118b6e3f852fe5cf69ca064e52313d2dc557544d0767f4776f324f3e860a3a04dd41ed041fcf6e87cf7f85cf4a60577dfaf663a5db06ccdb18b91bd2365f8e38a23f6200d5208249cc5c023f9a7b0fb1c99821735d95b4e502cbb315f8f192957e25de25237d9231182841f53cd1ca8341fd6da369c5c13aab31f5e519480c0f4cc2085c8ca00f313bccb282ae2d9f533623b0c102dda489c827ac249a56723657bf192395fc2513dc07917843ac29a1"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x40, 0x14, 0xa2, "b5a43d4bab8e92e8c03a7d7c769e50b2c9ce653b3d16037c70db645b227202ad1989722b9287e01c261e6e0ef683e73edda165bfa7e85640035d09f8075cfa27e6d2ce5a7862915944cfb7d090193d247697726b936e30cba3e55d42b3d4cb27cdf806e16255b981b819303989de29785da77d582f943cfff38cb6231731e220a4496ba1b74399153ebd9bd6988f7e683abc3ac4a8c24c5867e168c31f8030e13a70"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x87, 0x1, 0x200, 0x9, 0x1f, 0x7ff, 0x8, 0x20, 0x8, 0x0, 0x7f, 0xc42e}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000500)={0x20, 0x89, 0x2}})
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x31, 0xc4, {0xc4, 0x30, "f5cf641cb15ba3f8be5bfa8af2c715b0692b118b6e3f852fe5cf69ca064e52313d2dc557544d0767f4776f324f3e860a3a04dd41ed041fcf6e87cf7f85cf4a60577dfaf663a5db06ccdb18b91bd2365f8e38a23f6200d5208249cc5c023f9a7b0fb1c99821735d95b4e502cbb315f8f192957e25de25237d9231182841f53cd1ca8341fd6da369c5c13aab31f5e519480c0f4cc2085c8ca00f313bccb282ae2d9f533623b0c102dda489c827ac249a56723657bf192395fc2513dc07917843ac29a1"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x40, 0x14, 0xa2, "b5a43d4bab8e92e8c03a7d7c769e50b2c9ce653b3d16037c70db645b227202ad1989722b9287e01c261e6e0ef683e73edda165bfa7e85640035d09f8075cfa27e6d2ce5a7862915944cfb7d090193d247697726b936e30cba3e55d42b3d4cb27cdf806e16255b981b819303989de29785da77d582f943cfff38cb6231731e220a4496ba1b74399153ebd9bd6988f7e683abc3ac4a8c24c5867e168c31f8030e13a70"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x87, 0x1, 0x200, 0x9, 0x1f, 0x7ff, 0x8, 0x20, 0x8, 0x0, 0x7f, 0xc42e}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) (async)

00:02:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x20c49b}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:39 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[ 2327.981550][ T2549] usb 3-1: USB disconnect, device number 96
00:02:39 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2328.391707][ T2577] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 2328.451739][ T1919] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 2328.671707][ T2549] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 2328.751769][ T2577] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2328.760354][ T2577] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2328.770296][ T2577] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2328.778963][ T2577] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:02:40 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:02:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f015fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xff0400}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2328.850813][ T1919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2328.951992][ T2577] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2328.961304][ T2577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2329.001719][ T2577] usb 1-1: Product: syz
[ 2329.021003][ T2577] usb 1-1: Manufacturer: syz
[ 2329.173198][ T2577] usb 1-1: SerialNumber: syz
00:02:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2329.213308][ T2577] cdc_ncm 1-1:1.0: skipping garbage
[ 2329.218428][ T2577] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2329.225160][ T2577] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2329.234124][ T2577] cdc_ncm 1-1:1.0: bind() failure
[ 2329.241816][ T2549] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2329.250423][ T1919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2329.259492][ T2549] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2329.269623][ T1919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2329.277688][ T1919] usb 5-1: Product: syz
[ 2329.281835][ T2549] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2329.290517][ T1919] usb 5-1: Manufacturer: syz
[ 2329.295081][ T1919] usb 5-1: SerialNumber: syz
[ 2329.299506][ T2549] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2329.312338][  T126] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 2329.541764][ T2549] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2329.550661][ T2549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2329.558635][ T2549] usb 3-1: Product: syz
[ 2329.562732][ T2549] usb 3-1: Manufacturer: syz
[ 2329.567170][ T2549] usb 3-1: SerialNumber: syz
[ 2329.612014][ T2549] cdc_ncm 3-1:1.0: skipping garbage
[ 2329.617193][ T2549] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2329.623636][ T2549] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2329.630214][ T2549] cdc_ncm 3-1:1.0: bind() failure
[ 2329.651701][  T126] usb 2-1: device descriptor read/64, error 18
[ 2330.051689][  T126] usb 2-1: device descriptor read/64, error 18
[ 2330.116576][T11335] udc-core: couldn't find an available UDC or it's busy
[ 2330.123379][T11335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2330.321664][  T126] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 2330.431727][ T1919] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2330.438115][ T1919] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2330.445338][ T1919] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2330.514749][T11337] udc-core: couldn't find an available UDC or it's busy
[ 2330.521571][T11337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2330.621686][  T126] usb 2-1: device descriptor read/64, error 18
[ 2330.631945][T11303] udc-core: couldn't find an available UDC or it's busy
[ 2330.638789][T11303] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2330.646469][T11303] udc-core: couldn't find an available UDC or it's busy
[ 2330.653296][T11303] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2330.681764][ T1919] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2330.688316][ T1919] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2330.699799][ T1919] usb 5-1: USB disconnect, device number 43
[ 2330.705971][ T1919] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2331.041727][  T126] usb 2-1: device descriptor read/64, error 18
[ 2331.132871][ T3454] usb 1-1: USB disconnect, device number 73
[ 2331.171713][  T126] usb usb2-port1: attempt power cycle
00:02:43 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})

00:02:43 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:02:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f016fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x2000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:43 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2331.532283][ T3454] usb 3-1: USB disconnect, device number 97
00:02:43 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2331.650515][  T126] usb 2-1: new high-speed USB device number 48 using dummy_hcd
00:02:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x3000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2332.041899][ T1919] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 2332.049356][T32266] usb 1-1: new high-speed USB device number 74 using dummy_hcd
00:02:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x4000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2332.131673][ T3454] usb 3-1: new high-speed USB device number 98 using dummy_hcd
00:02:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x5000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f017fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x6000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2332.395838][  T126] usb 2-1: device not accepting address 48, error -71
[ 2332.491905][ T3454] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2332.508434][ T3454] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2332.716292][ T1919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2332.727061][T32266] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2332.735680][T32266] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2332.745755][T32266] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2332.754374][T32266] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2332.756174][ T3454] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2332.780754][ T3454] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2332.941755][ T1919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2332.950711][ T1919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2332.951733][ T3454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2332.958902][ T1919] usb 5-1: Product: syz
[ 2332.967464][ T3454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2332.971452][T32266] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2332.979227][ T3454] usb 3-1: Product: syz
[ 2332.988926][ T1919] usb 5-1: Manufacturer: syz
[ 2332.992048][ T3454] usb 3-1: Manufacturer: syz
[ 2332.996530][ T1919] usb 5-1: SerialNumber: syz
[ 2333.000856][ T3454] usb 3-1: SerialNumber: syz
[ 2333.005411][T32266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2333.018124][T32266] usb 1-1: Product: syz
[ 2333.022332][  T126] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 2333.030392][T32266] usb 1-1: Manufacturer: syz
[ 2333.035007][T32266] usb 1-1: SerialNumber: syz
[ 2333.052174][ T3454] cdc_ncm 3-1:1.0: skipping garbage
[ 2333.057330][ T3454] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2333.064033][ T3454] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2333.070720][ T3454] cdc_ncm 3-1:1.0: bind() failure
[ 2333.084534][T32266] cdc_ncm 1-1:1.0: skipping garbage
[ 2333.089622][T32266] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2333.096263][T32266] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2333.103021][T32266] cdc_ncm 1-1:1.0: bind() failure
[ 2333.121756][  T126] usb 2-1: Invalid ep0 maxpacket: 0
[ 2333.126970][  T126] usb usb2-port1: unable to enumerate USB device
00:02:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f018fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2333.958664][T11435] udc-core: couldn't find an available UDC or it's busy
[ 2333.965488][T11435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2333.991771][T11436] udc-core: couldn't find an available UDC or it's busy
[ 2333.998595][T11436] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2334.231719][ T1919] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2334.238055][ T1919] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2334.245287][ T1919] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2334.441753][ T1919] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2334.448353][ T1919] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2334.461188][ T1919] usb 5-1: USB disconnect, device number 44
[ 2334.467207][ T1919] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
00:02:46 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})

00:02:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x7000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:46 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:02:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f019fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f016fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:46 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2334.976341][ T3454] usb 3-1: USB disconnect, device number 98
[ 2335.009107][  T126] usb 1-1: USB disconnect, device number 74
00:02:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f016fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x8000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f016fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2335.681681][ T6394] usb 5-1: new high-speed USB device number 45 using dummy_hcd
00:02:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x9000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2335.791757][ T3454] usb 3-1: new high-speed USB device number 99 using dummy_hcd
00:02:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f01afcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2335.860876][ T1919] usb 2-1: new high-speed USB device number 50 using dummy_hcd
00:02:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x12}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2336.234089][ T6394] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2336.381674][ T1919] usb 2-1: device descriptor read/64, error 18
[ 2336.381802][ T3454] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2336.396282][ T3454] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2336.406305][ T6394] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2336.415167][ T3454] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2336.423980][ T6394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2336.431927][ T3454] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2336.444709][ T6394] usb 5-1: Product: syz
[ 2336.448676][ T6394] usb 5-1: Manufacturer: syz
[ 2336.453211][ T6394] usb 5-1: SerialNumber: syz
[ 2336.641756][ T3454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2336.650657][ T3454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2336.658739][ T3454] usb 3-1: Product: syz
[ 2336.662875][ T3454] usb 3-1: Manufacturer: syz
[ 2336.667317][ T3454] usb 3-1: SerialNumber: syz
[ 2336.713121][ T3454] cdc_ncm 3-1:1.0: skipping garbage
[ 2336.718171][ T3454] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2336.724865][ T3454] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2336.743390][ T3454] cdc_ncm 3-1:1.0: bind() failure
[ 2336.771707][ T1919] usb 2-1: device descriptor read/64, error 18
[ 2336.961750][ T6394] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[ 2336.967602][ T6394] cdc_ncm 5-1:1.0: bind() failure
[ 2336.973369][ T6394] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2336.979993][ T6394] cdc_ncm 5-1:1.1: bind() failure
[ 2337.041682][ T1919] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 2337.311684][ T1919] usb 2-1: device descriptor read/64, error 18
[ 2337.615698][T11525] udc-core: couldn't find an available UDC or it's busy
[ 2337.622512][T11525] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2337.701668][ T1919] usb 2-1: device descriptor read/64, error 18
[ 2337.821706][ T1919] usb usb2-port1: attempt power cycle
[ 2338.295028][ T6394] usb 5-1: USB disconnect, device number 45
00:02:50 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:02:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0xc4ff}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xa000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f01bfcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:50 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:02:50 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)

00:02:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0xc4ff}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0xc4ff}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:50 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})

[ 2338.631362][ T2549] usb 3-1: USB disconnect, device number 99
[ 2339.121672][T18274] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 2339.129082][  T126] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 2339.221662][ T2549] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 2339.251672][ T1919] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2339.351879][ T1919] usb 2-1: Using ep0 maxpacket: 32
00:02:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f01cfcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xb000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2339.485883][ T1919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2339.521841][  T126] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2339.530479][T18274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2339.541453][  T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2339.551913][  T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2339.560602][  T126] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2339.891220][ T2549] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2339.901200][ T2549] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2339.911202][ T2549] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2339.919857][ T2549] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2339.932703][ T1919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2339.941725][ T1919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2339.951331][ T1919] usb 2-1: Product: syz
[ 2339.955435][ T1919] usb 2-1: Manufacturer: syz
[ 2339.959883][ T1919] usb 2-1: SerialNumber: syz
[ 2339.971717][T18274] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2339.980605][T18274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:02:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xc000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2339.988585][  T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2339.997528][T18274] usb 5-1: Product: syz
[ 2340.001445][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2340.011216][T18274] usb 5-1: Manufacturer: syz
[ 2340.015815][T18274] usb 5-1: SerialNumber: syz
[ 2340.020182][  T126] usb 1-1: Product: syz
[ 2340.024860][  T126] usb 1-1: Manufacturer: syz
[ 2340.029313][  T126] usb 1-1: SerialNumber: syz
[ 2340.072217][  T126] cdc_ncm 1-1:1.0: skipping garbage
[ 2340.077293][  T126] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2340.083765][  T126] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2340.090279][  T126] cdc_ncm 1-1:1.0: bind() failure
[ 2340.111703][ T2549] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2340.120567][ T2549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2340.128667][ T2549] usb 3-1: Product: syz
[ 2340.133051][ T2549] usb 3-1: Manufacturer: syz
[ 2340.137458][ T2549] usb 3-1: SerialNumber: syz
[ 2340.182036][ T2549] cdc_ncm 3-1:1.0: skipping garbage
[ 2340.187071][ T2549] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2340.194679][ T2549] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2340.201513][ T2549] cdc_ncm 3-1:1.0: bind() failure
[ 2340.975713][T11568] udc-core: couldn't find an available UDC or it's busy
[ 2340.982610][T11568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2341.161726][T18274] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2341.168014][T18274] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2341.175229][T18274] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2341.321697][ T1919] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2341.328119][ T1919] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2341.335650][ T1919] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2341.362315][T11535] udc-core: couldn't find an available UDC or it's busy
[ 2341.369178][T11535] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2341.381708][T18274] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2341.388356][T18274] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2341.542882][ T1919] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2341.556983][ T1919] usb 2-1: USB disconnect, device number 52
[ 2341.562962][ T1919] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:02:53 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:02:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xd000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f01dfcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2341.655191][ T6394] usb 3-1: USB disconnect, device number 100
00:02:53 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})

[ 2342.028895][  T741] usb 1-1: USB disconnect, device number 75
00:02:53 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2342.191688][ T6394] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 2342.401673][  T741] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 2342.461713][ T1919] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2342.601734][ T6394] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2342.610240][ T6394] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2342.620311][ T6394] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2342.629085][ T6394] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2342.701718][ T1919] usb 2-1: Using ep0 maxpacket: 32
00:02:54 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x9f, {0x9f, 0x23, "6d82ed39ec56b1d5122c9f0277ae951a645bf0a5fcae12d4433790f70463bd2ccb83f6c017ccb292a2d71d796b70d4281b4fea22ec000cbbda69ad1f76ef04c6b328aed7f008651dfc5a3b577038478e9eae40e8934b48a8032ef13228d0ab6e1172b26d0e00c72c435bc64b46ea9053cf2210a48e7c5dac5d841b61b60770588a80d7c775f7d2cac35820f796018b9df3bc51ea58b2d454a3299a1448"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x18, 0x3, "46ee0d"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x6f4, 0xb86, 0x9, 0xa5f3, 0xfffe, 0x280, 0x6, 0xfbff, 0x7}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x8001}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x28}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:02:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xe000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f01efcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2342.724948][T26277] usb 5-1: USB disconnect, device number 46
[ 2342.741784][T26277] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2342.822012][  T741] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2342.822114][ T6394] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2342.840226][  T741] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2342.866080][  T741] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2342.875328][ T6394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2342.883754][  T741] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2342.899161][ T6394] usb 3-1: Product: syz
[ 2343.000011][ T1919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2343.022324][ T1919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2343.045620][ T6394] usb 3-1: Manufacturer: syz
[ 2343.055098][ T6394] usb 3-1: SerialNumber: syz
00:02:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xf000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2343.102362][ T6394] cdc_ncm 3-1:1.0: skipping garbage
[ 2343.108630][ T6394] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2343.120256][ T6394] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2343.126978][ T6394] cdc_ncm 3-1:1.0: bind() failure
[ 2343.201708][ T1919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2343.210666][ T1919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2343.218716][ T1919] usb 2-1: Product: syz
[ 2343.222913][ T1919] usb 2-1: Manufacturer: syz
[ 2343.227388][ T1919] usb 2-1: SerialNumber: syz
[ 2343.231707][  T741] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2343.240824][  T741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:02:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x10000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2343.248779][  T741] usb 1-1: Product: syz
[ 2343.252867][T26277] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 2343.260305][  T741] usb 1-1: Manufacturer: syz
[ 2343.264777][  T741] usb 1-1: SerialNumber: syz
[ 2343.323309][  T741] cdc_ncm 1-1:1.0: skipping garbage
[ 2343.328398][  T741] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2343.334876][  T741] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2343.341507][  T741] cdc_ncm 1-1:1.0: bind() failure
00:02:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x11000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x12000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2343.641741][T26277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2343.831730][T26277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2343.840620][T26277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2343.848479][T26277] usb 5-1: Product: syz
[ 2343.852429][T26277] usb 5-1: Manufacturer: syz
[ 2343.856856][T26277] usb 5-1: SerialNumber: syz
[ 2344.228737][T11701] udc-core: couldn't find an available UDC or it's busy
[ 2344.235582][T11701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2344.581712][ T1919] cdc_ncm 2-1:1.0: bind() failure
[ 2344.587143][ T1919] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2344.593877][ T1919] cdc_ncm 2-1:1.1: bind() failure
00:02:56 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)

00:02:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f045fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x13000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2344.676319][ T1919] usb 3-1: USB disconnect, device number 101
[ 2344.786599][  T741] usb 2-1: USB disconnect, device number 53
00:02:56 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x4, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x2, 0xc9}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4c}, @mdlm_detail={0x28, 0x24, 0x13, 0x0, "f23be73f7b775f38848c60d7ad6e643c14c4d9962777eb5a759302e803a1858adc397012"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x8001, 0x3f, 0x2, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xab, 0x7, 0x81}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x39, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x3, 0x4, 0x40, 0x80}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x18, 0x80, 0x0, 0x6, 0x3}]}, 0x3, [{0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "045d683e7c064cf9eb33aff5db5b45dc9c34f067f564a85a6e0feca5efcc4d4760804b5f57dc13ec3598433fe440370ec71e6f9fb111"}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "216e91d38562272ddf632d1e8739d11a2df8021369cf4e4612583e83d1269a6526ebeb4b4c16870258880ce07a44f934b51699590872416df6"}}, {0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "ac168c957c902cce6c0151f831567979c19eed5b1126fb9edbaed804c62ec96187e454746bc37da6fb31cc7d4e815641bf84fddb425ac4ab8214689cb3a63c482237b6be54ec9ad4e8ac3065db18cfe8273d58fb3356b75d21d5a3b7cc10a8e55d3b7f897f82ec0c6325644abf09949f1d5edc72aa8665a83db1a2780b7b229d920f0fe7f00872a0a4ed4bd6fad3a84cfc50827c57337cc31b0dbf8b4eb69d403112de7121016391c01fd0b2958d9cf7eee1835739d0339bb5ab2d45b354607118b7ac90c36281a5a2634b83d0a3e8da05f6701c8f08d2"}}]})

[ 2345.245766][  T126] usb 1-1: USB disconnect, device number 76
[ 2345.281776][T26277] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2345.288079][T26277] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2345.295459][T26277] cdc_ncm 5-1:1.0: setting rx_max = 2048
00:02:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x14000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2345.381659][ T1919] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 2345.491717][T26277] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2345.498898][T26277] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2345.526787][T26277] usb 5-1: USB disconnect, device number 47
[ 2345.533072][T26277] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2345.611742][  T126] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 2345.761751][ T1919] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2345.770246][ T1919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2345.780180][ T1919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2345.788949][ T1919] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:02:57 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x9f, {0x9f, 0x23, "6d82ed39ec56b1d5122c9f0277ae951a645bf0a5fcae12d4433790f70463bd2ccb83f6c017ccb292a2d71d796b70d4281b4fea22ec000cbbda69ad1f76ef04c6b328aed7f008651dfc5a3b577038478e9eae40e8934b48a8032ef13228d0ab6e1172b26d0e00c72c435bc64b46ea9053cf2210a48e7c5dac5d841b61b60770588a80d7c775f7d2cac35820f796018b9df3bc51ea58b2d454a3299a1448"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x18, 0x3, "46ee0d"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x6f4, 0xb86, 0x9, 0xa5f3, 0xfffe, 0x280, 0x6, 0xfbff, 0x7}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x8001}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x28}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (rerun: 32)

00:02:57 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:02:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f048fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x15000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2345.961770][ T1919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2345.970669][ T1919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2345.978490][ T1919] usb 3-1: Product: syz
[ 2345.982501][  T126] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2345.996602][ T1919] usb 3-1: Manufacturer: syz
[ 2346.008219][  T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2346.018188][ T1919] usb 3-1: SerialNumber: syz
[ 2346.022902][  T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2346.032038][  T126] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2346.337751][ T1919] cdc_ncm 3-1:1.0: skipping garbage
[ 2346.342889][ T1919] cdc_ncm 3-1:1.0: invalid descriptor buffer length
00:02:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x16010000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2346.378222][ T1919] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2346.387980][ T1919] cdc_ncm 3-1:1.0: bind() failure
[ 2346.393684][ T1919] usb 3-1: USB disconnect, device number 102
[ 2346.411678][T26277] usb 2-1: new high-speed USB device number 54 using dummy_hcd
00:02:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1b010000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2346.511739][  T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2346.520614][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2346.528526][  T126] usb 1-1: Product: syz
[ 2346.535599][  T126] usb 1-1: Manufacturer: syz
[ 2346.540019][  T126] usb 1-1: SerialNumber: syz
[ 2346.544486][T18274] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 2346.602078][  T126] cdc_ncm 1-1:1.0: skipping garbage
[ 2346.607179][  T126] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2346.613761][  T126] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2346.620373][  T126] cdc_ncm 1-1:1.0: bind() failure
[ 2346.651653][T26277] usb 2-1: Using ep0 maxpacket: 32
00:02:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x20000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2346.771745][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2346.782588][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
00:02:58 executing program 2:

00:02:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f050fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:02:58 executing program 2:

[ 2346.991829][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2347.001130][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2347.010118][T26277] usb 2-1: Product: syz
[ 2347.014799][T26277] usb 2-1: Manufacturer: syz
[ 2347.019400][T26277] usb 2-1: SerialNumber: syz
[ 2347.145354][T18274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2347.321734][T18274] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2347.330711][T18274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2347.338715][T18274] usb 5-1: Product: syz
[ 2347.342806][T18274] usb 5-1: Manufacturer: syz
[ 2347.347139][T18274] usb 5-1: SerialNumber: syz
[ 2347.508706][T11794] udc-core: couldn't find an available UDC or it's busy
[ 2347.515550][T11794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2348.111699][T18274] cdc_ncm 5-1:1.0: failed to get mac address
[ 2348.151708][T18274] cdc_ncm 5-1:1.0: bind() failure
[ 2348.157325][T18274] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2348.164289][T18274] cdc_ncm 5-1:1.1: bind() failure
00:03:00 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:03:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x262c0000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2348.526588][T18274] usb 1-1: USB disconnect, device number 77
[ 2348.544613][T26277] cdc_ncm 2-1:1.0: bind() failure
[ 2348.550165][T26277] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2348.556785][T26277] cdc_ncm 2-1:1.1: bind() failure
[ 2348.744686][T26277] usb 2-1: USB disconnect, device number 54
[ 2348.891690][T18274] usb 1-1: new high-speed USB device number 78 using dummy_hcd
00:03:00 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x9f, {0x9f, 0x23, "6d82ed39ec56b1d5122c9f0277ae951a645bf0a5fcae12d4433790f70463bd2ccb83f6c017ccb292a2d71d796b70d4281b4fea22ec000cbbda69ad1f76ef04c6b328aed7f008651dfc5a3b577038478e9eae40e8934b48a8032ef13228d0ab6e1172b26d0e00c72c435bc64b46ea9053cf2210a48e7c5dac5d841b61b60770588a80d7c775f7d2cac35820f796018b9df3bc51ea58b2d454a3299a1448"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x20, 0x18, 0x3, "46ee0d"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x6f4, 0xb86, 0x9, 0xa5f3, 0xfffe, 0x280, 0x6, 0xfbff, 0x7}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x8001}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x28}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:00 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:00 executing program 2:

00:03:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f054fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x30750000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2349.195352][T26277] usb 5-1: USB disconnect, device number 48
00:03:00 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)

[ 2349.255038][T18274] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2349.269540][T18274] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2349.279638][T18274] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2349.288609][T18274] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x34000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2349.661773][T26277] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 2349.669263][ T2577] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2349.701708][T18274] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2349.712882][T18274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2349.720866][T18274] usb 1-1: Product: syz
[ 2349.725211][T18274] usb 1-1: Manufacturer: syz
[ 2349.729685][T18274] usb 1-1: SerialNumber: syz
[ 2349.775552][T18274] cdc_ncm 1-1:1.0: skipping garbage
[ 2349.780625][T18274] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2349.787294][T18274] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2349.794081][T18274] cdc_ncm 1-1:1.0: bind() failure
00:03:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x3f000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:01 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)

[ 2349.961659][ T2577] usb 2-1: Using ep0 maxpacket: 32
00:03:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x40000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2350.091755][T26277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2350.111756][ T2577] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2350.127860][ T2577] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2350.281757][T26277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2350.290618][T26277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2350.298636][T26277] usb 5-1: Product: syz
[ 2350.302737][ T2577] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2350.311556][ T2577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2350.319516][T26277] usb 5-1: Manufacturer: syz
[ 2350.324190][T26277] usb 5-1: SerialNumber: syz
[ 2350.331003][ T2577] usb 2-1: Product: syz
[ 2350.335112][ T2577] usb 2-1: Manufacturer: syz
[ 2350.339508][ T2577] usb 2-1: SerialNumber: syz
[ 2351.301696][T26277] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2351.308067][T26277] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2351.315561][T26277] cdc_ncm 5-1:1.0: setting rx_max = 2048
00:03:03 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:03:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f058fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2351.511735][T26277] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2351.518459][T26277] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2351.529996][T26277] usb 5-1: USB disconnect, device number 49
[ 2351.536271][T26277] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2351.547481][T32621] usb 1-1: USB disconnect, device number 78
[ 2351.674739][ T2577] cdc_ncm 2-1:1.0: bind() failure
[ 2351.684062][ T2577] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2351.690860][ T2577] cdc_ncm 2-1:1.1: bind() failure
[ 2351.882037][ T2577] usb 2-1: USB disconnect, device number 55
00:03:03 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)

[ 2352.063191][T32621] usb 1-1: new high-speed USB device number 79 using dummy_hcd
00:03:03 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x44000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:03 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0xea, {0xea, 0xe, "ad4f95aabf62de808eb480262709d8a8dbd2b67f05b6db1734f9951785135f42dc9a7f6514e22a81fddd7f6477231932f89a6d4b0cd48c4099830fed6c2b878a6ca17b10e199890e5c6d5eb432d7242c71248ba693767c16f08202f6b02af3c2530610a30f39ae9e510e57a3f29d3b0f0d0986fa2ab0ca37d5015ab44fa526cb5caf514f6f612d7318f9c689936a670685663d12e084b9b0802f425b12f86f3b4786e6d00d199c860850434b464f6c75adf5730d5089c26aa5a8930c902faf70727797235a11aac712ace695a7e837739cb3b4450cba45643946ed796c967c4b2750695101172fac"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0x16, 0xd, "bf0b39ec5071f22c2eb3f3d0ed"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1f6, 0x2, 0x3f, 0xd5af, 0x2, 0x95d, 0x4, 0x400, 0x1000, 0x101, 0x0, 0x2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x97b}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000000400)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000f00)={0x0, 0x7, 0x29, {0x29, 0x20, "d3de3dd63f134370639b2b174cbf7f73df2098e4592b5faf3e748efb0df9e625ad3e504e5d8ff8"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000f80)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@generic={0xf2, 0x10, 0xb, "60abe9c8de0b9f9d59a4514ca9964043a9840512712f5b36a917bf21086ee4e6b3f340dc1781d4027254e05206f3dcbaa5609030487a61498d5e91f156996374496eb7859671a4089f9926a0cc62f215f9d487b2836b78fbd5e37f48ba876378e5b27ef7f2238b62a2079cc91965d29a6c148b7a6cca65c78e28e0c86fc531a2131d7eaef4e5c46ece86a9444bc652781dd21edbb53d887962cfa802c7d48b575f260f61f6ca4df2a2da7cbcc1aa6b39b3ce65de4bedfe06615e682f792466e45c80c2732fcae5026c3c78469f7dae8c0cbb6ae5281273d174e4772fa06f341d4065cd3e675e59c032171829758b64"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0xc0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7f, 0x3}, @generic={0x8a, 0x10, 0x4, "dc623dc298f15a32c6bb57b093c1bf2541d2c81cdb062c1dbb3e16e0fed26fb28dfcbde1b9c2b9ff0502469d699c6f3eff1669a7bbd1e5a3ae06e0ef3bf6d8b2882f12dc7c9f77e94c0a3fcf8df971387abc47896733541d03c0c12cbb5753e4a273c80904746e0d2407199f23ea3248710fa410491107c59eac61570d68c0c051f37d66695f85"}]}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x5, 0x3, "34c5a90e", "66b89096"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0xcb, 0x7f, 0xaf, 0x1, 0x100}}}, &(0x7f0000001680)={0x84, &(0x7f0000001200)={0x20, 0xf, 0xa0, "1ba0719bdd59adff71d6cfa08f6e24a6de2779547f64785c07d3c49e8b9886babdcfd2a7c8c1e013c61f06ce7fbdfbdd39f1363bfc281fe71dfc4fa5428b65d1dec3c67d86f0f5fcc6deb33aa323bb5b233c018b3dc7cc71355e7c47805c90466efb505aaf12c1ba2fdae36190d72ab97b0bcc81dc2fa732c66c885cec8a628e1320bbd3d6eadab47565c9cc547ef3b00465dd03d9fb2090907f157407697a03"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x60, 0x4}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000001400)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000001440)={0x40, 0xb, 0x2, "8c6c"}, &(0x7f0000001480)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000014c0)={0x40, 0x13, 0x6}, &(0x7f0000001500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001540)={0x40, 0x19, 0x2, "1545"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000015c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0xfd}})
r1 = syz_usb_connect$cdc_ncm(0x3, 0xec, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "15315d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x400, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x25}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0xe0, 0x20}, @obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x0, 0x7f, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x4, 0x81, 0x6, 0xa7, 0x2}, @mdlm_detail={0x55, 0x24, 0x13, 0x4, "ce2158c8fa224153f43050e2c440c6a7ff66b7b550ad1449e83a435cc007f6e30d236e034c42f8e3ded92d0c6be0a19f3578e7fe568cffcdee51e6547f2598cada06a0d46851a523dabd8dca53aea49d3a"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x19, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x51, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x9, 0x2, 0x81, 0x40, 0x6}, 0x170, &(0x7f0000000700)={0x5, 0xf, 0x170, 0x5, [@generic={0x31, 0x10, 0x3, "c297e4de2d831b65f329a54f7a2cfacd8901039f074d15a7c696c82881e4bc129ab35a30d56bfa3725f5c56189fa"}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0xd1, 0xf000, 0x6, [0x3fc0, 0x3ff0, 0x30, 0x3f00, 0xc000, 0xff0000]}, @generic={0x100, 0x10, 0xa, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0x6, 0x6, 0xc0}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xff, 0xfe, 0x8, 0x40}]}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x424}}, {0xdb, &(0x7f00000008c0)=@string={0xdb, 0x3, "d0e38eb3f07541062daa2a878256d82821c85acb35060d6074f0c17c0daf31bec57a305d2a9c75d9ee50ee1273d242430273e17aaced34d5a3e1c74bfc1df73478035cae8b4a45cecc9885fabe9b8f2e0b87916ee2d638679395aff2dbc84676851ba8659c7c5f00a9904fd32c8508f65d75de74e881c68f78762940831504140908f2ee79cda509261171556d6000bc57fc6cbe9b386f9c1e63c5bbc6e60e2658be5ae69801578a5130af56e029ea60b21cc01e46bfefabbfc981439e120cc2191f13d3891ac09d277465a3f5f9bded58deddb5170a7e1549"}}, {0x80, &(0x7f00000009c0)=@string={0x80, 0x3, "907d0188038b73d696ffa4dff6f8f995859a668905e90f11e2cdc485a3166c98f11912e45d2654ec56a520389ded3927767055ceaede6856868424cb1146e138c394a9a1ba254bfb084179052b8541fb08069d45a1808f288bb4ce464abbcfec157d49bb9106154c36adb7ebb0abf04cb6238615875697beac778edf5425"}}]})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x20, 0xd, 0xaa, {0xaa, 0x10, "c2a9a8ff11e321b5e8bf7d5274e4ed0f8cdc3357e53006e71dea4a877b902fe4512abc585247b10b7377261f87adee1637939ce7db2551c514a5a44c1c5b0676c12fb68c2672b9d1778836600e45fe6f9b8538264497ed933b58a23d1b6e69c398b6218b6149654c9773480e7941be569ca9f4c34f529440f7164726aa328f9bdeb11666a93903d0a791dfea9df79a4b308fe2c3f38687073dc49378ebde30a639371bf258da47da"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x40, 0x10, 0xf7, "824160d449573d0a2b8024482f3a21496649504b8032ecdbfea054316874ad1f27256cd3c97e3fa6f49e199f7dcf59b86424246143a4516299f409fcf46aa33b470c00b2a43809dca70a811b476169ba0d9bbc3e719f83942211b0806e222f6e0dbe2bc1adcd408657c051cfdea63860ddf31bf38d2b4ec78d4ddc86a3c0b400d3fb514143bea4826b89a5659e23784a0828fd7b3839fb0f36cfbc37b4d2358b0f36317732c7afe172837792e3ae04b87f6e59cad018665bf17fc7acc02a7e50c232f1a0995a80ceae1f575900f1300eeeccaf9435abec65f876a9040ad5c090d2042831e2109af4d8c4359141ff8411cc47f6e9845df9"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0xda, 0x5, 0xfffff800, 0x7, 0x3f, 0xff, 0x7, 0x5, 0x5, 0x7035, 0x4, 0x84f}}, &(0x7f0000000d80)={0x20, 0x85, 0x4}, &(0x7f0000000dc0)={0x20, 0x83, 0x2}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000e40)={0x20, 0x89, 0x2}})

00:03:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f0b6fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2352.431851][T32621] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2352.440364][T32621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2352.450541][T32621] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2352.459552][T32621] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:04 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0)

00:03:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x48000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2352.831709][T26277] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 2352.891730][T32621] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2352.900694][T32621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2352.908716][T32621] usb 1-1: Product: syz
[ 2352.912892][T32621] usb 1-1: Manufacturer: syz
[ 2352.917365][T32621] usb 1-1: SerialNumber: syz
[ 2352.922182][ T1919] usb 2-1: new high-speed USB device number 56 using dummy_hcd
00:03:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x48800000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2352.962068][T32621] cdc_ncm 1-1:1.0: skipping garbage
[ 2352.967090][T32621] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2352.976131][T32621] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2352.982745][T32621] cdc_ncm 1-1:1.0: bind() failure
00:03:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x4c1d0000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2353.071672][    T6] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 2353.171670][ T1919] usb 2-1: Using ep0 maxpacket: 32
[ 2353.191782][T26277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:03:04 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f0fcfcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2353.311873][ T1919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2353.322573][ T1919] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2353.332340][ T1919] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2353.351676][    T6] usb 3-1: device descriptor read/64, error 18
[ 2353.361772][T26277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2353.371990][T26277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2353.380067][T26277] usb 5-1: Product: syz
[ 2353.398807][T26277] usb 5-1: Manufacturer: syz
[ 2353.403986][T26277] usb 5-1: SerialNumber: syz
[ 2353.771712][ T1919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2353.780617][ T1919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2353.788457][ T1919] usb 2-1: Product: syz
[ 2353.792490][ T1919] usb 2-1: Manufacturer: syz
[ 2353.796837][ T1919] usb 2-1: SerialNumber: syz
[ 2353.861674][    T6] usb 3-1: device descriptor read/64, error 18
[ 2354.131669][    T6] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 2354.401662][    T6] usb 3-1: device descriptor read/64, error 18
00:03:06 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)

00:03:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x5e0e0000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521828480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2354.560597][ T3454] usb 1-1: USB disconnect, device number 79
[ 2354.931738][T26277] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2354.937978][T26277] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2354.945584][T26277] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2354.961689][    T6] usb 3-1: device descriptor read/64, error 18
[ 2355.081705][    T6] usb usb3-port1: attempt power cycle
[ 2355.091765][ T3454] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 2355.141695][T26277] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2355.148351][T26277] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2355.321769][ T1919] cdc_ncm 2-1:1.0: bind() failure
[ 2355.327651][ T1919] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2355.334356][ T1919] cdc_ncm 2-1:1.1: bind() failure
[ 2355.343716][T11892] udc-core: couldn't find an available UDC or it's busy
[ 2355.350490][T11892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2355.358367][T30410] usb 5-1: USB disconnect, device number 50
[ 2355.371805][T30410] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2355.451767][ T3454] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2355.460962][ T3454] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2355.470960][ T3454] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2355.479772][ T3454] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2355.492618][    T6] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 2355.523481][T26277] usb 2-1: USB disconnect, device number 56
[ 2355.651758][ T3454] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2355.660606][ T3454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2355.669026][    T6] usb 3-1: device descriptor read/8, error -61
[ 2355.675012][ T3454] usb 1-1: Product: syz
[ 2355.678984][ T3454] usb 1-1: Manufacturer: syz
[ 2355.683512][ T3454] usb 1-1: SerialNumber: syz
[ 2355.722942][ T3454] cdc_ncm 1-1:1.0: skipping garbage
[ 2355.727994][ T3454] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2355.734588][ T3454] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2355.741168][ T3454] cdc_ncm 1-1:1.0: bind() failure
[ 2355.881692][    T6] usb 3-1: device descriptor read/8, error -71
[ 2355.922905][ T3454] usb 1-1: USB disconnect, device number 80
00:03:07 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x64000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521a28480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:07 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0)

00:03:07 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0xea, {0xea, 0xe, "ad4f95aabf62de808eb480262709d8a8dbd2b67f05b6db1734f9951785135f42dc9a7f6514e22a81fddd7f6477231932f89a6d4b0cd48c4099830fed6c2b878a6ca17b10e199890e5c6d5eb432d7242c71248ba693767c16f08202f6b02af3c2530610a30f39ae9e510e57a3f29d3b0f0d0986fa2ab0ca37d5015ab44fa526cb5caf514f6f612d7318f9c689936a670685663d12e084b9b0802f425b12f86f3b4786e6d00d199c860850434b464f6c75adf5730d5089c26aa5a8930c902faf70727797235a11aac712ace695a7e837739cb3b4450cba45643946ed796c967c4b2750695101172fac"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0x16, 0xd, "bf0b39ec5071f22c2eb3f3d0ed"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1f6, 0x2, 0x3f, 0xd5af, 0x2, 0x95d, 0x4, 0x400, 0x1000, 0x101, 0x0, 0x2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x97b}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000f00)={0x0, 0x7, 0x29, {0x29, 0x20, "d3de3dd63f134370639b2b174cbf7f73df2098e4592b5faf3e748efb0df9e625ad3e504e5d8ff8"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000f80)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@generic={0xf2, 0x10, 0xb, "60abe9c8de0b9f9d59a4514ca9964043a9840512712f5b36a917bf21086ee4e6b3f340dc1781d4027254e05206f3dcbaa5609030487a61498d5e91f156996374496eb7859671a4089f9926a0cc62f215f9d487b2836b78fbd5e37f48ba876378e5b27ef7f2238b62a2079cc91965d29a6c148b7a6cca65c78e28e0c86fc531a2131d7eaef4e5c46ece86a9444bc652781dd21edbb53d887962cfa802c7d48b575f260f61f6ca4df2a2da7cbcc1aa6b39b3ce65de4bedfe06615e682f792466e45c80c2732fcae5026c3c78469f7dae8c0cbb6ae5281273d174e4772fa06f341d4065cd3e675e59c032171829758b64"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0xc0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7f, 0x3}, @generic={0x8a, 0x10, 0x4, "dc623dc298f15a32c6bb57b093c1bf2541d2c81cdb062c1dbb3e16e0fed26fb28dfcbde1b9c2b9ff0502469d699c6f3eff1669a7bbd1e5a3ae06e0ef3bf6d8b2882f12dc7c9f77e94c0a3fcf8df971387abc47896733541d03c0c12cbb5753e4a273c80904746e0d2407199f23ea3248710fa410491107c59eac61570d68c0c051f37d66695f85"}]}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x5, 0x3, "34c5a90e", "66b89096"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0xcb, 0x7f, 0xaf, 0x1, 0x100}}}, &(0x7f0000001680)={0x84, &(0x7f0000001200)={0x20, 0xf, 0xa0, "1ba0719bdd59adff71d6cfa08f6e24a6de2779547f64785c07d3c49e8b9886babdcfd2a7c8c1e013c61f06ce7fbdfbdd39f1363bfc281fe71dfc4fa5428b65d1dec3c67d86f0f5fcc6deb33aa323bb5b233c018b3dc7cc71355e7c47805c90466efb505aaf12c1ba2fdae36190d72ab97b0bcc81dc2fa732c66c885cec8a628e1320bbd3d6eadab47565c9cc547ef3b00465dd03d9fb2090907f157407697a03"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x60, 0x4}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000001400)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000001440)={0x40, 0xb, 0x2, "8c6c"}, &(0x7f0000001480)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000014c0)={0x40, 0x13, 0x6}, &(0x7f0000001500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001540)={0x40, 0x19, 0x2, "1545"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000015c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0xfd}}) (async)
r1 = syz_usb_connect$cdc_ncm(0x3, 0xec, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "15315d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x400, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x25}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0xe0, 0x20}, @obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x0, 0x7f, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x4, 0x81, 0x6, 0xa7, 0x2}, @mdlm_detail={0x55, 0x24, 0x13, 0x4, "ce2158c8fa224153f43050e2c440c6a7ff66b7b550ad1449e83a435cc007f6e30d236e034c42f8e3ded92d0c6be0a19f3578e7fe568cffcdee51e6547f2598cada06a0d46851a523dabd8dca53aea49d3a"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x19, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x51, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x9, 0x2, 0x81, 0x40, 0x6}, 0x170, &(0x7f0000000700)={0x5, 0xf, 0x170, 0x5, [@generic={0x31, 0x10, 0x3, "c297e4de2d831b65f329a54f7a2cfacd8901039f074d15a7c696c82881e4bc129ab35a30d56bfa3725f5c56189fa"}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0xd1, 0xf000, 0x6, [0x3fc0, 0x3ff0, 0x30, 0x3f00, 0xc000, 0xff0000]}, @generic={0x100, 0x10, 0xa, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0x6, 0x6, 0xc0}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xff, 0xfe, 0x8, 0x40}]}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x424}}, {0xdb, &(0x7f00000008c0)=@string={0xdb, 0x3, "d0e38eb3f07541062daa2a878256d82821c85acb35060d6074f0c17c0daf31bec57a305d2a9c75d9ee50ee1273d242430273e17aaced34d5a3e1c74bfc1df73478035cae8b4a45cecc9885fabe9b8f2e0b87916ee2d638679395aff2dbc84676851ba8659c7c5f00a9904fd32c8508f65d75de74e881c68f78762940831504140908f2ee79cda509261171556d6000bc57fc6cbe9b386f9c1e63c5bbc6e60e2658be5ae69801578a5130af56e029ea60b21cc01e46bfefabbfc981439e120cc2191f13d3891ac09d277465a3f5f9bded58deddb5170a7e1549"}}, {0x80, &(0x7f00000009c0)=@string={0x80, 0x3, "907d0188038b73d696ffa4dff6f8f995859a668905e90f11e2cdc485a3166c98f11912e45d2654ec56a520389ded3927767055ceaede6856868424cb1146e138c394a9a1ba254bfb084179052b8541fb08069d45a1808f288bb4ce464abbcfec157d49bb9106154c36adb7ebb0abf04cb6238615875697beac778edf5425"}}]})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x20, 0xd, 0xaa, {0xaa, 0x10, "c2a9a8ff11e321b5e8bf7d5274e4ed0f8cdc3357e53006e71dea4a877b902fe4512abc585247b10b7377261f87adee1637939ce7db2551c514a5a44c1c5b0676c12fb68c2672b9d1778836600e45fe6f9b8538264497ed933b58a23d1b6e69c398b6218b6149654c9773480e7941be569ca9f4c34f529440f7164726aa328f9bdeb11666a93903d0a791dfea9df79a4b308fe2c3f38687073dc49378ebde30a639371bf258da47da"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x40, 0x10, 0xf7, "824160d449573d0a2b8024482f3a21496649504b8032ecdbfea054316874ad1f27256cd3c97e3fa6f49e199f7dcf59b86424246143a4516299f409fcf46aa33b470c00b2a43809dca70a811b476169ba0d9bbc3e719f83942211b0806e222f6e0dbe2bc1adcd408657c051cfdea63860ddf31bf38d2b4ec78d4ddc86a3c0b400d3fb514143bea4826b89a5659e23784a0828fd7b3839fb0f36cfbc37b4d2358b0f36317732c7afe172837792e3ae04b87f6e59cad018665bf17fc7acc02a7e50c232f1a0995a80ceae1f575900f1300eeeccaf9435abec65f876a9040ad5c090d2042831e2109af4d8c4359141ff8411cc47f6e9845df9"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0xda, 0x5, 0xfffff800, 0x7, 0x3f, 0xff, 0x7, 0x5, 0x5, 0x7035, 0x4, 0x84f}}, &(0x7f0000000d80)={0x20, 0x85, 0x4}, &(0x7f0000000dc0)={0x20, 0x83, 0x2}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000e40)={0x20, 0x89, 0x2}})

00:03:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x79000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2356.441688][T22633] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2356.449096][    T6] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 2356.491677][ T1919] usb 5-1: new high-speed USB device number 51 using dummy_hcd
00:03:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x80100200}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:08 executing program 0:

00:03:08 executing program 0:

00:03:08 executing program 0:

00:03:08 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)

[ 2356.621823][    T6] usb 3-1: device descriptor read/8, error -61
00:03:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x80400b00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2356.691644][T22633] usb 2-1: Using ep0 maxpacket: 32
[ 2356.811704][T22633] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2356.826820][T22633] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2356.836432][T22633] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2356.871727][ T1919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2356.901794][    T6] usb 3-1: device descriptor read/8, error -61
[ 2357.001720][T22633] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2357.010569][T22633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2357.018528][T22633] usb 2-1: Product: syz
[ 2357.022639][    T6] usb usb3-port1: unable to enumerate USB device
[ 2357.028791][T22633] usb 2-1: Manufacturer: syz
[ 2357.033406][T22633] usb 2-1: SerialNumber: syz
[ 2357.061763][ T1919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2357.070724][ T1919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2357.078778][ T1919] usb 5-1: Product: syz
[ 2357.082843][ T1919] usb 5-1: Manufacturer: syz
[ 2357.087237][ T1919] usb 5-1: SerialNumber: syz
[ 2357.672084][T12011] udc-core: couldn't find an available UDC or it's busy
[ 2357.678894][T12011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2357.731707][ T1919] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2357.737954][ T1919] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2357.745183][ T1919] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2357.781743][ T1919] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2357.788280][ T1919] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2357.982871][ T3454] usb 5-1: USB disconnect, device number 51
[ 2357.991694][ T3454] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2358.391727][T22633] cdc_ncm 2-1:1.0: bind() failure
[ 2358.397305][T22633] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2358.403929][T22633] cdc_ncm 2-1:1.1: bind() failure
[ 2358.592952][  T126] usb 2-1: USB disconnect, device number 57
00:03:10 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x81020000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:10 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6524528480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:10 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)

00:03:10 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0xea, {0xea, 0xe, "ad4f95aabf62de808eb480262709d8a8dbd2b67f05b6db1734f9951785135f42dc9a7f6514e22a81fddd7f6477231932f89a6d4b0cd48c4099830fed6c2b878a6ca17b10e199890e5c6d5eb432d7242c71248ba693767c16f08202f6b02af3c2530610a30f39ae9e510e57a3f29d3b0f0d0986fa2ab0ca37d5015ab44fa526cb5caf514f6f612d7318f9c689936a670685663d12e084b9b0802f425b12f86f3b4786e6d00d199c860850434b464f6c75adf5730d5089c26aa5a8930c902faf70727797235a11aac712ace695a7e837739cb3b4450cba45643946ed796c967c4b2750695101172fac"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x0, 0x16, 0xd, "bf0b39ec5071f22c2eb3f3d0ed"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1f6, 0x2, 0x3f, 0xd5af, 0x2, 0x95d, 0x4, 0x400, 0x1000, 0x101, 0x0, 0x2}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x97b}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000f00)={0x0, 0x7, 0x29, {0x29, 0x20, "d3de3dd63f134370639b2b174cbf7f73df2098e4592b5faf3e748efb0df9e625ad3e504e5d8ff8"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000f80)={0x0, 0xf, 0x195, {0x5, 0xf, 0x195, 0x4, [@generic={0xf2, 0x10, 0xb, "60abe9c8de0b9f9d59a4514ca9964043a9840512712f5b36a917bf21086ee4e6b3f340dc1781d4027254e05206f3dcbaa5609030487a61498d5e91f156996374496eb7859671a4089f9926a0cc62f215f9d487b2836b78fbd5e37f48ba876378e5b27ef7f2238b62a2079cc91965d29a6c148b7a6cca65c78e28e0c86fc531a2131d7eaef4e5c46ece86a9444bc652781dd21edbb53d887962cfa802c7d48b575f260f61f6ca4df2a2da7cbcc1aa6b39b3ce65de4bedfe06615e682f792466e45c80c2732fcae5026c3c78469f7dae8c0cbb6ae5281273d174e4772fa06f341d4065cd3e675e59c032171829758b64"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0xc0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7f, 0x3}, @generic={0x8a, 0x10, 0x4, "dc623dc298f15a32c6bb57b093c1bf2541d2c81cdb062c1dbb3e16e0fed26fb28dfcbde1b9c2b9ff0502469d699c6f3eff1669a7bbd1e5a3ae06e0ef3bf6d8b2882f12dc7c9f77e94c0a3fcf8df971387abc47896733541d03c0c12cbb5753e4a273c80904746e0d2407199f23ea3248710fa410491107c59eac61570d68c0c051f37d66695f85"}]}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x5, 0x3, "34c5a90e", "66b89096"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0xcb, 0x7f, 0xaf, 0x1, 0x100}}}, &(0x7f0000001680)={0x84, &(0x7f0000001200)={0x20, 0xf, 0xa0, "1ba0719bdd59adff71d6cfa08f6e24a6de2779547f64785c07d3c49e8b9886babdcfd2a7c8c1e013c61f06ce7fbdfbdd39f1363bfc281fe71dfc4fa5428b65d1dec3c67d86f0f5fcc6deb33aa323bb5b233c018b3dc7cc71355e7c47805c90466efb505aaf12c1ba2fdae36190d72ab97b0bcc81dc2fa732c66c885cec8a628e1320bbd3d6eadab47565c9cc547ef3b00465dd03d9fb2090907f157407697a03"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x60, 0x4}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000001400)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000001440)={0x40, 0xb, 0x2, "8c6c"}, &(0x7f0000001480)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000014c0)={0x40, 0x13, 0x6}, &(0x7f0000001500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001540)={0x40, 0x19, 0x2, "1545"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000015c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0xfd}}) (async)
r1 = syz_usb_connect$cdc_ncm(0x3, 0xec, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x2, 0x1, 0x3, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "15315d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x400, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x25}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0xe0, 0x20}, @obex={0x5, 0x24, 0x15, 0x1}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x0, 0x7f, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x4, 0x81, 0x6, 0xa7, 0x2}, @mdlm_detail={0x55, 0x24, 0x13, 0x4, "ce2158c8fa224153f43050e2c440c6a7ff66b7b550ad1449e83a435cc007f6e30d236e034c42f8e3ded92d0c6be0a19f3578e7fe568cffcdee51e6547f2598cada06a0d46851a523dabd8dca53aea49d3a"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x19, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x51, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x9, 0x2, 0x81, 0x40, 0x6}, 0x170, &(0x7f0000000700)={0x5, 0xf, 0x170, 0x5, [@generic={0x31, 0x10, 0x3, "c297e4de2d831b65f329a54f7a2cfacd8901039f074d15a7c696c82881e4bc129ab35a30d56bfa3725f5c56189fa"}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0xd1, 0xf000, 0x6, [0x3fc0, 0x3ff0, 0x30, 0x3f00, 0xc000, 0xff0000]}, @generic={0x100, 0x10, 0xa, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0x6, 0x6, 0xc0}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0xff, 0xfe, 0x8, 0x40}]}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x424}}, {0xdb, &(0x7f00000008c0)=@string={0xdb, 0x3, "d0e38eb3f07541062daa2a878256d82821c85acb35060d6074f0c17c0daf31bec57a305d2a9c75d9ee50ee1273d242430273e17aaced34d5a3e1c74bfc1df73478035cae8b4a45cecc9885fabe9b8f2e0b87916ee2d638679395aff2dbc84676851ba8659c7c5f00a9904fd32c8508f65d75de74e881c68f78762940831504140908f2ee79cda509261171556d6000bc57fc6cbe9b386f9c1e63c5bbc6e60e2658be5ae69801578a5130af56e029ea60b21cc01e46bfefabbfc981439e120cc2191f13d3891ac09d277465a3f5f9bded58deddb5170a7e1549"}}, {0x80, &(0x7f00000009c0)=@string={0x80, 0x3, "907d0188038b73d696ffa4dff6f8f995859a668905e90f11e2cdc485a3166c98f11912e45d2654ec56a520389ded3927767055ceaede6856868424cb1146e138c394a9a1ba254bfb084179052b8541fb08069d45a1808f288bb4ce464abbcfec157d49bb9106154c36adb7ebb0abf04cb6238615875697beac778edf5425"}}]})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x20, 0xd, 0xaa, {0xaa, 0x10, "c2a9a8ff11e321b5e8bf7d5274e4ed0f8cdc3357e53006e71dea4a877b902fe4512abc585247b10b7377261f87adee1637939ce7db2551c514a5a44c1c5b0676c12fb68c2672b9d1778836600e45fe6f9b8538264497ed933b58a23d1b6e69c398b6218b6149654c9773480e7941be569ca9f4c34f529440f7164726aa328f9bdeb11666a93903d0a791dfea9df79a4b308fe2c3f38687073dc49378ebde30a639371bf258da47da"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x40, 0x10, 0xf7, "824160d449573d0a2b8024482f3a21496649504b8032ecdbfea054316874ad1f27256cd3c97e3fa6f49e199f7dcf59b86424246143a4516299f409fcf46aa33b470c00b2a43809dca70a811b476169ba0d9bbc3e719f83942211b0806e222f6e0dbe2bc1adcd408657c051cfdea63860ddf31bf38d2b4ec78d4ddc86a3c0b400d3fb514143bea4826b89a5659e23784a0828fd7b3839fb0f36cfbc37b4d2358b0f36317732c7afe172837792e3ae04b87f6e59cad018665bf17fc7acc02a7e50c232f1a0995a80ceae1f575900f1300eeeccaf9435abec65f876a9040ad5c090d2042831e2109af4d8c4359141ff8411cc47f6e9845df9"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0xda, 0x5, 0xfffff800, 0x7, 0x3f, 0xff, 0x7, 0x5, 0x5, 0x7035, 0x4, 0x84f}}, &(0x7f0000000d80)={0x20, 0x85, 0x4}, &(0x7f0000000dc0)={0x20, 0x83, 0x2}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000e40)={0x20, 0x89, 0x2}})

00:03:10 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0)

00:03:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x983a0000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2359.501723][ T3454] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2359.581692][ T1919] usb 5-1: new high-speed USB device number 52 using dummy_hcd
00:03:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x9bc42000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:11 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)

[ 2359.751662][ T3454] usb 2-1: Using ep0 maxpacket: 32
00:03:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xb7000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2359.781643][  T126] usb 3-1: new high-speed USB device number 107 using dummy_hcd
00:03:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xcc0e0000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2359.881698][ T3454] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2359.893262][ T3454] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2359.902840][ T3454] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
00:03:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521914480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2359.956682][ T1919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2360.277784][  T126] usb 3-1: device descriptor read/64, error 18
[ 2360.341776][ T3454] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2360.350846][ T3454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2360.358821][ T3454] usb 2-1: Product: syz
[ 2360.361744][ T1919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2360.362993][ T3454] usb 2-1: Manufacturer: syz
[ 2360.371978][ T1919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2360.376080][ T3454] usb 2-1: SerialNumber: syz
[ 2360.384218][ T1919] usb 5-1: Product: syz
[ 2360.392449][ T1919] usb 5-1: Manufacturer: syz
[ 2360.396895][ T1919] usb 5-1: SerialNumber: syz
[ 2360.671664][  T126] usb 3-1: device descriptor read/64, error 18
[ 2360.941706][  T126] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 2361.122436][T12099] udc-core: couldn't find an available UDC or it's busy
[ 2361.129235][T12099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2361.191686][ T1919] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2361.197968][ T1919] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2361.205345][ T1919] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2361.211675][  T126] usb 3-1: device descriptor read/64, error 18
[ 2361.241709][ T1919] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2361.248292][ T1919] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2361.583435][ T2549] usb 5-1: USB disconnect, device number 52
[ 2361.601658][ T2549] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2361.621646][  T126] usb 3-1: device descriptor read/64, error 18
[ 2361.741723][ T3454] cdc_ncm 2-1:1.0: bind() failure
[ 2361.741840][  T126] usb usb3-port1: attempt power cycle
[ 2361.747467][ T3454] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2361.758406][ T3454] cdc_ncm 2-1:1.1: bind() failure
[ 2361.949268][ T3454] usb 2-1: USB disconnect, device number 58
[ 2362.171663][  T126] usb 3-1: new high-speed USB device number 109 using dummy_hcd
00:03:13 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xd0070000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:13 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0)

00:03:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521922480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:13 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x201}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0x40, {0x40, 0x22, "32680848bf9692d53b0594bbd8131eb8c59a432173c3cf910759cad88282e0b6600af43556c034ba66859cacc6cbe7dad9ab610c1eb38cf73ea3bddc0ef6"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1f, "f3a619ca55649c3b060bef6ee61ea0bcd80123d72ee8b1e44569906da02eee"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x41a0, 0x200, 0x1f, 0x3, 0x0, 0xffff, 0x3ff, 0x7, 0x2, 0x80, 0x64, 0x101}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x96}, &(0x7f00000002c0)={0x20, 0x83, 0x48, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x933}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:13 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)

[ 2362.779761][  T126] usb 3-1: device not accepting address 109, error -71
00:03:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xe2000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2362.851640][T26277] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 2362.859066][ T3454] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 2362.921694][ T2549] usb 5-1: new high-speed USB device number 53 using dummy_hcd
00:03:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xe8030000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2363.101634][T26277] usb 2-1: Using ep0 maxpacket: 32
00:03:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xf2000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2363.131673][ T3454] usb 1-1: device descriptor read/64, error 18
[ 2363.191693][  T126] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 2363.221689][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2363.232698][T26277] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2363.242500][T26277] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
00:03:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480ae9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xf4010000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2363.321888][ T2549] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2363.371715][  T126] usb 3-1: device descriptor read/8, error -61
[ 2363.412097][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2363.421264][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2363.429435][T26277] usb 2-1: Product: syz
[ 2363.433886][T26277] usb 2-1: Manufacturer: syz
[ 2363.454631][T26277] usb 2-1: SerialNumber: syz
[ 2363.631126][ T3454] usb 1-1: device descriptor read/64, error 18
00:03:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xff000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2363.801772][ T2549] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2363.810622][ T2549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2363.818821][ T2549] usb 5-1: Product: syz
[ 2363.822963][ T2549] usb 5-1: Manufacturer: syz
[ 2363.827354][ T2549] usb 5-1: SerialNumber: syz
[ 2363.871701][  T126] usb 3-1: device descriptor read/8, error -61
[ 2363.921652][ T3454] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 2363.991701][  T126] usb usb3-port1: unable to enumerate USB device
[ 2364.191674][ T3454] usb 1-1: device descriptor read/64, error 18
[ 2364.591658][ T3454] usb 1-1: device descriptor read/64, error 18
[ 2364.721775][ T3454] usb usb1-port1: attempt power cycle
[ 2364.731813][ T2549] cdc_ncm 5-1:1.0: bind() failure
[ 2364.738065][ T2549] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2364.744766][ T2549] cdc_ncm 5-1:1.1: bind() failure
[ 2364.751934][ T2549] usb 5-1: USB disconnect, device number 53
[ 2364.931720][T26277] cdc_ncm 2-1:1.0: bind() failure
[ 2364.937721][T26277] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2364.944503][T26277] cdc_ncm 2-1:1.1: bind() failure
[ 2365.132798][T26277] usb 2-1: USB disconnect, device number 59
[ 2365.151685][ T3454] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 2365.321681][ T3454] usb 1-1: device descriptor read/8, error -61
[ 2365.531744][ T3454] usb 1-1: device descriptor read/8, error -71
00:03:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480ce9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xffffff7f}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:17 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x201}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0x40, {0x40, 0x22, "32680848bf9692d53b0594bbd8131eb8c59a432173c3cf910759cad88282e0b6600af43556c034ba66859cacc6cbe7dad9ab610c1eb38cf73ea3bddc0ef6"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1f, "f3a619ca55649c3b060bef6ee61ea0bcd80123d72ee8b1e44569906da02eee"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x41a0, 0x200, 0x1f, 0x3, 0x0, 0xffff, 0x3ff, 0x7, 0x2, 0x80, 0x64, 0x101}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x96}, &(0x7f00000002c0)={0x20, 0x83, 0x48, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x933}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:17 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:17 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0)

00:03:17 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)

[ 2366.051674][T22633] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 2366.059108][ T3454] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2366.121658][ T2549] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 2366.129092][  T126] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 2366.291683][ T3454] usb 1-1: device descriptor read/8, error -61
[ 2366.371674][ T2549] usb 2-1: Using ep0 maxpacket: 32
[ 2366.401683][  T126] usb 3-1: device descriptor read/64, error 18
00:03:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480de9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x8000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2366.481813][T22633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2366.513181][ T2549] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2366.524027][ T2549] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2366.533581][ T2549] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2366.662103][ T3454] usb 1-1: device descriptor read/8, error -61
[ 2366.881801][T22633] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2366.890834][T22633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2366.898672][T22633] usb 5-1: Product: syz
[ 2366.902727][T22633] usb 5-1: Manufacturer: syz
[ 2366.907143][T22633] usb 5-1: SerialNumber: syz
[ 2366.921752][ T2549] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2366.931556][ T2549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2366.939594][ T2549] usb 2-1: Product: syz
[ 2366.943697][ T2549] usb 2-1: Manufacturer: syz
[ 2366.948181][ T2549] usb 2-1: SerialNumber: syz
[ 2366.961710][ T3454] usb usb1-port1: unable to enumerate USB device
[ 2367.031667][  T126] usb 3-1: device descriptor read/64, error 18
[ 2367.301645][  T126] usb 3-1: new high-speed USB device number 112 using dummy_hcd
00:03:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480fe9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x10000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x20000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2367.741679][T22633] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[ 2367.747630][T22633] cdc_ncm 5-1:1.0: bind() failure
[ 2367.754264][T22633] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2367.760922][T22633] cdc_ncm 5-1:1.1: bind() failure
[ 2367.771657][  T126] usb 3-1: device descriptor read/64, error 18
00:03:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x40000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2368.161652][  T126] usb 3-1: device descriptor read/64, error 18
00:03:19 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf65219284817e9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2368.281718][  T126] usb usb3-port1: attempt power cycle
[ 2368.529641][ T2549] cdc_ncm 2-1:1.0: bind() failure
[ 2368.535620][ T2549] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2368.542381][ T2549] cdc_ncm 2-1:1.1: bind() failure
[ 2368.749584][ T2549] usb 2-1: USB disconnect, device number 60
00:03:20 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x201}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0x40, {0x40, 0x22, "32680848bf9692d53b0594bbd8131eb8c59a432173c3cf910759cad88282e0b6600af43556c034ba66859cacc6cbe7dad9ab610c1eb38cf73ea3bddc0ef6"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1f, "f3a619ca55649c3b060bef6ee61ea0bcd80123d72ee8b1e44569906da02eee"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x41a0, 0x200, 0x1f, 0x3, 0x0, 0xffff, 0x3ff, 0x7, 0x2, 0x80, 0x64, 0x101}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x96}, &(0x7f00000002c0)={0x20, 0x83, 0x48, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x933}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2369.055127][T22633] usb 5-1: USB disconnect, device number 54
00:03:20 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x2000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:20 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)

00:03:20 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0)

00:03:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf65219284818e9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2369.687053][T22633] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 2369.721738][  T126] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 2369.761677][    T6] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 2369.769117][ T3454] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 2369.931731][  T126] usb 3-1: device descriptor read/8, error -61
[ 2370.011762][ T3454] usb 2-1: Using ep0 maxpacket: 32
[ 2370.041680][    T6] usb 1-1: device descriptor read/64, error 18
[ 2370.051837][T22633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:03:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x20000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf65219284845e9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2370.141722][ T3454] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2370.152558][ T3454] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2370.162298][ T3454] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2370.252128][T22633] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2370.272897][T22633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:03:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x40000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2370.444511][T22633] usb 5-1: Product: syz
[ 2370.448518][T22633] usb 5-1: Manufacturer: syz
[ 2370.457495][T22633] usb 5-1: SerialNumber: syz
[ 2370.478030][  T126] usb 3-1: device descriptor read/8, error -61
[ 2370.521765][ T3454] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2370.532852][ T3454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2370.541373][ T3454] usb 2-1: Product: syz
[ 2370.545638][ T3454] usb 2-1: Manufacturer: syz
[ 2370.550068][ T3454] usb 2-1: SerialNumber: syz
00:03:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x80000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2370.671696][    T6] usb 1-1: device descriptor read/64, error 18
00:03:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x80070000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2370.761668][  T126] usb 3-1: new high-speed USB device number 114 using dummy_hcd
00:03:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x80080000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2370.941656][    T6] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 2370.961730][  T126] usb 3-1: device descriptor read/8, error -61
[ 2371.211665][    T6] usb 1-1: device descriptor read/64, error 18
[ 2371.261674][  T126] usb 3-1: device descriptor read/8, error -61
[ 2371.341735][T22633] cdc_ncm 5-1:1.0: bind() failure
[ 2371.347992][T22633] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2371.354758][T22633] cdc_ncm 5-1:1.1: bind() failure
[ 2371.362042][T22633] usb 5-1: USB disconnect, device number 55
[ 2371.381701][  T126] usb usb3-port1: unable to enumerate USB device
[ 2371.601669][    T6] usb 1-1: device descriptor read/64, error 18
[ 2371.721738][    T6] usb usb1-port1: attempt power cycle
00:03:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af8261225c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2372.137155][ T3454] cdc_ncm 2-1:1.0: bind() failure
[ 2372.146650][ T3454] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2372.153432][ T3454] cdc_ncm 2-1:1.1: bind() failure
[ 2372.211643][    T6] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 2372.321789][    T6] usb 1-1: device descriptor read/8, error -71
[ 2372.332899][ T3454] usb 2-1: USB disconnect, device number 61
[ 2372.531684][    T6] usb 1-1: device descriptor read/8, error -71
00:03:24 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:24 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f010000000000"], 0x0)

00:03:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xff040000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:24 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)

00:03:24 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661e4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:24 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_connect$uac1(0x5, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x20, 0xe0, 0xe1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3c}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x0, "81e4aaf8"}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x5, 0x1, '\\'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, "7bb3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd4, 0x2, 0x81, 0x1, "ff3ff625"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x4, 0x8, {0x7, 0x25, 0x1, 0x1, 0x0, 0xffff}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0x80, 0x0, 0x20, 0x2}, 0xe2, &(0x7f0000000180)={0x5, 0xf, 0xe2, 0x6, [@ptm_cap={0x3}, @generic={0xb9, 0x10, 0x4, "7dacd11e497b5fc52e2b2d3feb699ccbea314f0b30b53bc51526d3309ae94771b63a4fb756a081daacb7fdb5f601dc0d0cf79ee84b95afdd9b237450a046c8e265016c13b9e6fdb2695bc513a73392c1b17a83c7f336853a4bdfea6a00978c48abbfcea9463e115ba7a4cc8535488bdd1f22458878466775f12dde54237577803d6583828e9b2d0ab57752035aed510a3b0ab1da626b013b9efbc832adbadb2c978d056dc7cac23cbf2b63ecd49dc5df0482e5d14bfc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x75, 0xae5a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xfd, 0x1, 0x1f}, @ptm_cap={0x3}]}, 0x1, [{0x23, &(0x7f0000000280)=@string={0x23, 0x3, "5aea99cc3730aa45d31cd5ffe3cb8b5b1d3342a7fbc661fc8bd889c2098134c01a"}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x2, 0xcc, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3f, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x844a, 0x7f}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x0, 0x0, "594fec"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x8001, 0x80, "fe1376"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x4, 0x0, 0xff, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1d, 0x52, 0x1001}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x8, 0x80, "2e835edc63d2ff"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x0, "", "f5ce1d"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x4, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xc12, 0x5, "bba66819886bc8084c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x8, 0x40}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x8, 0x3, 0x80, 0x8, 0x1}, 0x10, &(0x7f0000000900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x5, 0x5, 0xd73c, 0x1}]}, 0x9, [{0xaa, &(0x7f0000000940)=@string={0xaa, 0x3, "1e1e9c4de9c5715829bb7e5de4d1560175c7284d2f130cfcb1b883ffd59a311dd561297e55f9c5a8417adb68658218fb63725a8769bf699ed01e9502790087a89a780685554f1f9b085d78c0f7ba8ef23563be6b67ecf3c71d4621560710c8bcbc3fc49c591ffb89b4bb1e3874c8765595aa4b14f8eb46ff4c20f425474d1928cac5027948960e6c4bd12699d6c7699be1fc28d7f6b9c47526042da2edbb7979587440f127e2a614"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x1a, &(0x7f0000000a80)=@string={0x1a, 0x3, "e12e90ee7e7820549e9e040610ccbcbc2236c72f41e5defd"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x83e}}, {0xf8, &(0x7f0000000b40)=@string={0xf8, 0x3, "efed421be66184b2837e5463ff990da2adfd563e66def27d55d96b3091dbe3a98f3e293da254614ebbc8eafdd92b994c6d9b605f6a6ec9846e2f5b6db3ede231aa9cccf49b217d98c81050d85af01fe4ec8aaf29c54e6f09545d06f4ce20fc115e0b2afc433489c6724989005a9869008ac16710a05f426665157d129e98c7f4d5e965f549e21a2703f0848b6ea5208e3e5dcf4096594e3ddd065263eae376cb9ac2291c9884b2c7120bef775f1e88c0931fcd49514489fcb5c63d704e0c899df487b927487eb82b2fbdb39d92960543239c22f0dd64668cb523daa809dd5c1c5106fed4c420ae45da27a9b925e86f3fa6c3fef60e90"}}, {0x3a, &(0x7f0000000c40)=@string={0x3a, 0x3, "3859f4492040af6b3d7b7da609790008588505137fae26330dc5ae385bd6798c03f095910b3c1585aa6d150a9c03aac31b1542efd8c39ee3"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_connect$uac1(0x1, 0x10c, &(0x7f0000000d80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x38, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x0, 0xc0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x0, 0xff, "8bb5a8"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7, "4d56d0520381"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x2, 0x0, 0xffff, 0x3, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x81, "1f"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x2, 0x4, 0x401, 0x3f, 0xe3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x1, "", '9,'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x2, "ffa72d160d033c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5f}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x8, "ba8a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x8000, 0x1, "460a8c0ffa98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x5, 0x7a, {0x7, 0x25, 0x1, 0x83, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x69e, 0x1d5, 0xb3, "39aa50"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x22, 0x8, "a31e", "934835"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x20, 0x96, {0x7, 0x25, 0x1, 0x80, 0x4, 0xad}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x3f, 0x37, 0x2f, 0x8, 0x8}, 0x1a, &(0x7f0000000f00)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x19, 0x7, 0x1, 0x6, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x40, 0x9}]}, 0x3, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x418}}, {0xc5, &(0x7f0000000f80)=@string={0xc5, 0x3, "94d78563da67e98451fe0dd233c41aba4c2fe043b82aa7b5a156bc6a8027c3eba87f46a62b4cf275411481ec238b44bd25ecec22f26ccda1deb9d1b8ce78f8f52b02741e04f2ee13c4a57e9d9441a5e1416d5d4d16744550e85fdb5d9ceea10219adb241785e0fc8fb00c7c7be2bc63f1f91d81d469a67faf2d6998c3dd21e6376abe82418a3f275267c272aecf17abb1817431d340c7ff27a6109a3ae9adf841cd5288abedf9a457da3115a6a0157670d577351634ce20cdb71d24cb740351323dbc9"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2001}}]})
syz_usb_connect$cdc_ecm(0x4, 0x1f9, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e7, 0x1, 0x1, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x467b, 0x5, 0x81}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x8001, 0x9, 0xff, 0xffc1, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x1000, [0x8a2, 0x2, 0x3, 0x2, 0x4]}, @mdlm_detail={0xb9, 0x24, 0x13, 0x0, "4e77e2f8b97fab02648444e01a3978b84fdfd91754c1b92a432e639c47aee7735ff6f49d4aa1a57a470d5c85741beb0c2e943ad2020dd2bfce02f75d21d7e1ccf24b590ba69713014d551eefcedbbbda800931466e3cce49bd99cd49cf3845993050f37c867abd69fb23eaf709f1d2b0d0eb0b9bed1af98070f772e65a727d437d671199a6c5ec0dcd121fb3a5fa82edc102c5dbf9c4a8853dcc585d66ec4c5d241e26ec2faef817b6ea745e6824fdae9a106ac7b6"}, @mdlm_detail={0xc6, 0x24, 0x13, 0x0, "dff7bcc2d20314785eb20b81be0ff28e992dd44ef95f178c0c293e8e914596414adb0407b5601c0ae06d4409e2bb1a582dd0ebb7897c35fd7802b6a40b8bb92aa7847f4b32b83bd1de8ca0e3f815bd9ff6e394d729da4efaf51da7ca9731febb46d105bdbda7a4d99181e58e3002016127b269583141f106286673c082fe824c857fde41a2215c76e817fcf92e7fa1e4a13b652a086af894e1edc1ba3bf4a41feb4e418903100e747499bfc108bc4976e97edc25a6741abbf291886520b38d9738be"}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x800, [0x4]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0xfa, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x0, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x7, 0x5, 0x1, 0x40, 0x1f}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81d}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x4, 0x61, &(0x7f0000000500)="275a0f141aea58aec0cfb0708d10968f8cdd51dc7fb80ce42138b1aac3cac1b9fecc5c2b5ddbf82705adf996ecd264e2b3b0bb4e54005e2355b38e4071147c4d0cab7a0302d592caedbdb4713e09cfbeeba53724b22cbf0bc1f34698ac614906a3")
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x100000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2373.341680][ T1919] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 2373.349092][ T2549] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 2373.356598][  T126] usb 5-1: new high-speed USB device number 56 using dummy_hcd
00:03:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x200000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2373.481646][    T6] usb 1-1: new high-speed USB device number 88 using dummy_hcd
00:03:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x300000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c66454110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2373.631687][ T1919] usb 2-1: Using ep0 maxpacket: 32
[ 2373.651707][    T6] usb 1-1: device descriptor read/8, error -61
00:03:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x400000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2374.034195][  T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2374.045637][ T2549] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2374.056201][ T1919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2374.067204][ T2549] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2374.081686][    T6] usb 1-1: device descriptor read/8, error -61
[ 2374.083601][ T2549] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x500000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2374.201794][    T6] usb usb1-port1: unable to enumerate USB device
[ 2374.251735][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2374.260670][ T1919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2374.281789][ T2549] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2374.290647][ T2549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2374.298616][ T1919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2374.306538][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2374.314501][ T1919] usb 2-1: Product: syz
[ 2374.318471][ T1919] usb 2-1: Manufacturer: syz
[ 2374.323047][  T126] usb 5-1: Product: syz
[ 2374.327013][  T126] usb 5-1: Manufacturer: syz
[ 2374.331440][  T126] usb 5-1: SerialNumber: syz
[ 2374.336038][ T2549] usb 3-1: Product: syz
[ 2374.340088][ T2549] usb 3-1: Manufacturer: syz
[ 2374.344597][ T1919] usb 2-1: SerialNumber: syz
[ 2374.349300][ T2549] usb 3-1: SerialNumber: syz
[ 2374.392738][ T2549] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2374.399365][ T2549] cdc_ncm 3-1:1.0: bind() failure
[ 2374.592179][T12305] udc-core: couldn't find an available UDC or it's busy
[ 2374.595475][ T2549] usb 3-1: USB disconnect, device number 115
[ 2374.599001][T12305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2375.262117][T12305] udc-core: couldn't find an available UDC or it's busy
[ 2375.268891][T12305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2375.276563][T12305] udc-core: couldn't find an available UDC or it's busy
[ 2375.283385][T12305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2375.491910][T12305] udc-core: couldn't find an available UDC or it's busy
[ 2375.498716][T12305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2375.511733][  T126] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2375.518187][  T126] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2375.525443][ T1919] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2375.531648][ T1919] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2375.538834][ T1919] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2375.544335][  T126] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2375.731703][ T1919] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2375.737303][  T126] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2375.743990][  T126] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2375.755299][ T1919] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2375.772865][ T1919] usb 2-1: USB disconnect, device number 62
[ 2375.779063][  T126] usb 5-1: USB disconnect, device number 56
[ 2375.785162][ T1919] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2375.794808][  T126] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
00:03:27 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)

00:03:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x600000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f2210adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:27 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_connect$uac1(0x5, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x20, 0xe0, 0xe1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3c}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x0, "81e4aaf8"}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x5, 0x1, '\\'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, "7bb3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd4, 0x2, 0x81, 0x1, "ff3ff625"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x4, 0x8, {0x7, 0x25, 0x1, 0x1, 0x0, 0xffff}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0x80, 0x0, 0x20, 0x2}, 0xe2, &(0x7f0000000180)={0x5, 0xf, 0xe2, 0x6, [@ptm_cap={0x3}, @generic={0xb9, 0x10, 0x4, "7dacd11e497b5fc52e2b2d3feb699ccbea314f0b30b53bc51526d3309ae94771b63a4fb756a081daacb7fdb5f601dc0d0cf79ee84b95afdd9b237450a046c8e265016c13b9e6fdb2695bc513a73392c1b17a83c7f336853a4bdfea6a00978c48abbfcea9463e115ba7a4cc8535488bdd1f22458878466775f12dde54237577803d6583828e9b2d0ab57752035aed510a3b0ab1da626b013b9efbc832adbadb2c978d056dc7cac23cbf2b63ecd49dc5df0482e5d14bfc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x75, 0xae5a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xfd, 0x1, 0x1f}, @ptm_cap={0x3}]}, 0x1, [{0x23, &(0x7f0000000280)=@string={0x23, 0x3, "5aea99cc3730aa45d31cd5ffe3cb8b5b1d3342a7fbc661fc8bd889c2098134c01a"}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x2, 0xcc, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3f, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x844a, 0x7f}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x0, 0x0, "594fec"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x8001, 0x80, "fe1376"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x4, 0x0, 0xff, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1d, 0x52, 0x1001}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x8, 0x80, "2e835edc63d2ff"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x0, "", "f5ce1d"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x4, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xc12, 0x5, "bba66819886bc8084c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x8, 0x40}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x8, 0x3, 0x80, 0x8, 0x1}, 0x10, &(0x7f0000000900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x5, 0x5, 0xd73c, 0x1}]}, 0x9, [{0xaa, &(0x7f0000000940)=@string={0xaa, 0x3, "1e1e9c4de9c5715829bb7e5de4d1560175c7284d2f130cfcb1b883ffd59a311dd561297e55f9c5a8417adb68658218fb63725a8769bf699ed01e9502790087a89a780685554f1f9b085d78c0f7ba8ef23563be6b67ecf3c71d4621560710c8bcbc3fc49c591ffb89b4bb1e3874c8765595aa4b14f8eb46ff4c20f425474d1928cac5027948960e6c4bd12699d6c7699be1fc28d7f6b9c47526042da2edbb7979587440f127e2a614"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x1a, &(0x7f0000000a80)=@string={0x1a, 0x3, "e12e90ee7e7820549e9e040610ccbcbc2236c72f41e5defd"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x83e}}, {0xf8, &(0x7f0000000b40)=@string={0xf8, 0x3, "efed421be66184b2837e5463ff990da2adfd563e66def27d55d96b3091dbe3a98f3e293da254614ebbc8eafdd92b994c6d9b605f6a6ec9846e2f5b6db3ede231aa9cccf49b217d98c81050d85af01fe4ec8aaf29c54e6f09545d06f4ce20fc115e0b2afc433489c6724989005a9869008ac16710a05f426665157d129e98c7f4d5e965f549e21a2703f0848b6ea5208e3e5dcf4096594e3ddd065263eae376cb9ac2291c9884b2c7120bef775f1e88c0931fcd49514489fcb5c63d704e0c899df487b927487eb82b2fbdb39d92960543239c22f0dd64668cb523daa809dd5c1c5106fed4c420ae45da27a9b925e86f3fa6c3fef60e90"}}, {0x3a, &(0x7f0000000c40)=@string={0x3a, 0x3, "3859f4492040af6b3d7b7da609790008588505137fae26330dc5ae385bd6798c03f095910b3c1585aa6d150a9c03aac31b1542efd8c39ee3"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_connect$uac1(0x1, 0x10c, &(0x7f0000000d80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x38, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x0, 0xc0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x0, 0xff, "8bb5a8"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7, "4d56d0520381"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x2, 0x0, 0xffff, 0x3, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x81, "1f"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x2, 0x4, 0x401, 0x3f, 0xe3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x1, "", '9,'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x2, "ffa72d160d033c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5f}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x8, "ba8a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x8000, 0x1, "460a8c0ffa98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x5, 0x7a, {0x7, 0x25, 0x1, 0x83, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x69e, 0x1d5, 0xb3, "39aa50"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x22, 0x8, "a31e", "934835"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x20, 0x96, {0x7, 0x25, 0x1, 0x80, 0x4, 0xad}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x3f, 0x37, 0x2f, 0x8, 0x8}, 0x1a, &(0x7f0000000f00)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x19, 0x7, 0x1, 0x6, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x40, 0x9}]}, 0x3, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x418}}, {0xc5, &(0x7f0000000f80)=@string={0xc5, 0x3, "94d78563da67e98451fe0dd233c41aba4c2fe043b82aa7b5a156bc6a8027c3eba87f46a62b4cf275411481ec238b44bd25ecec22f26ccda1deb9d1b8ce78f8f52b02741e04f2ee13c4a57e9d9441a5e1416d5d4d16744550e85fdb5d9ceea10219adb241785e0fc8fb00c7c7be2bc63f1f91d81d469a67faf2d6998c3dd21e6376abe82418a3f275267c272aecf17abb1817431d340c7ff27a6109a3ae9adf841cd5288abedf9a457da3115a6a0157670d577351634ce20cdb71d24cb740351323dbc9"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2001}}]})
syz_usb_connect$cdc_ecm(0x4, 0x1f9, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e7, 0x1, 0x1, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x467b, 0x5, 0x81}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x8001, 0x9, 0xff, 0xffc1, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x1000, [0x8a2, 0x2, 0x3, 0x2, 0x4]}, @mdlm_detail={0xb9, 0x24, 0x13, 0x0, "4e77e2f8b97fab02648444e01a3978b84fdfd91754c1b92a432e639c47aee7735ff6f49d4aa1a57a470d5c85741beb0c2e943ad2020dd2bfce02f75d21d7e1ccf24b590ba69713014d551eefcedbbbda800931466e3cce49bd99cd49cf3845993050f37c867abd69fb23eaf709f1d2b0d0eb0b9bed1af98070f772e65a727d437d671199a6c5ec0dcd121fb3a5fa82edc102c5dbf9c4a8853dcc585d66ec4c5d241e26ec2faef817b6ea745e6824fdae9a106ac7b6"}, @mdlm_detail={0xc6, 0x24, 0x13, 0x0, "dff7bcc2d20314785eb20b81be0ff28e992dd44ef95f178c0c293e8e914596414adb0407b5601c0ae06d4409e2bb1a582dd0ebb7897c35fd7802b6a40b8bb92aa7847f4b32b83bd1de8ca0e3f815bd9ff6e394d729da4efaf51da7ca9731febb46d105bdbda7a4d99181e58e3002016127b269583141f106286673c082fe824c857fde41a2215c76e817fcf92e7fa1e4a13b652a086af894e1edc1ba3bf4a41feb4e418903100e747499bfc108bc4976e97edc25a6741abbf291886520b38d9738be"}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x800, [0x4]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0xfa, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x0, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x7, 0x5, 0x1, 0x40, 0x1f}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81d}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x4, 0x61, &(0x7f0000000500)="275a0f141aea58aec0cfb0708d10968f8cdd51dc7fb80ce42138b1aac3cac1b9fecc5c2b5ddbf82705adf996ecd264e2b3b0bb4e54005e2355b38e4071147c4d0cab7a0302d592caedbdb4713e09cfbeeba53724b22cbf0bc1f34698ac614906a3")
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
syz_usb_connect$uac1(0x5, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x20, 0xe0, 0xe1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3c}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x0, "81e4aaf8"}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x5, 0x1, '\\'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, "7bb3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd4, 0x2, 0x81, 0x1, "ff3ff625"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x4, 0x8, {0x7, 0x25, 0x1, 0x1, 0x0, 0xffff}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0x80, 0x0, 0x20, 0x2}, 0xe2, &(0x7f0000000180)={0x5, 0xf, 0xe2, 0x6, [@ptm_cap={0x3}, @generic={0xb9, 0x10, 0x4, "7dacd11e497b5fc52e2b2d3feb699ccbea314f0b30b53bc51526d3309ae94771b63a4fb756a081daacb7fdb5f601dc0d0cf79ee84b95afdd9b237450a046c8e265016c13b9e6fdb2695bc513a73392c1b17a83c7f336853a4bdfea6a00978c48abbfcea9463e115ba7a4cc8535488bdd1f22458878466775f12dde54237577803d6583828e9b2d0ab57752035aed510a3b0ab1da626b013b9efbc832adbadb2c978d056dc7cac23cbf2b63ecd49dc5df0482e5d14bfc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x75, 0xae5a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xfd, 0x1, 0x1f}, @ptm_cap={0x3}]}, 0x1, [{0x23, &(0x7f0000000280)=@string={0x23, 0x3, "5aea99cc3730aa45d31cd5ffe3cb8b5b1d3342a7fbc661fc8bd889c2098134c01a"}}]}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$uac1(0x2, 0xcc, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3f, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x844a, 0x7f}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x0, 0x0, "594fec"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x8001, 0x80, "fe1376"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x4, 0x0, 0xff, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1d, 0x52, 0x1001}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x8, 0x80, "2e835edc63d2ff"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x0, "", "f5ce1d"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x4, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xc12, 0x5, "bba66819886bc8084c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x8, 0x40}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x8, 0x3, 0x80, 0x8, 0x1}, 0x10, &(0x7f0000000900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x5, 0x5, 0xd73c, 0x1}]}, 0x9, [{0xaa, &(0x7f0000000940)=@string={0xaa, 0x3, "1e1e9c4de9c5715829bb7e5de4d1560175c7284d2f130cfcb1b883ffd59a311dd561297e55f9c5a8417adb68658218fb63725a8769bf699ed01e9502790087a89a780685554f1f9b085d78c0f7ba8ef23563be6b67ecf3c71d4621560710c8bcbc3fc49c591ffb89b4bb1e3874c8765595aa4b14f8eb46ff4c20f425474d1928cac5027948960e6c4bd12699d6c7699be1fc28d7f6b9c47526042da2edbb7979587440f127e2a614"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x1a, &(0x7f0000000a80)=@string={0x1a, 0x3, "e12e90ee7e7820549e9e040610ccbcbc2236c72f41e5defd"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x83e}}, {0xf8, &(0x7f0000000b40)=@string={0xf8, 0x3, "efed421be66184b2837e5463ff990da2adfd563e66def27d55d96b3091dbe3a98f3e293da254614ebbc8eafdd92b994c6d9b605f6a6ec9846e2f5b6db3ede231aa9cccf49b217d98c81050d85af01fe4ec8aaf29c54e6f09545d06f4ce20fc115e0b2afc433489c6724989005a9869008ac16710a05f426665157d129e98c7f4d5e965f549e21a2703f0848b6ea5208e3e5dcf4096594e3ddd065263eae376cb9ac2291c9884b2c7120bef775f1e88c0931fcd49514489fcb5c63d704e0c899df487b927487eb82b2fbdb39d92960543239c22f0dd64668cb523daa809dd5c1c5106fed4c420ae45da27a9b925e86f3fa6c3fef60e90"}}, {0x3a, &(0x7f0000000c40)=@string={0x3a, 0x3, "3859f4492040af6b3d7b7da609790008588505137fae26330dc5ae385bd6798c03f095910b3c1585aa6d150a9c03aac31b1542efd8c39ee3"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}]}) (async)
syz_usb_connect$uac1(0x1, 0x10c, &(0x7f0000000d80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x38, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x0, 0xc0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x0, 0xff, "8bb5a8"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7, "4d56d0520381"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x2, 0x0, 0xffff, 0x3, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x81, "1f"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x2, 0x4, 0x401, 0x3f, 0xe3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x1, "", '9,'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x2, "ffa72d160d033c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5f}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x8, "ba8a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x8000, 0x1, "460a8c0ffa98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x5, 0x7a, {0x7, 0x25, 0x1, 0x83, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x69e, 0x1d5, 0xb3, "39aa50"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x22, 0x8, "a31e", "934835"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x20, 0x96, {0x7, 0x25, 0x1, 0x80, 0x4, 0xad}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x3f, 0x37, 0x2f, 0x8, 0x8}, 0x1a, &(0x7f0000000f00)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x19, 0x7, 0x1, 0x6, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x40, 0x9}]}, 0x3, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x418}}, {0xc5, &(0x7f0000000f80)=@string={0xc5, 0x3, "94d78563da67e98451fe0dd233c41aba4c2fe043b82aa7b5a156bc6a8027c3eba87f46a62b4cf275411481ec238b44bd25ecec22f26ccda1deb9d1b8ce78f8f52b02741e04f2ee13c4a57e9d9441a5e1416d5d4d16744550e85fdb5d9ceea10219adb241785e0fc8fb00c7c7be2bc63f1f91d81d469a67faf2d6998c3dd21e6376abe82418a3f275267c272aecf17abb1817431d340c7ff27a6109a3ae9adf841cd5288abedf9a457da3115a6a0157670d577351634ce20cdb71d24cb740351323dbc9"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2001}}]}) (async)
syz_usb_connect$cdc_ecm(0x4, 0x1f9, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e7, 0x1, 0x1, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x467b, 0x5, 0x81}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x8001, 0x9, 0xff, 0xffc1, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x1000, [0x8a2, 0x2, 0x3, 0x2, 0x4]}, @mdlm_detail={0xb9, 0x24, 0x13, 0x0, "4e77e2f8b97fab02648444e01a3978b84fdfd91754c1b92a432e639c47aee7735ff6f49d4aa1a57a470d5c85741beb0c2e943ad2020dd2bfce02f75d21d7e1ccf24b590ba69713014d551eefcedbbbda800931466e3cce49bd99cd49cf3845993050f37c867abd69fb23eaf709f1d2b0d0eb0b9bed1af98070f772e65a727d437d671199a6c5ec0dcd121fb3a5fa82edc102c5dbf9c4a8853dcc585d66ec4c5d241e26ec2faef817b6ea745e6824fdae9a106ac7b6"}, @mdlm_detail={0xc6, 0x24, 0x13, 0x0, "dff7bcc2d20314785eb20b81be0ff28e992dd44ef95f178c0c293e8e914596414adb0407b5601c0ae06d4409e2bb1a582dd0ebb7897c35fd7802b6a40b8bb92aa7847f4b32b83bd1de8ca0e3f815bd9ff6e394d729da4efaf51da7ca9731febb46d105bdbda7a4d99181e58e3002016127b269583141f106286673c082fe824c857fde41a2215c76e817fcf92e7fa1e4a13b652a086af894e1edc1ba3bf4a41feb4e418903100e747499bfc108bc4976e97edc25a6741abbf291886520b38d9738be"}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x800, [0x4]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0xfa, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x0, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x7, 0x5, 0x1, 0x40, 0x1f}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81d}}]}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x4, 0x61, &(0x7f0000000500)="275a0f141aea58aec0cfb0708d10968f8cdd51dc7fb80ce42138b1aac3cac1b9fecc5c2b5ddbf82705adf996ecd264e2b3b0bb4e54005e2355b38e4071147c4d0cab7a0302d592caedbdb4713e09cfbeeba53724b22cbf0bc1f34698ac614906a3") (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)

00:03:27 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f010000000000"], 0x0)

00:03:27 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2376.601700][    T6] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 2376.609217][ T3454] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 2376.616582][T22633] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 2376.661647][  T126] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 2376.861650][ T3454] usb 2-1: Using ep0 maxpacket: 32
[ 2376.891639][T22633] usb 1-1: device descriptor read/64, error 18
[ 2376.981899][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2376.991857][ T3454] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2377.002528][    T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2377.011217][    T6] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:28 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4102adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x700000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2377.031894][  T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2377.161980][ T3454] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2377.171181][ T3454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2377.179311][ T3454] usb 2-1: Product: syz
[ 2377.183797][    T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2377.222915][ T3454] usb 2-1: Manufacturer: syz
[ 2377.239283][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2377.375799][T22633] usb 1-1: device descriptor read/64, error 18
[ 2377.388401][ T3454] usb 2-1: SerialNumber: syz
[ 2377.393121][    T6] usb 3-1: Product: syz
[ 2377.397091][    T6] usb 3-1: Manufacturer: syz
[ 2377.401509][    T6] usb 3-1: SerialNumber: syz
[ 2377.401749][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2377.417404][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2377.426364][  T126] usb 5-1: Product: syz
[ 2377.430401][  T126] usb 5-1: Manufacturer: syz
[ 2377.434851][  T126] usb 5-1: SerialNumber: syz
[ 2377.452149][    T6] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2377.458786][    T6] cdc_ncm 3-1:1.0: bind() failure
[ 2377.651672][T22633] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 2377.660005][T32621] usb 3-1: USB disconnect, device number 116
[ 2377.682090][T12390] udc-core: couldn't find an available UDC or it's busy
[ 2377.688901][T12390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
00:03:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x800000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f410aadba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2377.922307][T22633] usb 1-1: device descriptor read/64, error 18
00:03:29 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f010000000000"], 0x0)

00:03:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x900000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2378.451642][T22633] usb 1-1: device descriptor read/64, error 18
[ 2378.461865][T12390] udc-core: couldn't find an available UDC or it's busy
[ 2378.468861][T12390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2378.492860][T12390] udc-core: couldn't find an available UDC or it's busy
[ 2378.500040][T12390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2378.531697][ T3454] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2378.539075][ T3454] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2378.546519][T32621] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 2378.554100][ T3454] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2378.571743][T22633] usb usb1-port1: attempt power cycle
[ 2378.711937][T12390] udc-core: couldn't find an available UDC or it's busy
[ 2378.718752][T12390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2378.751668][ T3454] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2378.751713][  T126] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2378.760210][ T3454] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2378.779376][  T126] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2378.806166][ T3454] usb 2-1: USB disconnect, device number 63
[ 2378.815013][  T126] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2378.829123][ T3454] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2378.921695][T32621] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2378.932103][T32621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2378.952116][T32621] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2378.981648][T22633] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 2378.991668][  T126] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2378.999956][  T126] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2379.036322][  T126] usb 5-1: USB disconnect, device number 57
[ 2379.047891][  T126] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2379.141688][T32621] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2379.150560][T32621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2379.158571][T22633] usb 1-1: device descriptor read/8, error -61
[ 2379.182254][T32621] usb 3-1: Product: syz
00:03:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xa00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:30 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)

00:03:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f410fadba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:30 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_connect$uac1(0x5, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x20, 0xe0, 0xe1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3c}, [@mixer_unit={0x9, 0x24, 0x4, 0x6, 0x0, "81e4aaf8"}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x5, 0x1, '\\'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, "7bb3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd4, 0x2, 0x81, 0x1, "ff3ff625"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x4, 0x8, {0x7, 0x25, 0x1, 0x1, 0x0, 0xffff}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0x80, 0x0, 0x20, 0x2}, 0xe2, &(0x7f0000000180)={0x5, 0xf, 0xe2, 0x6, [@ptm_cap={0x3}, @generic={0xb9, 0x10, 0x4, "7dacd11e497b5fc52e2b2d3feb699ccbea314f0b30b53bc51526d3309ae94771b63a4fb756a081daacb7fdb5f601dc0d0cf79ee84b95afdd9b237450a046c8e265016c13b9e6fdb2695bc513a73392c1b17a83c7f336853a4bdfea6a00978c48abbfcea9463e115ba7a4cc8535488bdd1f22458878466775f12dde54237577803d6583828e9b2d0ab57752035aed510a3b0ab1da626b013b9efbc832adbadb2c978d056dc7cac23cbf2b63ecd49dc5df0482e5d14bfc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x1, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x75, 0xae5a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xfd, 0x1, 0x1f}, @ptm_cap={0x3}]}, 0x1, [{0x23, &(0x7f0000000280)=@string={0x23, 0x3, "5aea99cc3730aa45d31cd5ffe3cb8b5b1d3342a7fbc661fc8bd889c2098134c01a"}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x2, 0xcc, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x3f, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x844a, 0x7f}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x0, 0x0, "594fec"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x8001, 0x80, "fe1376"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x4, 0x0, 0xff, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1d, 0x52, 0x1001}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x8, 0x80, "2e835edc63d2ff"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x0, "", "f5ce1d"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x4, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xc12, 0x5, "bba66819886bc8084c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x8, 0x40}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x8, 0x3, 0x80, 0x8, 0x1}, 0x10, &(0x7f0000000900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x5, 0x5, 0xd73c, 0x1}]}, 0x9, [{0xaa, &(0x7f0000000940)=@string={0xaa, 0x3, "1e1e9c4de9c5715829bb7e5de4d1560175c7284d2f130cfcb1b883ffd59a311dd561297e55f9c5a8417adb68658218fb63725a8769bf699ed01e9502790087a89a780685554f1f9b085d78c0f7ba8ef23563be6b67ecf3c71d4621560710c8bcbc3fc49c591ffb89b4bb1e3874c8765595aa4b14f8eb46ff4c20f425474d1928cac5027948960e6c4bd12699d6c7699be1fc28d7f6b9c47526042da2edbb7979587440f127e2a614"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x1a, &(0x7f0000000a80)=@string={0x1a, 0x3, "e12e90ee7e7820549e9e040610ccbcbc2236c72f41e5defd"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x83e}}, {0xf8, &(0x7f0000000b40)=@string={0xf8, 0x3, "efed421be66184b2837e5463ff990da2adfd563e66def27d55d96b3091dbe3a98f3e293da254614ebbc8eafdd92b994c6d9b605f6a6ec9846e2f5b6db3ede231aa9cccf49b217d98c81050d85af01fe4ec8aaf29c54e6f09545d06f4ce20fc115e0b2afc433489c6724989005a9869008ac16710a05f426665157d129e98c7f4d5e965f549e21a2703f0848b6ea5208e3e5dcf4096594e3ddd065263eae376cb9ac2291c9884b2c7120bef775f1e88c0931fcd49514489fcb5c63d704e0c899df487b927487eb82b2fbdb39d92960543239c22f0dd64668cb523daa809dd5c1c5106fed4c420ae45da27a9b925e86f3fa6c3fef60e90"}}, {0x3a, &(0x7f0000000c40)=@string={0x3a, 0x3, "3859f4492040af6b3d7b7da609790008588505137fae26330dc5ae385bd6798c03f095910b3c1585aa6d150a9c03aac31b1542efd8c39ee3"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_connect$uac1(0x1, 0x10c, &(0x7f0000000d80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x38, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x0, 0xc0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x0, 0xff, "8bb5a8"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7, "4d56d0520381"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x2, 0x0, 0xffff, 0x3, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x81, "1f"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x2, 0x4, 0x401, 0x3f, 0xe3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x1, "", '9,'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x2, "ffa72d160d033c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x4, 0x5f}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x8, "ba8a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x8000, 0x1, "460a8c0ffa98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x5, 0x7a, {0x7, 0x25, 0x1, 0x83, 0x1f, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x69e, 0x1d5, 0xb3, "39aa50"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x22, 0x8, "a31e", "934835"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x20, 0x96, {0x7, 0x25, 0x1, 0x80, 0x4, 0xad}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x3f, 0x37, 0x2f, 0x8, 0x8}, 0x1a, &(0x7f0000000f00)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x19, 0x7, 0x1, 0x6, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x40, 0x9}]}, 0x3, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x418}}, {0xc5, &(0x7f0000000f80)=@string={0xc5, 0x3, "94d78563da67e98451fe0dd233c41aba4c2fe043b82aa7b5a156bc6a8027c3eba87f46a62b4cf275411481ec238b44bd25ecec22f26ccda1deb9d1b8ce78f8f52b02741e04f2ee13c4a57e9d9441a5e1416d5d4d16744550e85fdb5d9ceea10219adb241785e0fc8fb00c7c7be2bc63f1f91d81d469a67faf2d6998c3dd21e6376abe82418a3f275267c272aecf17abb1817431d340c7ff27a6109a3ae9adf841cd5288abedf9a457da3115a6a0157670d577351634ce20cdb71d24cb740351323dbc9"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x2001}}]}) (async)
syz_usb_connect$cdc_ecm(0x4, 0x1f9, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e7, 0x1, 0x1, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x467b, 0x5, 0x81}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x8001, 0x9, 0xff, 0xffc1, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x7f, 0x1000, [0x8a2, 0x2, 0x3, 0x2, 0x4]}, @mdlm_detail={0xb9, 0x24, 0x13, 0x0, "4e77e2f8b97fab02648444e01a3978b84fdfd91754c1b92a432e639c47aee7735ff6f49d4aa1a57a470d5c85741beb0c2e943ad2020dd2bfce02f75d21d7e1ccf24b590ba69713014d551eefcedbbbda800931466e3cce49bd99cd49cf3845993050f37c867abd69fb23eaf709f1d2b0d0eb0b9bed1af98070f772e65a727d437d671199a6c5ec0dcd121fb3a5fa82edc102c5dbf9c4a8853dcc585d66ec4c5d241e26ec2faef817b6ea745e6824fdae9a106ac7b6"}, @mdlm_detail={0xc6, 0x24, 0x13, 0x0, "dff7bcc2d20314785eb20b81be0ff28e992dd44ef95f178c0c293e8e914596414adb0407b5601c0ae06d4409e2bb1a582dd0ebb7897c35fd7802b6a40b8bb92aa7847f4b32b83bd1de8ca0e3f815bd9ff6e394d729da4efaf51da7ca9731febb46d105bdbda7a4d99181e58e3002016127b269583141f106286673c082fe824c857fde41a2215c76e817fcf92e7fa1e4a13b652a086af894e1edc1ba3bf4a41feb4e418903100e747499bfc108bc4976e97edc25a6741abbf291886520b38d9738be"}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x800, [0x4]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x4, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0xfa, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x0, 0x7f}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x7, 0x5, 0x1, 0x40, 0x1f}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x81d}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x4, 0x61, &(0x7f0000000500)="275a0f141aea58aec0cfb0708d10968f8cdd51dc7fb80ce42138b1aac3cac1b9fecc5c2b5ddbf82705adf996ecd264e2b3b0bb4e54005e2355b38e4071147c4d0cab7a0302d592caedbdb4713e09cfbeeba53724b22cbf0bc1f34698ac614906a3") (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:30 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2379.202825][T32621] usb 3-1: Manufacturer: syz
[ 2379.207257][T32621] usb 3-1: SerialNumber: syz
[ 2379.261911][T32621] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2379.268771][T32621] cdc_ncm 3-1:1.0: bind() failure
[ 2379.371795][T22633] usb 1-1: device descriptor read/8, error -71
[ 2379.556862][    T6] usb 3-1: USB disconnect, device number 117
[ 2379.631744][ T3454] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 2379.851648][  T126] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 2379.871704][ T3454] usb 2-1: Using ep0 maxpacket: 32
[ 2379.931682][T22633] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 2379.991711][ T3454] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:03:31 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d0000"], 0x0)

00:03:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xb00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:31 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4111adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2380.101742][T22633] usb 1-1: device descriptor read/8, error -61
[ 2380.161871][ T3454] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2380.171053][ T3454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2380.180061][ T3454] usb 2-1: Product: syz
[ 2380.185170][ T3454] usb 2-1: Manufacturer: syz
[ 2380.189875][ T3454] usb 2-1: SerialNumber: syz
[ 2380.431693][  T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2380.461697][T26277] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 2380.471763][T22633] usb 1-1: device descriptor read/8, error -61
[ 2380.591744][T22633] usb usb1-port1: unable to enumerate USB device
[ 2380.641706][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2380.650621][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2380.658449][  T126] usb 5-1: Product: syz
[ 2380.662405][  T126] usb 5-1: Manufacturer: syz
[ 2380.666833][  T126] usb 5-1: SerialNumber: syz
[ 2380.821689][T26277] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2380.830268][T26277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2380.840316][T26277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2380.849105][T26277] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4117adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xc00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2380.931919][T12471] udc-core: couldn't find an available UDC or it's busy
[ 2380.943755][T12471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2381.032911][T26277] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2381.052010][T26277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2381.098467][T26277] usb 3-1: Product: syz
[ 2381.114673][T26277] usb 3-1: Manufacturer: syz
[ 2381.293470][T26277] usb 3-1: SerialNumber: syz
[ 2381.332100][T26277] cdc_ncm 3-1:1.0: skipping garbage
[ 2381.337140][T26277] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2381.343646][T26277] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2381.350167][T26277] cdc_ncm 3-1:1.0: bind() failure
[ 2381.501937][T12471] udc-core: couldn't find an available UDC or it's busy
[ 2381.508701][T12471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2381.516242][T12471] udc-core: couldn't find an available UDC or it's busy
[ 2381.523053][T12471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2381.532756][T26281] usb 3-1: USB disconnect, device number 118
[ 2381.691696][ T3454] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2381.698021][ T3454] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2381.705394][ T3454] cdc_ncm 2-1:1.0: setting rx_max = 2048
00:03:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4118adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2381.731993][T12471] udc-core: couldn't find an available UDC or it's busy
[ 2381.738814][T12471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2381.751698][  T126] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2381.758074][  T126] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2381.765311][  T126] cdc_ncm 5-1:1.0: setting rx_max = 2048
00:03:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xd00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2381.941740][ T3454] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2382.151152][ T3454] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2382.176094][ T3454] usb 2-1: USB disconnect, device number 64
[ 2382.176929][  T126] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2382.186647][ T3454] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:03:33 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f010000000000"], 0x0)

00:03:33 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f01000000000000"], 0x0)

[ 2382.193866][  T126] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2382.209684][  T126] usb 5-1: USB disconnect, device number 58
[ 2382.215991][  T126] cdc_ncm 5-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2382.521650][T32621] usb 3-1: new high-speed USB device number 119 using dummy_hcd
00:03:34 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1f, @mcast2, 0x5}, 0x1c)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:34 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4130adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xe00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2382.701655][T26277] usb 1-1: new high-speed USB device number 93 using dummy_hcd
00:03:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xf00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2383.061707][T32621] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2383.071798][T32621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2383.080402][T32621] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2383.093354][ T3454] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 2383.141698][  T126] usb 2-1: new high-speed USB device number 65 using dummy_hcd
00:03:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1000000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2383.211673][T26277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2383.224257][T26277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2383.233354][T26277] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2383.291747][T32621] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2383.300668][T32621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2383.308519][T32621] usb 3-1: Product: syz
[ 2383.312622][T32621] usb 3-1: Manufacturer: syz
[ 2383.317041][T32621] usb 3-1: SerialNumber: syz
00:03:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1100000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2383.381628][  T126] usb 2-1: Using ep0 maxpacket: 32
[ 2383.382141][T32621] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2383.394445][T32621] cdc_ncm 3-1:1.0: bind() failure
[ 2383.431710][T26277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2383.442796][T26277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2383.451138][T26277] usb 1-1: Product: syz
[ 2383.455250][T26277] usb 1-1: Manufacturer: syz
[ 2383.459670][T26277] usb 1-1: SerialNumber: syz
00:03:35 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4145adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2383.501728][  T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2383.512088][T26277] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2383.538232][ T3454] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2383.552721][T26277] cdc_ncm 1-1:1.0: bind() failure
00:03:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1200000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2383.584913][ T1919] usb 3-1: USB disconnect, device number 119
[ 2383.890133][T26277] usb 1-1: USB disconnect, device number 93
[ 2383.901772][ T3454] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2383.910836][ T3454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2383.911690][  T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2383.918920][ T3454] usb 5-1: Product: syz
[ 2383.931480][ T3454] usb 5-1: Manufacturer: syz
00:03:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1300000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2383.936060][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2383.941625][ T3454] usb 5-1: SerialNumber: syz
[ 2383.944386][  T126] usb 2-1: Product: syz
[ 2383.952658][  T126] usb 2-1: Manufacturer: syz
[ 2383.957201][  T126] usb 2-1: SerialNumber: syz
00:03:35 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f010000000000"], 0x0)

00:03:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1400000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2384.681664][T26277] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 2385.061724][T26277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2385.071688][T26277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2385.080401][T26277] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2385.093068][ T3454] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2385.099308][ T3454] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2385.101678][  T126] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2385.106633][ T3454] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2385.118294][  T126] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2385.125493][  T126] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2385.271669][T26277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2385.280546][T26277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2385.288544][T26277] usb 1-1: Product: syz
[ 2385.292619][T26277] usb 1-1: Manufacturer: syz
[ 2385.297776][T26277] usb 1-1: SerialNumber: syz
[ 2385.311740][ T3454] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2385.318109][ T3454] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2385.321692][  T126] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2385.331809][ T3454] usb 5-1: USB disconnect, device number 59
[ 2385.337665][  T126] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2385.340155][ T3454] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2385.352526][  T126] usb 2-1: USB disconnect, device number 65
[ 2385.357821][T26277] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2385.363269][  T126] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2385.370528][T26277] cdc_ncm 1-1:1.0: bind() failure
[ 2385.559736][ T2549] usb 1-1: USB disconnect, device number 94
00:03:37 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1f, @mcast2, 0x5}, 0x1c)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1f, @mcast2, 0x5}, 0x1c) (async)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)

00:03:37 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:37 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f01000000000000"], 0x0)

00:03:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f41ecadba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1500000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1601000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:37 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f010000000000"], 0x0)

[ 2386.231641][ T3454] usb 3-1: new high-speed USB device number 120 using dummy_hcd
00:03:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x1b01000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2386.321641][T26281] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 2386.329161][  T126] usb 5-1: new high-speed USB device number 60 using dummy_hcd
00:03:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x2000000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2386.551895][T11560] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 2386.591693][ T3454] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
00:03:38 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x262c000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f41f0adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2386.601764][ T3454] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2386.610608][ T3454] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2386.611641][T26281] usb 2-1: Using ep0 maxpacket: 32
[ 2386.781928][ T3454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2386.814822][ T3454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2386.843457][ T3454] usb 3-1: Product: syz
[ 2386.993862][T26281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2387.004628][  T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2387.031646][ T3454] usb 3-1: Manufacturer: syz
[ 2387.041137][ T3454] usb 3-1: SerialNumber: syz
[ 2387.082159][ T3454] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2387.088795][ T3454] cdc_ncm 3-1:1.0: bind() failure
00:03:38 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x3075000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2387.201836][T11560] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2387.211977][T11560] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2387.221004][T11560] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2387.233951][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2387.242864][T26281] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2387.251738][T26281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2387.259505][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2387.267716][T26281] usb 2-1: Product: syz
[ 2387.271881][  T126] usb 5-1: Product: syz
[ 2387.275887][T26281] usb 2-1: Manufacturer: syz
[ 2387.280309][  T126] usb 5-1: Manufacturer: syz
[ 2387.285917][T26281] usb 2-1: SerialNumber: syz
[ 2387.290359][  T126] usb 5-1: SerialNumber: syz
[ 2387.297413][ T2549] usb 3-1: USB disconnect, device number 120
[ 2387.411663][T11560] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2387.420670][T11560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2387.428629][T11560] usb 1-1: Product: syz
[ 2387.432746][T11560] usb 1-1: Manufacturer: syz
[ 2387.437177][T11560] usb 1-1: SerialNumber: syz
[ 2387.482342][T11560] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2387.488992][T11560] cdc_ncm 1-1:1.0: bind() failure
[ 2387.682628][ T3454] usb 1-1: USB disconnect, device number 95
[ 2388.431913][T26281] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2388.438168][T26281] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2388.445418][T26281] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2388.451694][  T126] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2388.457912][  T126] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2388.465161][  T126] cdc_ncm 5-1:1.0: setting rx_max = 2048
00:03:40 executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1f, @mcast2, 0x5}, 0x1c)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1f, @mcast2, 0x5}, 0x1c) (async)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)

[ 2388.641676][T26281] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2388.648281][T26281] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2388.663654][T26281] usb 2-1: USB disconnect, device number 66
[ 2388.669986][T26281] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2388.678267][  T126] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2388.684887][  T126] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2388.697027][  T126] usb 5-1: USB disconnect, device number 60
[ 2388.703014][  T126] cdc_ncm 5-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
00:03:40 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x3400000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f41f8adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:40 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f01000000000000"], 0x0)

00:03:40 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d0000"], 0x0)

[ 2389.111628][  T126] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 2389.571712][ T3454] usb 2-1: new high-speed USB device number 67 using dummy_hcd
00:03:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x3f00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2389.631641][ T2549] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 2389.639067][T26281] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 2389.721689][  T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:03:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x4000000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2389.841688][ T3454] usb 2-1: Using ep0 maxpacket: 32
00:03:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x4400000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2389.891676][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2389.911625][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2389.919440][  T126] usb 5-1: Product: syz
[ 2389.923634][  T126] usb 5-1: Manufacturer: syz
[ 2389.928042][  T126] usb 5-1: SerialNumber: syz
00:03:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba228afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2389.993111][ T3454] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2390.001738][T26281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2390.013850][ T2549] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2390.024691][ T2549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2390.035039][T26281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2390.044363][ T2549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2390.053367][T26281] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2390.066364][ T2549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x4800000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2390.411696][ T3454] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2390.420545][ T3454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.428491][ T3454] usb 2-1: Product: syz
[ 2390.432504][ T3454] usb 2-1: Manufacturer: syz
[ 2390.436918][ T3454] usb 2-1: SerialNumber: syz
[ 2390.481714][ T2549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2390.490644][T26281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2390.499531][T26281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.507409][ T2549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.515332][T26281] usb 3-1: Product: syz
[ 2390.519374][ T2549] usb 1-1: Product: syz
[ 2390.523697][T26281] usb 3-1: Manufacturer: syz
00:03:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x4880000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2390.528158][ T2549] usb 1-1: Manufacturer: syz
[ 2390.534652][T26281] usb 3-1: SerialNumber: syz
[ 2390.539095][ T2549] usb 1-1: SerialNumber: syz
[ 2390.582008][T26281] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2390.588986][ T2549] cdc_ncm 1-1:1.0: skipping garbage
[ 2390.594329][ T2549] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2390.600753][T26281] cdc_ncm 3-1:1.0: bind() failure
[ 2390.605995][ T2549] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2390.617919][ T2549] cdc_ncm 1-1:1.0: bind() failure
[ 2390.783019][T30410] usb 1-1: USB disconnect, device number 96
[ 2390.783511][ T2549] usb 3-1: USB disconnect, device number 121
[ 2391.181675][  T126] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2391.187969][  T126] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2391.195182][  T126] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2391.382264][T12701] udc-core: couldn't find an available UDC or it's busy
[ 2391.389037][T12701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2391.396439][  T126] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2391.402958][  T126] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2391.561730][ T3454] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2391.567981][ T3454] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2391.575460][ T3454] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2391.771673][ T3454] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2391.778374][ T3454] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2391.789886][ T3454] usb 2-1: USB disconnect, device number 67
[ 2391.796011][ T3454] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:03:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701151e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x4c1d000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:44 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f01000000000000"], 0x0)

00:03:44 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300"], 0x0)

00:03:44 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:44 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000015c0)={0x14, &(0x7f0000001500)={0x0, 0x36, 0x6c, {0x6c, 0x21, "fcc1f943270beb8844d735f07a18dc888bf896a3a510b24b43705d979cd240fc1c85562bd0cbbae416e98f79ac055b98618429bc7155420e4c34520cd91c2a09cbdf20080582dc78e734c334525f866ab713cc9f7159578ae8d1efc4f87fd6772500c25b52cba7bd5825"}}, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001840)={0x44, &(0x7f0000001600)={0x40, 0x8, 0x49, "1b392bb940cbbd852cb13d14839c06325d652d556cdd2063759625fa6f53ce1018c95834505ede9f4bee1c8c6dea351d099e875f639b96f8c0f06655d86b825d4fe2b49a89b374f8dc"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001700)={0x20, 0x80, 0x1c, {0xf800, 0x6, 0xffff, 0xa0f6, 0x3, 0x1, 0x5, 0x200, 0x7, 0x200, 0x4, 0x200}}, &(0x7f0000001740)={0x20, 0x85, 0x4, 0x3fd}, &(0x7f0000001780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000017c0)={0x20, 0x87, 0x2, 0x98a}, &(0x7f0000001800)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x4, 0x93, {0x93, 0x9, "9807cb8238148766aaa6061fccbe493b219c9b367e2de5967e6cd2e032aceeb39d54ae9faa3118868603b2b5b189354ec7eb898445b43b8daa1c09c694729f237a8ddfa53233223a3beae2c6e335186a8afa4b0f326b8d223a1e0bb3b6aec224a411b848c899a7e391ed8c3729357491bc9452891a0ea440f1104b463dc57295ce38b575d60a102e740b02096899085574"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000970000000df8615f737182fc3a890a4396a1467fb8ad11d3254a37777300a4a39e076d21f54a5e4391a0e66daf3a351387b34b2ae3e3937d5e5a364db63009e2afe0e65c63d554b79620fb04155baac5e52ebecb4ac9e16c58a2babe7e09ac5114b1565ee41ba4a16f11acd31afe87d3b1c3213d9"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x6, 0x8, 0x8000, 0x4, 0x0, 0x4, 0x0, 0xfffffffa, 0x5, 0x6, 0x2, 0x7f}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x10001}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x20, 0x6, 0x8d, {0x8d, 0x24, "0efcfac6b3070713f85c607eb30e2315afe29e55819ecd1cee12139d10691f7a411b8150644e9b8205d096a2723a786453965035ef66e2f5fedbc20eb41ba05660ec5a43b2bc07df651702aea25908c33db84b79c336a6383cf49b89bf364a4f1f75bd1eba90dc78c4a398f0ada721355b869e50e050eddf3d04d6a5860f4f7522aa8686aa16d5cb0daf08"}}, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x44, &(0x7f0000001280)={0x20, 0xb, 0x1, "d0"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000001340)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x9, 0x9, 0x4, 0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x800}}, &(0x7f0000001380)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000013c0)={0x20, 0x83, 0x2}, &(0x7f0000001400)={0x20, 0x87, 0x2, 0xb0b1}, &(0x7f0000001440)={0x20, 0x89, 0x2}})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f00000007c0)={0x40, 0xe, 0xeb, {0xeb, 0xf, "6f00e41ef51da659fd913d344057dd20213dcad70e5eb452c5dde8b8f4f80b56957929d1f10b95ce2d535154365aa551553c26c49ae4c18564c687bdac77d5bfd0919d34ef88b3c0fc1d72aa8ce56e774f59a2b370daaebbd77be9de7aea94e3b551fd27c352020a100309fd6938e832f0eb2a5f66524c1d223ca519dcf6b02e49c6c216b400821a42a68b2ad663358f38f92f9787c2e40837db1d81e9471185c2ddbe0cb450e1a2b06eb649fb07692f3a6b867c580591a3703ce2e495e7f2fa5a97fa0fb5bf8aa3e5dd42d666668c7dec4177a6b125638e603dcffdd232ad5d6f02093cf9702dd04e"}}, &(0x7f00000008c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "d689dbaa1c690d4e04144e369d318e4351ccf6c9bdd5f7aa263ac0578f3a76f9012f8ef1b3954d0d2d2f8bb831939618214d0b471139fd5ed2844223f4d5bddacff924d140c584067d8521d794c4973e84c21f4ab8be5cb552dea72c9afba6f395368fe3cd585c6a3f984f2bc86dd1a58bd33aa429679360c537c6ee4481e3b78cdffcb836800c349697519864cec2ae66ed0b91370ea83fb687ea8d2bb5d9155e24f3ea355f3705bda9c151fa232e4252a2322e465e449b5068908747047784bfc583f48c5c1cd040a8eeffa8ef0c7fb18864eaaca5438f379e3efe807fc62f40ffd7d78ddfb1055fe42a55095b2c563462c7473af975dbc2472d39"}}, &(0x7f0000000a00)={0x0, 0xf, 0x1dc, {0x5, 0xf, 0x1dc, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x8f, 0x0, 0x6, 0x0, 0x1}, @generic={0xea, 0x10, 0x3, "45dc25799aaaa75d99dfd10e29ec771f0850adbf23a72718a8a679cf41169164f4aa680078db6387003f532995d4b0cdf82413b13a2d4b7302f4523ffafd598714e94bf28f777d8080a75610363e63d751857511ab04377302c27602c33c298c6008c4afc6ad11057b38c547b28a15aea63879ee0e22582689278ca103c4eaa2ec9b296700bb293156d2f269c51a4e714ad82caed42fb6901e25e7ebc6bac733fb86099db9a2fcd4e2b738f35627e47965c2ee0b687416811b4faf1fda51acf7fc1127f4b2a2738f4a13f890ac5adbe4185c76765e8ac599ed41df3420a18bb580e0be61e66d5c"}, @generic={0x1c, 0x10, 0x4, "4bbafd0ac4e0973a9ddcad7cfd7ae71d446080cd7b2a67ef76"}, @ptm_cap={0x3}, @generic={0xbf, 0x10, 0x2, "dac41873f441a16c4f9f5cb10fcab9f66fb73a3d10e89fbf59cbdd5ea1546062c6dc155de7dd6dc3f9af81fae4fca3b89bedea3b16d767dc0f4357544933f7b8a22d9dbf86403a5577517c4af696f312c87e77413af6ea0850d0a3314ef55b20f720e5fcd1f4233e799698cbf5ad0984631348e732f398ec0e2e0a27249c7f6784d9ae2a1f05e2f0b38745486d46e86df0cbc1e5631283e97a8f278316e58fa0cd2c9471f446263c7518fe2b1d1529fb48797beb652c4d02278446b6"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x14, 0x9, 0xc2, "04189ca3", "0cc27380"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x1f, 0x5d, 0x7f, 0x7, 0x4}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c00)={0x0, 0x10, 0xaa, "d31522c6ec9d0458239835348d258bda68231521b0723db7d699e0d2e72f89fa8168ca96196e2ab48eed09f3c50d039e78d3de1cc74766e3d91a27867b68c2169f44bf88a21e68539f90821f12bac2b3e90588f799c15f58f46292a32c6d7cc2a52d97154e7633a5f58d3f4e280780acb069b3766925a79f868946c3bd84ac44986ee30277c61cd615465f7d5364ada34698657cf24182f9c25e02bdca8940cbbc627437879d438cb675"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x130, 0x20, [0xf000]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0xbf9}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "9daf"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "e455"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x2e2d}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0xc}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2392.745545][T30410] usb 5-1: USB disconnect, device number 61
[ 2392.751789][T30410] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2393.261665][ T2549] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 2393.269108][T26281] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 2393.276751][  T126] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 2393.311636][T30410] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 2393.551744][  T126] usb 2-1: Using ep0 maxpacket: 32
00:03:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x5e0e000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701251e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2393.581672][T30410] usb 5-1: device descriptor read/64, error 18
[ 2393.642559][ T2549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2393.652499][ T2549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2393.661139][ T2549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x6400000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2393.963305][  T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2393.974324][T26281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2393.984625][T26281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2393.993628][T26281] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x7900000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2394.131723][T30410] usb 5-1: device descriptor read/64, error 18
[ 2394.131814][ T2549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2394.146837][ T2549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2394.154904][ T2549] usb 1-1: Product: syz
[ 2394.159301][ T2549] usb 1-1: Manufacturer: syz
[ 2394.163772][ T2549] usb 1-1: SerialNumber: syz
[ 2394.212030][ T2549] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2394.218810][  T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2394.227661][T26281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2394.236564][ T2549] cdc_ncm 1-1:1.0: bind() failure
[ 2394.241419][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2394.249478][T26281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2394.258436][T26281] usb 3-1: Product: syz
[ 2394.262492][  T126] usb 2-1: Product: syz
[ 2394.266444][T26281] usb 3-1: Manufacturer: syz
[ 2394.270860][  T126] usb 2-1: Manufacturer: syz
[ 2394.275345][T26281] usb 3-1: SerialNumber: syz
[ 2394.279801][  T126] usb 2-1: SerialNumber: syz
00:03:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x8010020000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2394.322052][T26281] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2394.328663][T26281] cdc_ncm 3-1:1.0: bind() failure
[ 2394.401685][T30410] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 2394.413832][T26281] usb 1-1: USB disconnect, device number 97
00:03:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701351e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x80400b0000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2394.522837][ T2549] usb 3-1: USB disconnect, device number 122
[ 2394.798076][T30410] usb 5-1: device descriptor read/64, error 18
00:03:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x8102000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x983a000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:46 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300"], 0x0)

[ 2395.191675][T30410] usb 5-1: device descriptor read/64, error 18
[ 2395.321759][T30410] usb usb5-port1: attempt power cycle
[ 2395.471779][T26277] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 2395.481672][  T126] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2395.487969][  T126] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2395.495189][  T126] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2395.701754][  T126] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2395.708438][  T126] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2395.719809][  T126] usb 2-1: USB disconnect, device number 68
[ 2395.725781][  T126] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2395.741674][T30410] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 2395.841709][T26277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2395.851745][T30410] usb 5-1: device descriptor read/8, error -71
[ 2395.857996][T26277] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2395.866975][T26277] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2396.031685][T26277] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2396.040540][T26277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2396.048563][T26277] usb 3-1: Product: syz
[ 2396.052629][T26277] usb 3-1: Manufacturer: syz
[ 2396.056945][T26277] usb 3-1: SerialNumber: syz
[ 2396.071695][T30410] usb 5-1: device descriptor read/8, error -71
[ 2396.113181][T26277] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2396.119769][T26277] cdc_ncm 3-1:1.0: bind() failure
00:03:47 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x9bc4200000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:47 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f01000000000000"], 0x0)

00:03:47 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000015c0)={0x14, &(0x7f0000001500)={0x0, 0x36, 0x6c, {0x6c, 0x21, "fcc1f943270beb8844d735f07a18dc888bf896a3a510b24b43705d979cd240fc1c85562bd0cbbae416e98f79ac055b98618429bc7155420e4c34520cd91c2a09cbdf20080582dc78e734c334525f866ab713cc9f7159578ae8d1efc4f87fd6772500c25b52cba7bd5825"}}, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001840)={0x44, &(0x7f0000001600)={0x40, 0x8, 0x49, "1b392bb940cbbd852cb13d14839c06325d652d556cdd2063759625fa6f53ce1018c95834505ede9f4bee1c8c6dea351d099e875f639b96f8c0f06655d86b825d4fe2b49a89b374f8dc"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001700)={0x20, 0x80, 0x1c, {0xf800, 0x6, 0xffff, 0xa0f6, 0x3, 0x1, 0x5, 0x200, 0x7, 0x200, 0x4, 0x200}}, &(0x7f0000001740)={0x20, 0x85, 0x4, 0x3fd}, &(0x7f0000001780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000017c0)={0x20, 0x87, 0x2, 0x98a}, &(0x7f0000001800)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0) (rerun: 64)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x4, 0x93, {0x93, 0x9, "9807cb8238148766aaa6061fccbe493b219c9b367e2de5967e6cd2e032aceeb39d54ae9faa3118868603b2b5b189354ec7eb898445b43b8daa1c09c694729f237a8ddfa53233223a3beae2c6e335186a8afa4b0f326b8d223a1e0bb3b6aec224a411b848c899a7e391ed8c3729357491bc9452891a0ea440f1104b463dc57295ce38b575d60a102e740b02096899085574"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000970000000df8615f737182fc3a890a4396a1467fb8ad11d3254a37777300a4a39e076d21f54a5e4391a0e66daf3a351387b34b2ae3e3937d5e5a364db63009e2afe0e65c63d554b79620fb04155baac5e52ebecb4ac9e16c58a2babe7e09ac5114b1565ee41ba4a16f11acd31afe87d3b1c3213d9"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x6, 0x8, 0x8000, 0x4, 0x0, 0x4, 0x0, 0xfffffffa, 0x5, 0x6, 0x2, 0x7f}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x10001}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x20, 0x6, 0x8d, {0x8d, 0x24, "0efcfac6b3070713f85c607eb30e2315afe29e55819ecd1cee12139d10691f7a411b8150644e9b8205d096a2723a786453965035ef66e2f5fedbc20eb41ba05660ec5a43b2bc07df651702aea25908c33db84b79c336a6383cf49b89bf364a4f1f75bd1eba90dc78c4a398f0ada721355b869e50e050eddf3d04d6a5860f4f7522aa8686aa16d5cb0daf08"}}, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x44, &(0x7f0000001280)={0x20, 0xb, 0x1, "d0"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000001340)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x9, 0x9, 0x4, 0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x800}}, &(0x7f0000001380)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000013c0)={0x20, 0x83, 0x2}, &(0x7f0000001400)={0x20, 0x87, 0x2, 0xb0b1}, &(0x7f0000001440)={0x20, 0x89, 0x2}})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async, rerun: 64)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f00000007c0)={0x40, 0xe, 0xeb, {0xeb, 0xf, "6f00e41ef51da659fd913d344057dd20213dcad70e5eb452c5dde8b8f4f80b56957929d1f10b95ce2d535154365aa551553c26c49ae4c18564c687bdac77d5bfd0919d34ef88b3c0fc1d72aa8ce56e774f59a2b370daaebbd77be9de7aea94e3b551fd27c352020a100309fd6938e832f0eb2a5f66524c1d223ca519dcf6b02e49c6c216b400821a42a68b2ad663358f38f92f9787c2e40837db1d81e9471185c2ddbe0cb450e1a2b06eb649fb07692f3a6b867c580591a3703ce2e495e7f2fa5a97fa0fb5bf8aa3e5dd42d666668c7dec4177a6b125638e603dcffdd232ad5d6f02093cf9702dd04e"}}, &(0x7f00000008c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}, &(0x7f0000000a00)={0x0, 0xf, 0x1dc, {0x5, 0xf, 0x1dc, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x8f, 0x0, 0x6, 0x0, 0x1}, @generic={0xea, 0x10, 0x3, "45dc25799aaaa75d99dfd10e29ec771f0850adbf23a72718a8a679cf41169164f4aa680078db6387003f532995d4b0cdf82413b13a2d4b7302f4523ffafd598714e94bf28f777d8080a75610363e63d751857511ab04377302c27602c33c298c6008c4afc6ad11057b38c547b28a15aea63879ee0e22582689278ca103c4eaa2ec9b296700bb293156d2f269c51a4e714ad82caed42fb6901e25e7ebc6bac733fb86099db9a2fcd4e2b738f35627e47965c2ee0b687416811b4faf1fda51acf7fc1127f4b2a2738f4a13f890ac5adbe4185c76765e8ac599ed41df3420a18bb580e0be61e66d5c"}, @generic={0x1c, 0x10, 0x4, "4bbafd0ac4e0973a9ddcad7cfd7ae71d446080cd7b2a67ef76"}, @ptm_cap={0x3}, @generic={0xbf, 0x10, 0x2, "dac41873f441a16c4f9f5cb10fcab9f66fb73a3d10e89fbf59cbdd5ea1546062c6dc155de7dd6dc3f9af81fae4fca3b89bedea3b16d767dc0f4357544933f7b8a22d9dbf86403a5577517c4af696f312c87e77413af6ea0850d0a3314ef55b20f720e5fcd1f4233e799698cbf5ad0984631348e732f398ec0e2e0a27249c7f6784d9ae2a1f05e2f0b38745486d46e86df0cbc1e5631283e97a8f278316e58fa0cd2c9471f446263c7518fe2b1d1529fb48797beb652c4d02278446b6"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x14, 0x9, 0xc2, "04189ca3", "0cc27380"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x1f, 0x5d, 0x7f, 0x7, 0x4}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c00)={0x0, 0x10, 0xaa, "d31522c6ec9d0458239835348d258bda68231521b0723db7d699e0d2e72f89fa8168ca96196e2ab48eed09f3c50d039e78d3de1cc74766e3d91a27867b68c2169f44bf88a21e68539f90821f12bac2b3e90588f799c15f58f46292a32c6d7cc2a52d97154e7633a5f58d3f4e280780acb069b3766925a79f868946c3bd84ac44986ee30277c61cd615465f7d5364ada34698657cf24182f9c25e02bdca8940cbbc627437879d438cb675"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x130, 0x20, [0xf000]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0xbf9}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "9daf"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "e455"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x2e2d}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0xc}}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701451e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2396.513233][T26277] usb 3-1: USB disconnect, device number 123
[ 2396.571695][T30410] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 2396.651683][ T2549] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 2396.659154][  T126] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 2396.661705][T30410] usb 5-1: Invalid ep0 maxpacket: 1
[ 2396.671694][T30410] usb usb5-port1: unable to enumerate USB device
[ 2396.911983][  T126] usb 2-1: Using ep0 maxpacket: 32
00:03:48 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300"], 0x0)

00:03:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xb700000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:48 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701551e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2397.061773][ T2549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2397.071769][  T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2397.082400][ T2549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2397.091169][ T2549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2397.471696][  T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2397.480592][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2397.488442][ T2549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2397.497241][ T2549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2397.505073][T18274] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 2397.512625][ T2549] usb 1-1: Product: syz
[ 2397.516491][ T2549] usb 1-1: Manufacturer: syz
[ 2397.520916][ T2549] usb 1-1: SerialNumber: syz
[ 2397.525372][  T126] usb 2-1: Product: syz
[ 2397.529335][  T126] usb 2-1: Manufacturer: syz
[ 2397.533836][  T126] usb 2-1: SerialNumber: syz
[ 2397.572549][ T2549] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2397.579172][ T2549] cdc_ncm 1-1:1.0: bind() failure
[ 2397.773322][ T2549] usb 1-1: USB disconnect, device number 98
00:03:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xcc0e000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701651e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2397.921774][T18274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2397.931855][T18274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2397.940840][T18274] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xd007000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xe200000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2398.401679][T18274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2398.410672][T18274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2398.418588][T18274] usb 3-1: Product: syz
[ 2398.422662][T18274] usb 3-1: Manufacturer: syz
[ 2398.427373][T18274] usb 3-1: SerialNumber: syz
[ 2398.473504][T18274] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2398.480246][T18274] cdc_ncm 3-1:1.0: bind() failure
[ 2398.672967][T30410] usb 3-1: USB disconnect, device number 124
[ 2398.731682][  T126] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2398.737985][  T126] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2398.745409][  T126] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2398.951710][  T126] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2398.958264][  T126] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2398.969834][  T126] usb 2-1: USB disconnect, device number 69
[ 2398.976192][  T126] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:03:50 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x60, {0x60, 0xb, "c04917e1c410786635e3f89e53cdca6a691b15367daf58df900d471bacb8391d47f41f3d461cd4d37393fc020eaef6956f5fb4a11c3149069471118b79db342630045314379b7008f6bd2a9e7e0ca94911660d71143d2b4369511a398dd5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xe803000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:50 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000015c0)={0x14, &(0x7f0000001500)={0x0, 0x36, 0x6c, {0x6c, 0x21, "fcc1f943270beb8844d735f07a18dc888bf896a3a510b24b43705d979cd240fc1c85562bd0cbbae416e98f79ac055b98618429bc7155420e4c34520cd91c2a09cbdf20080582dc78e734c334525f866ab713cc9f7159578ae8d1efc4f87fd6772500c25b52cba7bd5825"}}, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001840)={0x44, &(0x7f0000001600)={0x40, 0x8, 0x49, "1b392bb940cbbd852cb13d14839c06325d652d556cdd2063759625fa6f53ce1018c95834505ede9f4bee1c8c6dea351d099e875f639b96f8c0f06655d86b825d4fe2b49a89b374f8dc"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001700)={0x20, 0x80, 0x1c, {0xf800, 0x6, 0xffff, 0xa0f6, 0x3, 0x1, 0x5, 0x200, 0x7, 0x200, 0x4, 0x200}}, &(0x7f0000001740)={0x20, 0x85, 0x4, 0x3fd}, &(0x7f0000001780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000017c0)={0x20, 0x87, 0x2, 0x98a}, &(0x7f0000001800)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x4, 0x93, {0x93, 0x9, "9807cb8238148766aaa6061fccbe493b219c9b367e2de5967e6cd2e032aceeb39d54ae9faa3118868603b2b5b189354ec7eb898445b43b8daa1c09c694729f237a8ddfa53233223a3beae2c6e335186a8afa4b0f326b8d223a1e0bb3b6aec224a411b848c899a7e391ed8c3729357491bc9452891a0ea440f1104b463dc57295ce38b575d60a102e740b02096899085574"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000970000000df8615f737182fc3a890a4396a1467fb8ad11d3254a37777300a4a39e076d21f54a5e4391a0e66daf3a351387b34b2ae3e3937d5e5a364db63009e2afe0e65c63d554b79620fb04155baac5e52ebecb4ac9e16c58a2babe7e09ac5114b1565ee41ba4a16f11acd31afe87d3b1c3213d9"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x6, 0x8, 0x8000, 0x4, 0x0, 0x4, 0x0, 0xfffffffa, 0x5, 0x6, 0x2, 0x7f}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x10001}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x20, 0x6, 0x8d, {0x8d, 0x24, "0efcfac6b3070713f85c607eb30e2315afe29e55819ecd1cee12139d10691f7a411b8150644e9b8205d096a2723a786453965035ef66e2f5fedbc20eb41ba05660ec5a43b2bc07df651702aea25908c33db84b79c336a6383cf49b89bf364a4f1f75bd1eba90dc78c4a398f0ada721355b869e50e050eddf3d04d6a5860f4f7522aa8686aa16d5cb0daf08"}}, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x44, &(0x7f0000001280)={0x20, 0xb, 0x1, "d0"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000001340)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x9, 0x9, 0x4, 0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x800}}, &(0x7f0000001380)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000013c0)={0x20, 0x83, 0x2}, &(0x7f0000001400)={0x20, 0x87, 0x2, 0xb0b1}, &(0x7f0000001440)={0x20, 0x89, 0x2}}) (async, rerun: 64)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (rerun: 64)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f00000007c0)={0x40, 0xe, 0xeb, {0xeb, 0xf, "6f00e41ef51da659fd913d344057dd20213dcad70e5eb452c5dde8b8f4f80b56957929d1f10b95ce2d535154365aa551553c26c49ae4c18564c687bdac77d5bfd0919d34ef88b3c0fc1d72aa8ce56e774f59a2b370daaebbd77be9de7aea94e3b551fd27c352020a100309fd6938e832f0eb2a5f66524c1d223ca519dcf6b02e49c6c216b400821a42a68b2ad663358f38f92f9787c2e40837db1d81e9471185c2ddbe0cb450e1a2b06eb649fb07692f3a6b867c580591a3703ce2e495e7f2fa5a97fa0fb5bf8aa3e5dd42d666668c7dec4177a6b125638e603dcffdd232ad5d6f02093cf9702dd04e"}}, &(0x7f00000008c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}, &(0x7f0000000a00)={0x0, 0xf, 0x1dc, {0x5, 0xf, 0x1dc, 0x6, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x8f, 0x0, 0x6, 0x0, 0x1}, @generic={0xea, 0x10, 0x3, "45dc25799aaaa75d99dfd10e29ec771f0850adbf23a72718a8a679cf41169164f4aa680078db6387003f532995d4b0cdf82413b13a2d4b7302f4523ffafd598714e94bf28f777d8080a75610363e63d751857511ab04377302c27602c33c298c6008c4afc6ad11057b38c547b28a15aea63879ee0e22582689278ca103c4eaa2ec9b296700bb293156d2f269c51a4e714ad82caed42fb6901e25e7ebc6bac733fb86099db9a2fcd4e2b738f35627e47965c2ee0b687416811b4faf1fda51acf7fc1127f4b2a2738f4a13f890ac5adbe4185c76765e8ac599ed41df3420a18bb580e0be61e66d5c"}, @generic={0x1c, 0x10, 0x4, "4bbafd0ac4e0973a9ddcad7cfd7ae71d446080cd7b2a67ef76"}, @ptm_cap={0x3}, @generic={0xbf, 0x10, 0x2, "dac41873f441a16c4f9f5cb10fcab9f66fb73a3d10e89fbf59cbdd5ea1546062c6dc155de7dd6dc3f9af81fae4fca3b89bedea3b16d767dc0f4357544933f7b8a22d9dbf86403a5577517c4af696f312c87e77413af6ea0850d0a3314ef55b20f720e5fcd1f4233e799698cbf5ad0984631348e732f398ec0e2e0a27249c7f6784d9ae2a1f05e2f0b38745486d46e86df0cbc1e5631283e97a8f278316e58fa0cd2c9471f446263c7518fe2b1d1529fb48797beb652c4d02278446b6"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x14, 0x9, 0xc2, "04189ca3", "0cc27380"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x1f, 0x5d, 0x7f, 0x7, 0x4}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c00)={0x0, 0x10, 0xaa, "d31522c6ec9d0458239835348d258bda68231521b0723db7d699e0d2e72f89fa8168ca96196e2ab48eed09f3c50d039e78d3de1cc74766e3d91a27867b68c2169f44bf88a21e68539f90821f12bac2b3e90588f799c15f58f46292a32c6d7cc2a52d97154e7633a5f58d3f4e280780acb069b3766925a79f868946c3bd84ac44986ee30277c61cd615465f7d5364ada34698657cf24182f9c25e02bdca8940cbbc627437879d438cb675"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x130, 0x20, [0xf000]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0xbf9}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "9daf"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "e455"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x2e2d}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0xc}}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (rerun: 32)

00:03:50 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f01000000000000"], 0x0)

00:03:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701751e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:50 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

00:03:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xf200000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2399.831644][T30410] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 2399.839053][T26277] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 2399.881684][T18274] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 2399.889155][  T126] usb 3-1: new high-speed USB device number 125 using dummy_hcd
00:03:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xf401000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xff00000000000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2400.131641][T26277] usb 5-1: device descriptor read/64, error 18
[ 2400.131698][T18274] usb 2-1: Using ep0 maxpacket: 32
00:03:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xffffff7f00000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2400.251685][  T126] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2400.260258][  T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2400.270374][T18274] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2400.271676][T30410] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2400.285641][  T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
00:03:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1701851e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2400.291270][T30410] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2400.309063][T30410] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2400.332917][  T126] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:03:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0xffffffff00000000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2400.481840][T30410] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2400.675260][T26277] usb 5-1: device descriptor read/64, error 18
[ 2400.681272][T30410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2400.689460][T30410] usb 1-1: Product: syz
[ 2400.693673][T30410] usb 1-1: Manufacturer: syz
[ 2400.698070][T30410] usb 1-1: SerialNumber: syz
[ 2400.741950][T30410] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2400.748547][T30410] cdc_ncm 1-1:1.0: bind() failure
[ 2400.761967][  T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2400.770924][T18274] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2400.779896][T18274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2400.787836][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2400.795868][T18274] usb 2-1: Product: syz
[ 2400.799948][  T126] usb 3-1: Product: syz
[ 2400.803960][T18274] usb 2-1: Manufacturer: syz
[ 2400.808474][  T126] usb 3-1: Manufacturer: syz
[ 2400.813024][T18274] usb 2-1: SerialNumber: syz
[ 2400.817532][  T126] usb 3-1: SerialNumber: syz
[ 2400.872524][  T126] cdc_ncm 3-1:1.0: skipping garbage
[ 2400.877641][  T126] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2400.884457][  T126] cdc_ncm 3-1:1.0: bind() failure
[ 2400.943872][  T126] usb 1-1: USB disconnect, device number 99
[ 2400.951659][T26277] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 2401.074258][T22633] usb 3-1: USB disconnect, device number 125
[ 2401.221648][T26277] usb 5-1: device descriptor read/64, error 18
[ 2401.631964][T26277] usb 5-1: device descriptor read/64, error 18
[ 2401.761677][T26277] usb usb5-port1: attempt power cycle
[ 2401.961690][T18274] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2401.967933][T18274] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2401.975165][T18274] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2402.181655][T26277] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 2402.181706][T18274] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2402.195755][T18274] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2402.207223][T18274] usb 2-1: USB disconnect, device number 70
[ 2402.213363][T18274] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2402.291644][T26277] usb 5-1: Invalid ep0 maxpacket: 1
[ 2402.441661][T26277] usb 5-1: new high-speed USB device number 69 using dummy_hcd
00:03:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1703151e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:54 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300"], 0x0)

00:03:54 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

00:03:54 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x1, 0x26, "0b4135e2ec8e96ee0bebd1056f193e8900fee0e98eb514f70b6047833bfa45d27e12d36ca2bc"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:03:54 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x14}, [@obex={0x5, 0x24, 0x15, 0x3fd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x2, 0xdf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2}}}}}}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1ebe2d0000000000010902240001000000000904000001030000000b2100000001220700090581030000000008"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0xd, 0x98, {0x98, 0xa, "018e3941f4df1387b9d267050737f79e0c2484b39f6be7a824bcd5da113571c35499af060aaa998eda36934732861d88e649a9c0fc9f2704492702348ff2a03255aa23b4184775156a327508fc8457b8161a45c6d6d6df262708dc3c6d20260014d0dd72d716056e35d44ff84f0566a0f50c63655e62ff93d2e8a068ed3dcb359eb820cc721bcc6be470f55ce316cf318efb36d937c2"}}, &(0x7f0000001700)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "a5945be949a6fe3900e6add18ccb93341820a1facc28f1c1b34c9b54a8302f2a0c25f866de5c0e07cfebdb5f6d2bf6b166ce3569344292bd26f915c188d6e70a5aeaa32848384c92960c3b"}}, &(0x7f0000001780)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "4a9908c6847adeb6b1fbb2087f890ba2"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "783c892858db8afe512eb09f8a820037"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x20, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x60, "74f0966e9c690c1ed15c6d5eaf86bf0b"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0xf, 0x200}]}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x60, 0x4, 0x6, "abc90998", "8c506085"}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x20, 0x2f, 0xb3bd, 0x6}}}, &(0x7f0000001cc0)={0x84, &(0x7f00000018c0)={0x40, 0x0, 0x30, "b6e7e4cdb8240eacfad730cefdfa3a37c189cf00d504cc6765b1d0508f3803a187080f7240443a92e48b79b07b2ac117"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "6be7"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "0256"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x13}, &(0x7f0000001c40)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io(r1, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a80)={0x40, 0x9, 0x27, {0x27, 0x10, "8972d8e79906d45ba54ec9d9261229e574621040025485e8b28331bd75541794d9091f96f7"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000000b00)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x1f, 0xab2d, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x8, 0xd5c7}, @ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0x6, 0x11, 0x5}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0xbb, 0x5, "57d79053", "f4dcc634"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x20, 0x1, 0x8, 0x5, 0x3}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x12, 0x3f, "a66db70072fdae2d6d07b6a95441baf8cab541adc5b9f9d39e12bc2f3210906e7a38f13a303eb433b76b777e9d9f7d8ac511da60e1a32afcbde1c3a9d0304c"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x680, 0x7e, [0xfff7]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "24ee"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xcb}, &(0x7f0000000e80)={0x40, 0x13, 0x6}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "2112"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x47}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001380)={0x24, &(0x7f0000001100)={0x40, 0x25, 0xbe, {0xbe, 0xf, "4f62a2efca82ceb9e207f1256d470e9fbf1d4f1a811d279a015dd3ef64a3e0d101716c23e21d7666486a397e9ef28da31aa907a953bc1fb79c4053f02299f9460ae6597263b9541be958aaea60d0c841112fa6821036613a3b33e2c8810e212d92f07e0e4e742fbe347c930f2bd458a443a6938f2a4e962d4a8d9ba0a34b0bcef92740c229af25f406bc4b5b35e6479ff0b7d1e20e40b689ab5392561aec4427cd24c8ec02dfa0b524e34c9325b837e8676dbc65bf79b2d6286501e3"}}, &(0x7f0000001200)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "3884221bf0bb2fd7b9d5a89f33847e6ec6bf76449ea237a5a40f2ad5c2dda371e9c4a6dbbeccb506a851e4ca170ca7c8280f6e18665ec0c052c24a104c93c5b8577ac43ca5c9f833975e9ae27a0e435c4d18b48fd452fd10b998447bd103027b86528a4c3127b8c891a590860887b75ef0b788eeecf9844cd3e3f12010135310c8c80031740f15bb4fe45240c3ba9fb4c1e7cb7012e6c2229f02fe2c1bc993f752dc6b3c0a09ff4df86315d9127c9b66842baf4c03a8e729abfb30aea8"}}, &(0x7f0000001300)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "0d376cd0"}, @global=@item_4={0x3, 0x1, 0xb, "86185b9c"}]}}, &(0x7f0000001340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xe56}}}}, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x40, 0x15, 0x68, "af2c3ac5467b320455e46f26888bb3ff6f7483653c165814cc064aa06e05d7e18346da4142115faab8bbbe874aedf70b4a4aa0bd4bd93ffa5dfb3177ab36543b798cd02cdea73158fb9469b29b3c54d601661aac99729f56e5358e5efed471d295e66c467074032f"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000014c0)={0x20, 0x1, 0xc8, "6b7f986f2a69a2c1b270db9a95a420ec91b2fdbbc60ae6157f43ceff113b4dcff2f35baef006cafcdcc455b7d03091134d0a0256b1b14e3ecbc9c914c570453bbb88b0466d5e8864a40b5d20e7c7b8b9e37e0cd2a70dccc269f152632999233c4c7ac7bec75a32530de79463fe5905c937c60a82c832557ce26f7105868fb826fb426ca03e82a49c437b71e5da7a33f2f17bb4a34d431bc20c6fb2423b66999e2076abe9749a751fb8fe8c0a1426b047e5523c0cc8744f94f9dd9ecfa10f288ab04f628a9dcdc801"}, &(0x7f00000015c0)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000680)={0x0, 0x8, 0xf4, {0xf4, 0x22, "e558a55bb765200973bdd1e40e1f1303fec0252896826cbe4cb2e97fc9783e5cfd816a642997b4d0dad5b0d429efcc7c76d7169159c10ccfe9a984e58220bf3d5cba70e82c6f390d721d530d9fcbca757a80faa13e55a5ec68cd67de9371a8dcf73e02a3fd4624bad68c14b392f7654468552c0ca26297cb95f17ae5ba02d20eeec93017dc6faf5b5491d33de1a17708f3f23f8cb235a91dac74f9f59983f838697664bcff97e95dd80b219680f21ac9591e563c17cb24a4f71bfcbfcfbd9bb8413f7a0e22d0fc08a014be3ca396e0d52f3c977bc14d09611316edc0b97aa71611c4c08ab15f0a2023afc83e5c98fb994db6"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x40, 0x0, 0x85, "8aba23274ba29626ef4c22680d28dce2c299669d2e655d4c038e2ecc6b8a32cd5eb323428f1368d902c66a676aa641f1fd5113990f5f6007e8b6122995a9d11dcfade1303ad6f96fb6e3680598f2bcc1fcb0634e3594526eb6be7559e81e8b4d7efef5e96b60e5f87d1e05baeb7b36c2a3b39f13cc3b12d92b15ee63fa79bd5ef18f463a52"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x7f, 0x0, 0x3, 0x20, 0x4, 0x7f, 0x3, 0x7, 0x6, 0x200, 0x9, 0x400}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x100}, &(0x7f00000009c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x23, 0x78, {0x78, 0x0, "1b84e7e54956e5060e86d2a190882997b61a39843e3d1ba42193a29cbc5f58c8902532753866a4a8c9868b930e213f95c6a08595b0dd686a67b3c6e0c8601c851a2e259ef13347286d72e1d93b3f3c81496f242ae42900ad9522685a982fb48488617f2fc3a020c1e7f349eee1136c924c3c46382e15"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0xe, 0xe2, "334158fc515ec57ea2f730f074d5e98949d715b53a75b3fb17dfc1638048dca0782d90e77064d2d265df079dc9a8794dab546281df470c6b42db96c484fb1b0c210d35da1522a43c5dae41f5c95aff415e776d83d2f15b4f8c35011b7ed0a4b16ad79259a913df4230d638f1392c15da6542c2155ceaaafa085ad7f6d9748b0b1af0cfda9bd040802846d35b6b4fd7476cb30df8d3adf72cf91b71fb867b12b95bb5631c677ce66d4479b87deaddc8b2a054912eab35c95318dc3c78c180e15053360a1aa87c3762e6fabe81b26f9b02bf54a9de4d67e234a84c5705da7ec0820983"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x6, 0x8000, 0x5b79ff72, 0x81, 0x1, 0xfff9, 0x1f, 0x400, 0xc30, 0x4, 0x1, 0x2}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6f2}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2403.003251][T26277] usb 5-1: device not accepting address 69, error -71
[ 2403.013821][T26277] usb usb5-port1: unable to enumerate USB device
[ 2403.091649][ T3454] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 2403.099163][T22633] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 2403.131657][  T126] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 2403.371650][T26277] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 2403.401701][T22633] usb 2-1: Using ep0 maxpacket: 32
00:03:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x2}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1704551e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2403.491704][  T126] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2403.500260][  T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2403.510412][  T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2403.536521][  T126] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2403.551700][ T3454] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2403.561744][T22633] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2403.573019][ T3454] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2403.582019][ T3454] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2403.919788][T26277] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[ 2403.929552][T22633] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2403.939000][T22633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2403.947842][T22633] usb 2-1: Product: syz
[ 2403.952164][T22633] usb 2-1: Manufacturer: syz
[ 2403.956687][T22633] usb 2-1: SerialNumber: syz
00:03:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2403.981656][  T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2403.990575][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2403.998746][  T126] usb 3-1: Product: syz
[ 2404.001691][ T3454] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2404.003178][  T126] usb 3-1: Manufacturer: syz
[ 2404.016282][ T3454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2404.022353][  T126] usb 3-1: SerialNumber: syz
[ 2404.024245][ T3454] usb 1-1: Product: syz
[ 2404.032687][ T3454] usb 1-1: Manufacturer: syz
[ 2404.037093][ T3454] usb 1-1: SerialNumber: syz
[ 2404.072146][  T126] cdc_ncm 3-1:1.0: skipping garbage
[ 2404.077256][  T126] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2404.084080][  T126] cdc_ncm 3-1:1.0: bind() failure
[ 2404.092871][ T3454] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2404.108155][ T3454] cdc_ncm 1-1:1.0: bind() failure
00:03:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x4}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2404.141690][T26277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2404.150544][T26277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2404.171616][T26277] usb 5-1: Product: syz
[ 2404.175609][T26277] usb 5-1: Manufacturer: syz
[ 2404.180030][T26277] usb 5-1: SerialNumber: syz
[ 2404.275004][T32621] usb 3-1: USB disconnect, device number 126
[ 2404.293941][ T3454] usb 1-1: USB disconnect, device number 100
00:03:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x5}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698102a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2404.442391][T13037] udc-core: couldn't find an available UDC or it's busy
[ 2404.449167][T13037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2404.456802][T13037] udc-core: couldn't find an available UDC or it's busy
[ 2404.463749][T13037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
00:03:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x6}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2404.793879][T13037] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
00:03:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x7}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:56 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300"], 0x0)

00:03:56 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

[ 2405.241650][  T126] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 2405.252404][T32621] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 2405.411712][T22633] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2405.418085][T22633] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2405.425495][T22633] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2405.601675][  T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2405.611685][  T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2405.620408][  T126] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2405.642997][T22633] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2405.656988][T22633] usb 2-1: USB disconnect, device number 71
[ 2405.662956][T32621] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2405.671683][T32621] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2405.671873][T13037] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[ 2405.681566][T32621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2405.682760][T22633] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2405.705453][T32621] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2405.791794][  T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2405.800668][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2405.809005][  T126] usb 1-1: Product: syz
[ 2405.813151][  T126] usb 1-1: Manufacturer: syz
[ 2405.817553][  T126] usb 1-1: SerialNumber: syz
[ 2405.862783][  T126] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2405.869394][  T126] cdc_ncm 1-1:1.0: bind() failure
[ 2405.901689][T32621] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2405.910604][T32621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2405.918588][T32621] usb 3-1: Product: syz
[ 2405.922729][T26277] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2405.928958][T26277] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2405.936371][T32621] usb 3-1: Manufacturer: syz
[ 2405.940778][T32621] usb 3-1: SerialNumber: syz
[ 2405.945885][T26277] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2405.992097][T32621] cdc_ncm 3-1:1.0: skipping garbage
[ 2405.997163][T32621] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2406.003930][T32621] cdc_ncm 3-1:1.0: bind() failure
[ 2406.063060][  T126] usb 1-1: USB disconnect, device number 101
00:03:57 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2406.131683][T26277] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2406.138369][T26277] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2406.194508][T26281] usb 3-1: USB disconnect, device number 127
[ 2406.333349][T26277] usb 5-1: USB disconnect, device number 70
[ 2406.351677][T26277] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2406.401729][T18274] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 2406.641630][T18274] usb 2-1: Using ep0 maxpacket: 32
[ 2406.761714][T18274] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:03:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede269810aa1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x8}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:58 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300"], 0x0)

00:03:58 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401000002"], 0x0)

00:03:58 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x14}, [@obex={0x5, 0x24, 0x15, 0x3fd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x2, 0xdf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2}}}}}}}]}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1ebe2d0000000000010902240001000000000904000001030000000b2100000001220700090581030000000008"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0xd, 0x98, {0x98, 0xa, "018e3941f4df1387b9d267050737f79e0c2484b39f6be7a824bcd5da113571c35499af060aaa998eda36934732861d88e649a9c0fc9f2704492702348ff2a03255aa23b4184775156a327508fc8457b8161a45c6d6d6df262708dc3c6d20260014d0dd72d716056e35d44ff84f0566a0f50c63655e62ff93d2e8a068ed3dcb359eb820cc721bcc6be470f55ce316cf318efb36d937c2"}}, &(0x7f0000001700)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "a5945be949a6fe3900e6add18ccb93341820a1facc28f1c1b34c9b54a8302f2a0c25f866de5c0e07cfebdb5f6d2bf6b166ce3569344292bd26f915c188d6e70a5aeaa32848384c92960c3b"}}, &(0x7f0000001780)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "4a9908c6847adeb6b1fbb2087f890ba2"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "783c892858db8afe512eb09f8a820037"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x20, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x60, "74f0966e9c690c1ed15c6d5eaf86bf0b"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0xf, 0x200}]}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x60, 0x4, 0x6, "abc90998", "8c506085"}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x20, 0x2f, 0xb3bd, 0x6}}}, &(0x7f0000001cc0)={0x84, &(0x7f00000018c0)={0x40, 0x0, 0x30, "b6e7e4cdb8240eacfad730cefdfa3a37c189cf00d504cc6765b1d0508f3803a187080f7240443a92e48b79b07b2ac117"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "6be7"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "0256"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x13}, &(0x7f0000001c40)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io(r1, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a80)={0x40, 0x9, 0x27, {0x27, 0x10, "8972d8e79906d45ba54ec9d9261229e574621040025485e8b28331bd75541794d9091f96f7"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000000b00)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x1f, 0xab2d, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x8, 0xd5c7}, @ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0x6, 0x11, 0x5}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0xbb, 0x5, "57d79053", "f4dcc634"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x20, 0x1, 0x8, 0x5, 0x3}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x12, 0x3f, "a66db70072fdae2d6d07b6a95441baf8cab541adc5b9f9d39e12bc2f3210906e7a38f13a303eb433b76b777e9d9f7d8ac511da60e1a32afcbde1c3a9d0304c"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x680, 0x7e, [0xfff7]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "24ee"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xcb}, &(0x7f0000000e80)={0x40, 0x13, 0x6}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "2112"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x47}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001380)={0x24, &(0x7f0000001100)={0x40, 0x25, 0xbe, {0xbe, 0xf, "4f62a2efca82ceb9e207f1256d470e9fbf1d4f1a811d279a015dd3ef64a3e0d101716c23e21d7666486a397e9ef28da31aa907a953bc1fb79c4053f02299f9460ae6597263b9541be958aaea60d0c841112fa6821036613a3b33e2c8810e212d92f07e0e4e742fbe347c930f2bd458a443a6938f2a4e962d4a8d9ba0a34b0bcef92740c229af25f406bc4b5b35e6479ff0b7d1e20e40b689ab5392561aec4427cd24c8ec02dfa0b524e34c9325b837e8676dbc65bf79b2d6286501e3"}}, &(0x7f0000001200)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "3884221bf0bb2fd7b9d5a89f33847e6ec6bf76449ea237a5a40f2ad5c2dda371e9c4a6dbbeccb506a851e4ca170ca7c8280f6e18665ec0c052c24a104c93c5b8577ac43ca5c9f833975e9ae27a0e435c4d18b48fd452fd10b998447bd103027b86528a4c3127b8c891a590860887b75ef0b788eeecf9844cd3e3f12010135310c8c80031740f15bb4fe45240c3ba9fb4c1e7cb7012e6c2229f02fe2c1bc993f752dc6b3c0a09ff4df86315d9127c9b66842baf4c03a8e729abfb30aea8"}}, &(0x7f0000001300)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "0d376cd0"}, @global=@item_4={0x3, 0x1, 0xb, "86185b9c"}]}}, &(0x7f0000001340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xe56}}}}, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x40, 0x15, 0x68, "af2c3ac5467b320455e46f26888bb3ff6f7483653c165814cc064aa06e05d7e18346da4142115faab8bbbe874aedf70b4a4aa0bd4bd93ffa5dfb3177ab36543b798cd02cdea73158fb9469b29b3c54d601661aac99729f56e5358e5efed471d295e66c467074032f"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000014c0)={0x20, 0x1, 0xc8, "6b7f986f2a69a2c1b270db9a95a420ec91b2fdbbc60ae6157f43ceff113b4dcff2f35baef006cafcdcc455b7d03091134d0a0256b1b14e3ecbc9c914c570453bbb88b0466d5e8864a40b5d20e7c7b8b9e37e0cd2a70dccc269f152632999233c4c7ac7bec75a32530de79463fe5905c937c60a82c832557ce26f7105868fb826fb426ca03e82a49c437b71e5da7a33f2f17bb4a34d431bc20c6fb2423b66999e2076abe9749a751fb8fe8c0a1426b047e5523c0cc8744f94f9dd9ecfa10f288ab04f628a9dcdc801"}, &(0x7f00000015c0)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000680)={0x0, 0x8, 0xf4, {0xf4, 0x22, "e558a55bb765200973bdd1e40e1f1303fec0252896826cbe4cb2e97fc9783e5cfd816a642997b4d0dad5b0d429efcc7c76d7169159c10ccfe9a984e58220bf3d5cba70e82c6f390d721d530d9fcbca757a80faa13e55a5ec68cd67de9371a8dcf73e02a3fd4624bad68c14b392f7654468552c0ca26297cb95f17ae5ba02d20eeec93017dc6faf5b5491d33de1a17708f3f23f8cb235a91dac74f9f59983f838697664bcff97e95dd80b219680f21ac9591e563c17cb24a4f71bfcbfcfbd9bb8413f7a0e22d0fc08a014be3ca396e0d52f3c977bc14d09611316edc0b97aa71611c4c08ab15f0a2023afc83e5c98fb994db6"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x40, 0x0, 0x85, "8aba23274ba29626ef4c22680d28dce2c299669d2e655d4c038e2ecc6b8a32cd5eb323428f1368d902c66a676aa641f1fd5113990f5f6007e8b6122995a9d11dcfade1303ad6f96fb6e3680598f2bcc1fcb0634e3594526eb6be7559e81e8b4d7efef5e96b60e5f87d1e05baeb7b36c2a3b39f13cc3b12d92b15ee63fa79bd5ef18f463a52"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x7f, 0x0, 0x3, 0x20, 0x4, 0x7f, 0x3, 0x7, 0x6, 0x200, 0x9, 0x400}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x100}, &(0x7f00000009c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x23, 0x78, {0x78, 0x0, "1b84e7e54956e5060e86d2a190882997b61a39843e3d1ba42193a29cbc5f58c8902532753866a4a8c9868b930e213f95c6a08595b0dd686a67b3c6e0c8601c851a2e259ef13347286d72e1d93b3f3c81496f242ae42900ad9522685a982fb48488617f2fc3a020c1e7f349eee1136c924c3c46382e15"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0xe, 0xe2, "334158fc515ec57ea2f730f074d5e98949d715b53a75b3fb17dfc1638048dca0782d90e77064d2d265df079dc9a8794dab546281df470c6b42db96c484fb1b0c210d35da1522a43c5dae41f5c95aff415e776d83d2f15b4f8c35011b7ed0a4b16ad79259a913df4230d638f1392c15da6542c2155ceaaafa085ad7f6d9748b0b1af0cfda9bd040802846d35b6b4fd7476cb30df8d3adf72cf91b71fb867b12b95bb5631c677ce66d4479b87deaddc8b2a054912eab35c95318dc3c78c180e15053360a1aa87c3762e6fabe81b26f9b02bf54a9de4d67e234a84c5705da7ec0820983"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x6, 0x8000, 0x5b79ff72, 0x81, 0x1, 0xfff9, 0x1f, 0x400, 0xc30, 0x4, 0x1, 0x2}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6f2}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x14}, [@obex={0x5, 0x24, 0x15, 0x3fd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x2, 0xdf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2}}}}}}}]}}, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1ebe2d0000000000010902240001000000000904000001030000000b2100000001220700090581030000000008"], 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0xd, 0x98, {0x98, 0xa, "018e3941f4df1387b9d267050737f79e0c2484b39f6be7a824bcd5da113571c35499af060aaa998eda36934732861d88e649a9c0fc9f2704492702348ff2a03255aa23b4184775156a327508fc8457b8161a45c6d6d6df262708dc3c6d20260014d0dd72d716056e35d44ff84f0566a0f50c63655e62ff93d2e8a068ed3dcb359eb820cc721bcc6be470f55ce316cf318efb36d937c2"}}, &(0x7f0000001700)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "a5945be949a6fe3900e6add18ccb93341820a1facc28f1c1b34c9b54a8302f2a0c25f866de5c0e07cfebdb5f6d2bf6b166ce3569344292bd26f915c188d6e70a5aeaa32848384c92960c3b"}}, &(0x7f0000001780)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "4a9908c6847adeb6b1fbb2087f890ba2"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "783c892858db8afe512eb09f8a820037"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x20, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x60, "74f0966e9c690c1ed15c6d5eaf86bf0b"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0xf, 0x200}]}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x60, 0x4, 0x6, "abc90998", "8c506085"}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x20, 0x2f, 0xb3bd, 0x6}}}, &(0x7f0000001cc0)={0x84, &(0x7f00000018c0)={0x40, 0x0, 0x30, "b6e7e4cdb8240eacfad730cefdfa3a37c189cf00d504cc6765b1d0508f3803a187080f7240443a92e48b79b07b2ac117"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "6be7"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "0256"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x13}, &(0x7f0000001c40)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x7}}) (async)
syz_usb_control_io(r1, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a80)={0x40, 0x9, 0x27, {0x27, 0x10, "8972d8e79906d45ba54ec9d9261229e574621040025485e8b28331bd75541794d9091f96f7"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000000b00)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x1f, 0xab2d, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x8, 0xd5c7}, @ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0x6, 0x11, 0x5}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0xbb, 0x5, "57d79053", "f4dcc634"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x20, 0x1, 0x8, 0x5, 0x3}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x12, 0x3f, "a66db70072fdae2d6d07b6a95441baf8cab541adc5b9f9d39e12bc2f3210906e7a38f13a303eb433b76b777e9d9f7d8ac511da60e1a32afcbde1c3a9d0304c"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x680, 0x7e, [0xfff7]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "24ee"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xcb}, &(0x7f0000000e80)={0x40, 0x13, 0x6}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "2112"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x47}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000001380)={0x24, &(0x7f0000001100)={0x40, 0x25, 0xbe, {0xbe, 0xf, "4f62a2efca82ceb9e207f1256d470e9fbf1d4f1a811d279a015dd3ef64a3e0d101716c23e21d7666486a397e9ef28da31aa907a953bc1fb79c4053f02299f9460ae6597263b9541be958aaea60d0c841112fa6821036613a3b33e2c8810e212d92f07e0e4e742fbe347c930f2bd458a443a6938f2a4e962d4a8d9ba0a34b0bcef92740c229af25f406bc4b5b35e6479ff0b7d1e20e40b689ab5392561aec4427cd24c8ec02dfa0b524e34c9325b837e8676dbc65bf79b2d6286501e3"}}, &(0x7f0000001200)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "3884221bf0bb2fd7b9d5a89f33847e6ec6bf76449ea237a5a40f2ad5c2dda371e9c4a6dbbeccb506a851e4ca170ca7c8280f6e18665ec0c052c24a104c93c5b8577ac43ca5c9f833975e9ae27a0e435c4d18b48fd452fd10b998447bd103027b86528a4c3127b8c891a590860887b75ef0b788eeecf9844cd3e3f12010135310c8c80031740f15bb4fe45240c3ba9fb4c1e7cb7012e6c2229f02fe2c1bc993f752dc6b3c0a09ff4df86315d9127c9b66842baf4c03a8e729abfb30aea8"}}, &(0x7f0000001300)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "0d376cd0"}, @global=@item_4={0x3, 0x1, 0xb, "86185b9c"}]}}, &(0x7f0000001340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xe56}}}}, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x40, 0x15, 0x68, "af2c3ac5467b320455e46f26888bb3ff6f7483653c165814cc064aa06e05d7e18346da4142115faab8bbbe874aedf70b4a4aa0bd4bd93ffa5dfb3177ab36543b798cd02cdea73158fb9469b29b3c54d601661aac99729f56e5358e5efed471d295e66c467074032f"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000014c0)={0x20, 0x1, 0xc8, "6b7f986f2a69a2c1b270db9a95a420ec91b2fdbbc60ae6157f43ceff113b4dcff2f35baef006cafcdcc455b7d03091134d0a0256b1b14e3ecbc9c914c570453bbb88b0466d5e8864a40b5d20e7c7b8b9e37e0cd2a70dccc269f152632999233c4c7ac7bec75a32530de79463fe5905c937c60a82c832557ce26f7105868fb826fb426ca03e82a49c437b71e5da7a33f2f17bb4a34d431bc20c6fb2423b66999e2076abe9749a751fb8fe8c0a1426b047e5523c0cc8744f94f9dd9ecfa10f288ab04f628a9dcdc801"}, &(0x7f00000015c0)={0x20, 0x3, 0x1, 0x2}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000680)={0x0, 0x8, 0xf4, {0xf4, 0x22, "e558a55bb765200973bdd1e40e1f1303fec0252896826cbe4cb2e97fc9783e5cfd816a642997b4d0dad5b0d429efcc7c76d7169159c10ccfe9a984e58220bf3d5cba70e82c6f390d721d530d9fcbca757a80faa13e55a5ec68cd67de9371a8dcf73e02a3fd4624bad68c14b392f7654468552c0ca26297cb95f17ae5ba02d20eeec93017dc6faf5b5491d33de1a17708f3f23f8cb235a91dac74f9f59983f838697664bcff97e95dd80b219680f21ac9591e563c17cb24a4f71bfcbfcfbd9bb8413f7a0e22d0fc08a014be3ca396e0d52f3c977bc14d09611316edc0b97aa71611c4c08ab15f0a2023afc83e5c98fb994db6"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x40, 0x0, 0x85, "8aba23274ba29626ef4c22680d28dce2c299669d2e655d4c038e2ecc6b8a32cd5eb323428f1368d902c66a676aa641f1fd5113990f5f6007e8b6122995a9d11dcfade1303ad6f96fb6e3680598f2bcc1fcb0634e3594526eb6be7559e81e8b4d7efef5e96b60e5f87d1e05baeb7b36c2a3b39f13cc3b12d92b15ee63fa79bd5ef18f463a52"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x7f, 0x0, 0x3, 0x20, 0x4, 0x7f, 0x3, 0x7, 0x6, 0x200, 0x9, 0x400}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x100}, &(0x7f00000009c0)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x23, 0x78, {0x78, 0x0, "1b84e7e54956e5060e86d2a190882997b61a39843e3d1ba42193a29cbc5f58c8902532753866a4a8c9868b930e213f95c6a08595b0dd686a67b3c6e0c8601c851a2e259ef13347286d72e1d93b3f3c81496f242ae42900ad9522685a982fb48488617f2fc3a020c1e7f349eee1136c924c3c46382e15"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0xe, 0xe2, "334158fc515ec57ea2f730f074d5e98949d715b53a75b3fb17dfc1638048dca0782d90e77064d2d265df079dc9a8794dab546281df470c6b42db96c484fb1b0c210d35da1522a43c5dae41f5c95aff415e776d83d2f15b4f8c35011b7ed0a4b16ad79259a913df4230d638f1392c15da6542c2155ceaaafa085ad7f6d9748b0b1af0cfda9bd040802846d35b6b4fd7476cb30df8d3adf72cf91b71fb867b12b95bb5631c677ce66d4479b87deaddc8b2a054912eab35c95318dc3c78c180e15053360a1aa87c3762e6fabe81b26f9b02bf54a9de4d67e234a84c5705da7ec0820983"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x6, 0x8000, 0x5b79ff72, 0x81, 0x1, 0xfff9, 0x1f, 0x400, 0xc30, 0x4, 0x1, 0x2}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6f2}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)

[ 2407.141084][T18274] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2407.150539][T18274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2407.158667][T18274] usb 2-1: Product: syz
[ 2407.170824][T18274] usb 2-1: Manufacturer: syz
[ 2407.179884][T18274] usb 2-1: SerialNumber: syz
[ 2407.261630][T26277] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 2407.281634][T26281] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 2407.288960][  T126] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 2407.651732][T26281] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2407.660351][  T126] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[ 2407.661648][T26277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2407.670040][T26281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2407.685187][T26277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
00:03:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x9}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:03:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698111a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2407.699668][T26281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2407.708576][T26281] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2407.725113][T26277] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2408.081055][T26277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2408.094636][T26277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2408.108203][T18274] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 2408.110253][T26277] usb 1-1: Product: syz
[ 2408.119204][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2408.122419][T26277] usb 1-1: Manufacturer: syz
[ 2408.128132][T18274] cdc_ncm 2-1:1.0: bind() failure
[ 2408.137770][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2408.144806][T26277] usb 1-1: SerialNumber: syz
[ 2408.147590][T18274] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2408.156871][  T126] usb 5-1: Product: syz
[ 2408.160882][T18274] cdc_ncm 2-1:1.1: bind() failure
[ 2408.165758][  T126] usb 5-1: Manufacturer: syz
[ 2408.171219][  T126] usb 5-1: SerialNumber: syz
00:03:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xa}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2408.175762][T26281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2408.184749][T26281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2408.194309][T26281] usb 3-1: Product: syz
[ 2408.198505][T26281] usb 3-1: Manufacturer: syz
[ 2408.202372][T26277] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2408.211708][T26277] cdc_ncm 1-1:1.0: bind() failure
[ 2408.212314][T26281] usb 3-1: SerialNumber: syz
[ 2408.263015][T26281] cdc_ncm 3-1:1.0: skipping garbage
[ 2408.268100][T26281] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2408.280862][T26281] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2408.287583][T26281] cdc_ncm 3-1:1.0: bind() failure
00:03:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xb}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2408.404884][T26281] usb 1-1: USB disconnect, device number 102
[ 2408.431861][T13198] udc-core: couldn't find an available UDC or it's busy
[ 2408.438677][T13198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2408.446473][T13198] udc-core: couldn't find an available UDC or it's busy
[ 2408.453292][T13198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2408.460718][T13198] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[ 2408.464587][T32621] usb 3-1: USB disconnect, device number 2
00:04:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xc}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698113a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:00 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2409.136146][T26277] usb 2-1: USB disconnect, device number 72
[ 2409.501666][T26277] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 2409.551889][T13198] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[ 2409.761630][T26277] usb 2-1: Using ep0 maxpacket: 32
[ 2409.791702][  T126] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2409.797978][  T126] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2409.805379][  T126] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2409.901714][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2410.001666][  T126] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2410.008101][  T126] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2410.091785][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2410.101030][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2410.108958][T26277] usb 2-1: Product: syz
[ 2410.113376][T26277] usb 2-1: Manufacturer: syz
[ 2410.117851][T26277] usb 2-1: SerialNumber: syz
[ 2410.201890][T13233] udc-core: couldn't find an available UDC or it's busy
[ 2410.203862][T13262] udc-core: couldn't find an available UDC or it's busy
[ 2410.208671][T13233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2410.208825][T13198] udc-core: couldn't find an available UDC or it's busy
[ 2410.215602][T13262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2410.224270][T13198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
00:04:01 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401000002"], 0x0)

00:04:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xd}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:01 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

00:04:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698117a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:01 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x14}, [@obex={0x5, 0x24, 0x15, 0x3fd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x2, 0xdf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2}}}}}}}]}}, 0x0) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1ebe2d0000000000010902240001000000000904000001030000000b2100000001220700090581030000000008"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0x0, "0017"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_control_io(r2, &(0x7f0000001880)={0x2c, &(0x7f0000001640)={0x0, 0xd, 0x98, {0x98, 0xa, "018e3941f4df1387b9d267050737f79e0c2484b39f6be7a824bcd5da113571c35499af060aaa998eda36934732861d88e649a9c0fc9f2704492702348ff2a03255aa23b4184775156a327508fc8457b8161a45c6d6d6df262708dc3c6d20260014d0dd72d716056e35d44ff84f0566a0f50c63655e62ff93d2e8a068ed3dcb359eb820cc721bcc6be470f55ce316cf318efb36d937c2"}}, &(0x7f0000001700)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "a5945be949a6fe3900e6add18ccb93341820a1facc28f1c1b34c9b54a8302f2a0c25f866de5c0e07cfebdb5f6d2bf6b166ce3569344292bd26f915c188d6e70a5aeaa32848384c92960c3b"}}, &(0x7f0000001780)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x4, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "4a9908c6847adeb6b1fbb2087f890ba2"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "783c892858db8afe512eb09f8a820037"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x20, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x60, "74f0966e9c690c1ed15c6d5eaf86bf0b"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x6, 0xf, 0x200}]}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x60, 0x4, 0x6, "abc90998", "8c506085"}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x5, 0x20, 0x2f, 0xb3bd, 0x6}}}, &(0x7f0000001cc0)={0x84, &(0x7f00000018c0)={0x40, 0x0, 0x30, "b6e7e4cdb8240eacfad730cefdfa3a37c189cf00d504cc6765b1d0508f3803a187080f7240443a92e48b79b07b2ac117"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "6be7"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000001b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "0256"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x13}, &(0x7f0000001c40)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io(r1, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a80)={0x40, 0x9, 0x27, {0x27, 0x10, "8972d8e79906d45ba54ec9d9261229e574621040025485e8b28331bd75541794d9091f96f7"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f0000000b00)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x1f, 0xab2d, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x8, 0xd5c7}, @ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0x6, 0x11, 0x5}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0xbb, 0x5, "57d79053", "f4dcc634"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x20, 0x1, 0x8, 0x5, 0x3}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x12, 0x3f, "a66db70072fdae2d6d07b6a95441baf8cab541adc5b9f9d39e12bc2f3210906e7a38f13a303eb433b76b777e9d9f7d8ac511da60e1a32afcbde1c3a9d0304c"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x680, 0x7e, [0xfff7]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "24ee"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xcb}, &(0x7f0000000e80)={0x40, 0x13, 0x6}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "2112"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x47}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001380)={0x24, &(0x7f0000001100)={0x40, 0x25, 0xbe, {0xbe, 0xf, "4f62a2efca82ceb9e207f1256d470e9fbf1d4f1a811d279a015dd3ef64a3e0d101716c23e21d7666486a397e9ef28da31aa907a953bc1fb79c4053f02299f9460ae6597263b9541be958aaea60d0c841112fa6821036613a3b33e2c8810e212d92f07e0e4e742fbe347c930f2bd458a443a6938f2a4e962d4a8d9ba0a34b0bcef92740c229af25f406bc4b5b35e6479ff0b7d1e20e40b689ab5392561aec4427cd24c8ec02dfa0b524e34c9325b837e8676dbc65bf79b2d6286501e3"}}, &(0x7f0000001200)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "3884221bf0bb2fd7b9d5a89f33847e6ec6bf76449ea237a5a40f2ad5c2dda371e9c4a6dbbeccb506a851e4ca170ca7c8280f6e18665ec0c052c24a104c93c5b8577ac43ca5c9f833975e9ae27a0e435c4d18b48fd452fd10b998447bd103027b86528a4c3127b8c891a590860887b75ef0b788eeecf9844cd3e3f12010135310c8c80031740f15bb4fe45240c3ba9fb4c1e7cb7012e6c2229f02fe2c1bc993f752dc6b3c0a09ff4df86315d9127c9b66842baf4c03a8e729abfb30aea8"}}, &(0x7f0000001300)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "0d376cd0"}, @global=@item_4={0x3, 0x1, 0xb, "86185b9c"}]}}, &(0x7f0000001340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xe56}}}}, &(0x7f0000001600)={0x2c, &(0x7f00000013c0)={0x40, 0x15, 0x68, "af2c3ac5467b320455e46f26888bb3ff6f7483653c165814cc064aa06e05d7e18346da4142115faab8bbbe874aedf70b4a4aa0bd4bd93ffa5dfb3177ab36543b798cd02cdea73158fb9469b29b3c54d601661aac99729f56e5358e5efed471d295e66c467074032f"}, &(0x7f0000001440)={0x0, 0xa, 0x1}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000014c0)={0x20, 0x1, 0xc8, "6b7f986f2a69a2c1b270db9a95a420ec91b2fdbbc60ae6157f43ceff113b4dcff2f35baef006cafcdcc455b7d03091134d0a0256b1b14e3ecbc9c914c570453bbb88b0466d5e8864a40b5d20e7c7b8b9e37e0cd2a70dccc269f152632999233c4c7ac7bec75a32530de79463fe5905c937c60a82c832557ce26f7105868fb826fb426ca03e82a49c437b71e5da7a33f2f17bb4a34d431bc20c6fb2423b66999e2076abe9749a751fb8fe8c0a1426b047e5523c0cc8744f94f9dd9ecfa10f288ab04f628a9dcdc801"}, &(0x7f00000015c0)={0x20, 0x3, 0x1, 0x2}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000680)={0x0, 0x8, 0xf4, {0xf4, 0x22, "e558a55bb765200973bdd1e40e1f1303fec0252896826cbe4cb2e97fc9783e5cfd816a642997b4d0dad5b0d429efcc7c76d7169159c10ccfe9a984e58220bf3d5cba70e82c6f390d721d530d9fcbca757a80faa13e55a5ec68cd67de9371a8dcf73e02a3fd4624bad68c14b392f7654468552c0ca26297cb95f17ae5ba02d20eeec93017dc6faf5b5491d33de1a17708f3f23f8cb235a91dac74f9f59983f838697664bcff97e95dd80b219680f21ac9591e563c17cb24a4f71bfcbfcfbd9bb8413f7a0e22d0fc08a014be3ca396e0d52f3c977bc14d09611316edc0b97aa71611c4c08ab15f0a2023afc83e5c98fb994db6"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x40, 0x0, 0x85, "8aba23274ba29626ef4c22680d28dce2c299669d2e655d4c038e2ecc6b8a32cd5eb323428f1368d902c66a676aa641f1fd5113990f5f6007e8b6122995a9d11dcfade1303ad6f96fb6e3680598f2bcc1fcb0634e3594526eb6be7559e81e8b4d7efef5e96b60e5f87d1e05baeb7b36c2a3b39f13cc3b12d92b15ee63fa79bd5ef18f463a52"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x7f, 0x0, 0x3, 0x20, 0x4, 0x7f, 0x3, 0x7, 0x6, 0x200, 0x9, 0x400}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000940)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x100}, &(0x7f00000009c0)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x23, 0x78, {0x78, 0x0, "1b84e7e54956e5060e86d2a190882997b61a39843e3d1ba42193a29cbc5f58c8902532753866a4a8c9868b930e213f95c6a08595b0dd686a67b3c6e0c8601c851a2e259ef13347286d72e1d93b3f3c81496f242ae42900ad9522685a982fb48488617f2fc3a020c1e7f349eee1136c924c3c46382e15"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0xe, 0xe2, "334158fc515ec57ea2f730f074d5e98949d715b53a75b3fb17dfc1638048dca0782d90e77064d2d265df079dc9a8794dab546281df470c6b42db96c484fb1b0c210d35da1522a43c5dae41f5c95aff415e776d83d2f15b4f8c35011b7ed0a4b16ad79259a913df4230d638f1392c15da6542c2155ceaaafa085ad7f6d9748b0b1af0cfda9bd040802846d35b6b4fd7476cb30df8d3adf72cf91b71fb867b12b95bb5631c677ce66d4479b87deaddc8b2a054912eab35c95318dc3c78c180e15053360a1aa87c3762e6fabe81b26f9b02bf54a9de4d67e234a84c5705da7ec0820983"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x6, 0x8000, 0x5b79ff72, 0x81, 0x1, 0xfff9, 0x1f, 0x400, 0xc30, 0x4, 0x1, 0x2}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6f2}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2410.246610][T26281] usb 5-1: USB disconnect, device number 71
[ 2410.257742][T13277] udc-core: couldn't find an available UDC or it's busy
[ 2410.269029][T13277] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2410.272025][T26281] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
00:04:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xe}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2410.691613][ T2577] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 2410.771727][  T126] usb 1-1: new high-speed USB device number 103 using dummy_hcd
00:04:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xf}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2410.861656][T26277] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 2410.867701][T26277] cdc_ncm 2-1:1.0: bind() failure
[ 2410.873746][T26277] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2410.880394][T26277] cdc_ncm 2-1:1.1: bind() failure
[ 2410.931636][T26281] usb 5-1: new high-speed USB device number 72 using dummy_hcd
00:04:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x10}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:02 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698118a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2411.051682][ T2577] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2411.060286][ T2577] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2411.070398][ T2577] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2411.079304][ T2577] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:04:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x11}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2411.171682][  T126] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2411.440070][  T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2411.449847][ T2577] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2411.452742][  T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2411.470017][  T126] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2411.471196][ T2577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2411.490527][ T2577] usb 3-1: Product: syz
[ 2411.494547][ T2577] usb 3-1: Manufacturer: syz
[ 2411.498953][ T2577] usb 3-1: SerialNumber: syz
[ 2411.531706][T26281] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[ 2411.542043][ T2577] cdc_ncm 3-1:1.0: skipping garbage
[ 2411.544134][T26281] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2411.548353][ T2577] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2411.560959][T26281] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
00:04:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x12}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2411.575095][T26281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2411.576075][ T2577] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2411.583555][T26281] usb 5-1: config 0 descriptor??
[ 2411.598389][ T2577] cdc_ncm 3-1:1.0: bind() failure
[ 2411.643295][T26281] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 2411.681666][  T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2411.690694][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2411.698950][  T126] usb 1-1: Product: syz
[ 2411.703185][  T126] usb 1-1: Manufacturer: syz
[ 2411.707704][  T126] usb 1-1: SerialNumber: syz
[ 2411.744749][T26277] usb 3-1: USB disconnect, device number 3
[ 2411.753353][  T126] cdc_ncm 1-1:1.0: skipping garbage
[ 2411.758497][  T126] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2411.765287][  T126] cdc_ncm 1-1:1.0: bind() failure
[ 2411.953907][T26277] usb 1-1: USB disconnect, device number 103
00:04:03 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698145a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2412.145823][  T126] usb 2-1: USB disconnect, device number 73
[ 2412.192532][T13339] udc-core: couldn't find an available UDC or it's busy
[ 2412.199285][T13339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
00:04:03 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401000002"], 0x0)

00:04:03 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:04 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

00:04:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x13}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:04 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0100000005810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001800)={0x14, &(0x7f00000016c0)={0x0, 0xc, 0xe5, {0xe5, 0xc, "7bab581c859320d9bee709b8a180fc77284b9853220a16c378b62a1bc8c6701c22921a2ce969d6d4f36881d85ab57cb8d13ca1e37f84b42860949029eead5e2ae324d1da0081c5318fe1ac02004b9b457cf38f850f04e3fe705987033488b5e65a0c88ba60db350bb41980904a99ed78eef682082bde9283894a5b79fc79913d77e1d609d84be30152a5aadce1c2e6e2ddef6879e9579d67c50ef921ab6c6a27d5f6f86126803b22b02730e46a6b7394be7097a580011bbe1c16707a77de4f735253ed0f563d453cf486ee5c7e6f872e67ae6c132375c75c754a6c88b99278a43c921c"}}, &(0x7f00000017c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a80)={0x44, &(0x7f0000001840)={0x0, 0x10, 0x4e, "9e11bf00d3b7618d8fc2ade214a6afeb7f1c85c1e514079841f1a31b560697e761fdcd99ec2f3654e4de5a8fe7d7388d32ef69556934e0d8283e899458241d28219f8472fd68cb8d823827092501"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001940)={0x20, 0x80, 0x1c, {0x3, 0x1, 0x8, 0x7f, 0xff80, 0x4, 0x1, 0x1, 0x4, 0x70e, 0x5, 0x1}}, &(0x7f0000001980)={0x20, 0x85, 0x4}, &(0x7f00000019c0)={0x20, 0x83, 0x2}, &(0x7f0000001a00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001a40)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xf2, {0xf2, 0x7, "b582a0f02b20a5718154aaa0649ce75fc176764ef141de62c151db184c7da026ed00b6a174d0074254978314f089734c7ff7f5a1d66acee3a70cc48c1c0318f6a6c6338da39203dcd45849b7383a7f663ca071409a807f67052185c38c83698057250388809296f73c3bff816a6baff554ed52f375412d66ae3081ee871ffd69c1bd964df5460b290b262a4e9eff9750031e4fbf256bdac20b8f9468c8e5465aeb198878736ee5c5b4da7c1d91feab642d1ca6481275aaf2857a92ceb621cf366cf4fe227ae33d79865f3ca88b77d96995aa4d62e74bf3ce26df34a3f25519ab48f676f94543a880b363d5ca1fd82688"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="e002040000000403fffc"], &(0x7f00000001c0)={0x0, 0xf, 0xc4, {0x5, 0xf, 0xc4, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0x6, 0xf00f, 0x8da}, @generic={0x8b, 0x10, 0x2, "05b2ada98d915b22744f0f0a3dff80cca44c147ddb0b7af2434d1e896ce63a0c485626d6118aa9710fe5447ab335f6a1e4f0ceb5b159f2a1d34536abbe29a6edd99251892605d739fc0e07cf5a9a056a9d9db68b242ceef322e34f2290bda24fc582c1723b689e6fb950ef5d23c9d1266f679d847e0fcb922f39c1df43d1e3e7aac86fa1959cdaa3"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "075de871955f3c5f5cdd729caf706de8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ed48ac8d89ce4926aa2de0da834b4081"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x9, 0x4d, "2fe899b8", "2d40d101"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x6, 0x5, 0x6, 0x4, 0x7}}}, &(0x7f0000000940)={0x84, &(0x7f0000000600)={0x20, 0x3, 0xac, "33b8eef70343ad1b3e7abdac3f11c07920b96beeca390fc581b693c163274d5ebdedd8b7f7f3648f6f7f28ad69941fafcf4bde6fe856f42868b797921011732633ae9d4237e11e0b809f1c3bcbd42fece756b252498ca7f5489bbc0b116dbdce79c47107136dc26e0fb598f09bed9055e37462fbd6530853c98f05b412faa0605267144968734045807254284449ef089bbd5f67b2ead3fb5e272cb887ef7e69d29a3be0c7492292045ebfdc"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf0ff]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xfbff}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0xb, 0x2, 'sK'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x13, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "7610"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x40}})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000001680)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x7, "3a1a8fac"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000001140)={0x2c, &(0x7f0000000e80)={0x40, 0x2b, 0x7d, {0x7d, 0x21, "d4c8514d35664a66d385dc302a0eac021c6dc9f7e716d8988c5915a24eaaf9a1cb498aff0b9638c2ff2f4981fafa295748876caaf4481cda01b479ef66d4a0caa39f9ecb8920e23f947e34cca204c6d6b9b7e402534de19447820f6d03332b9e745ca0f78fc4c0e7b3c79054d142d240efa3b8adbb1a4f126275c1"}}, &(0x7f0000000f40)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "f200468a36330adb519968235dbd8e58af4ed5bf0bf36caa3131f8d10d9f9c9ec05b58f57e1048c7654b989c6c63918274d5a337814197a2857025d659da3885915ec5a958b08ee2d637ceb421f696eb6b1118c749c54f9ee413a39f3d8c687a39546234597c48b1a1a5b0dfad53a004f8a48a9bc6aec215837f330662983b6744ae797bc136c502281037301de562cfed8b5407bd0c351c4cbd4cc36a48e5c232c3cffc2b6bfe9677c55e6e08b7059e7c5a3027868f9f4b6e6249ee4f82d4f462e0b2c0ba6e5d84593908cb291ecafe"}}, &(0x7f0000001040)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x0, 0xba}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "62712783c8d2e6389fdbbf53c7caeb5d"}, @generic={0x41, 0x10, 0x2, "26d74b8a606552af34b0c2346cdbe06562d6a3a819e4ae6ec15a67220d08553072f9e585ea3bb791d50089396a74c6121aa5c9f566174cf904d529c4afcd"}]}}, &(0x7f00000010c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x2, 0x40, "9f5d2610", "949ff110"}}, &(0x7f0000001100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x80, 0x5, 0x42, 0x34, 0x1}}}, &(0x7f00000015c0)={0x84, &(0x7f0000001180)={0x0, 0x12, 0x76, "0cff0c694613fff4b88ed0a630ca4c91990da2ec72dad7870bbf90fdf7e86527d8e97f30879e56a35b3f26bfc6b12623881cf1ed3160a8c99ec6c10964e606455ddf25fe8eef3135be095e8a11ba3bc5dc85117bfd22c11835f8c726ce8b98b66f911232435d9a7ecb4f3f902ce8f799557c44dbc433"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000012c0)={0x20, 0x0, 0x8, {0x1400, 0x20, [0xfff0]}}, &(0x7f0000001300)={0x40, 0x7, 0x2}, &(0x7f0000001340)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001380)={0x40, 0xb, 0x2, 'oO'}, &(0x7f00000013c0)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000001400)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001440)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001480)={0x40, 0x19, 0x2, "32e8"}, &(0x7f00000014c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001500)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001540)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001580)={0x40, 0x21, 0x1, 0x3f}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000001d80)={0x2c, &(0x7f0000001b00)={0x20, 0xd, 0x3c, {0x3c, 0x3, "aec199dc29f3d31f891844f4679a12c9c7cbd4c7170098c8d5830d84acab8238f3926307c0544ababb6fba9023123d544a08f7c9643f7e5d8c36"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000001bc0)={0x0, 0xf, 0xfe, {0x5, 0xf, 0xfe, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xf, 0x800}, @generic={0xe5, 0x10, 0x2, "15bb1149da0b475b4c454916fff08c31d3371fad48c34b2b4578e1f99a733d27b638ff40909d61271cd538bbe3695051c6838e315be92996827896519786aaebc5289a0a66ec0787cd332562c752e258d837b08d5e651bef1f2300d34a96d2c01ebea6eff6578683ba75003f49ac012fa6b2f46c7ee3f48b1367744479a4e486a4103673c7de4348201b3ae1bb9cf64facedc73b6ae5d52a999b4dda91a81900910c1d64c1204e8c541c66734f4c1b02aa816c48701ca112afd619bcaa74a99769f0629c14fb224a30cbcdce4e6c6528dae266190a9e7bca431a798c6f62c8f7a9ce"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000001d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x57, 0x80, 0x3, 0x4, "b9f7a466", "5b904b17"}}, &(0x7f0000001d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0xff, 0x5, 0x1, 0xfff, 0xc000}}}, &(0x7f0000002200)={0x84, &(0x7f0000001dc0)={0x0, 0x0, 0x41, "b5cdf9d04170bbad0c4da150e73a7cf55fd22ce2d81957ebb0820b729ff7c22c0f86cf84aee0dff5a91f64d7ccd8422cb6c010814693637cf5424ce56d96f863de"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001ec0)={0x20, 0x0, 0x4}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f0000001f40)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000001f80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001fc0)={0x40, 0xb, 0x2, "13f1"}, &(0x7f0000002000)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002040)={0x40, 0x13, 0x6}, &(0x7f0000002080)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x19, 0x2, "e928"}, &(0x7f0000002100)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000002140)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002180)={0x40, 0x1e, 0x1}, &(0x7f00000021c0)={0x40, 0x21, 0x1, 0x40}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b00)={0x14, &(0x7f0000000a00)={0x0, 0x5, 0x8c, {0x8c, 0x11, "53cb46134f2fd57f008ca4cee97461c1470acb026153c9a776154008208f49c8496c08be259cd9a9a81cfdee1772fe1aff5484483f50063d496a74f682c7acfa53f43a597f13326aeb6d4ce77ace6ff4dfd4ba6d6e81446e00c8c5c96e1314ab57c6bd1f2fe9d9e0345323429d2dd3757205030d34d28b73c871fc471023f1facf21a1a491ff6cb3eccc"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b40)={0xc0, 0x15, 0xd1, "a7d60525c01bdbd83d1d620fc31255a12bba173d47be50d3dfc87e0ce1ce15373b20b4124af312273c488845f21cd8511b1ec28a434b71e2218605fb9f141efcedbb520df39de393c69288bd7f6e5f89d64f8684723707ca05954f8fc2580e05a9c006a04742c24956fd4b13f9bd38e3e0aaed817ab3f9963c70194a5d09d6a4306eed07b62124ffb28a2c4928d0ca67833621cd66ddc46d9e34796ff5e1fc8507f5eee0a8f037723a9e1eb30a08a917bbaaba574b922703f916778d0abdd4d7362ce28e70c9cdd08cf258e995cc44bf30"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x80000001, 0x3, 0x1ff, 0x1ff, 0xfff, 0x1, 0x5, 0x4, 0x7, 0xffff}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000d40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000dc0)={0x20, 0x89, 0x2}})

[ 2412.563446][T26277] usb 5-1: USB disconnect, device number 72
00:04:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x14}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2412.741720][T26281] usb 3-1: new high-speed USB device number 4 using dummy_hcd
00:04:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x15}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2412.861642][ T2549] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 2412.891762][  T126] usb 2-1: new high-speed USB device number 74 using dummy_hcd
00:04:04 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede26981126df1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x34}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2412.991656][T26277] usb 5-1: new high-speed USB device number 73 using dummy_hcd
00:04:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x44}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2413.491715][T26281] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2413.500224][T26281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2413.510169][  T126] usb 2-1: Using ep0 maxpacket: 32
[ 2413.517430][T26281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2413.521675][T26277] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2413.526448][T26281] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2413.536455][T26277] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2413.557608][T26277] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2413.641741][ T2549] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2413.650309][  T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2413.661045][ T2549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2413.674536][ T2549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
00:04:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x48}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2413.685714][ T2549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2413.721760][T26277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2413.730752][T26277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2413.738589][T26277] usb 5-1: Product: syz
[ 2413.741708][T26281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2413.742594][T26277] usb 5-1: Manufacturer: syz
[ 2413.751458][T26281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2413.755853][T26277] usb 5-1: SerialNumber: syz
[ 2413.764062][T26281] usb 3-1: Product: syz
[ 2413.772201][T26281] usb 3-1: Manufacturer: syz
[ 2413.776651][T26281] usb 3-1: SerialNumber: syz
[ 2413.812157][T26277] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[ 2413.818950][T26277] cdc_ncm 5-1:1.0: bind() failure
[ 2413.831988][T26281] cdc_ncm 3-1:1.0: skipping garbage
[ 2413.836998][T26281] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2413.851738][  T126] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
00:04:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x7ffff000, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2413.879254][T26281] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2413.891791][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2413.899648][T26281] cdc_ncm 3-1:1.0: bind() failure
[ 2413.904548][  T126] usb 2-1: Product: syz
[ 2413.909610][  T126] usb 2-1: Manufacturer: syz
[ 2413.914154][ T2549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2413.923173][  T126] usb 2-1: SerialNumber: syz
[ 2413.927705][ T2549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2413.935922][ T2549] usb 1-1: Product: syz
[ 2413.939889][ T2549] usb 1-1: Manufacturer: syz
[ 2413.944346][ T2549] usb 1-1: SerialNumber: syz
[ 2414.208542][ T1919] usb 3-1: USB disconnect, device number 4
[ 2414.217903][ T2549] cdc_ncm 1-1:1.0: skipping garbage
[ 2414.223051][ T2549] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2414.232196][ T2549] cdc_ncm 1-1:1.0: bind() failure
[ 2414.242502][ T2549] usb 1-1: USB disconnect, device number 104
00:04:06 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d00"], 0x0)

[ 2414.691671][  T126] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 2414.697542][  T126] cdc_ncm 2-1:1.0: bind() failure
[ 2414.703265][  T126] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2414.709897][  T126] cdc_ncm 2-1:1.1: bind() failure
[ 2415.001654][  T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 2415.391663][  T126] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2415.400197][  T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2415.410116][  T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2415.418791][  T126] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2415.591681][  T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2415.600819][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2415.608715][  T126] usb 3-1: Product: syz
[ 2415.609811][T32621] usb 5-1: USB disconnect, device number 73
[ 2415.613331][  T126] usb 3-1: Manufacturer: syz
[ 2415.624380][  T126] usb 3-1: SerialNumber: syz
00:04:07 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x64}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:07 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

00:04:07 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0100000005810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001800)={0x14, &(0x7f00000016c0)={0x0, 0xc, 0xe5, {0xe5, 0xc, "7bab581c859320d9bee709b8a180fc77284b9853220a16c378b62a1bc8c6701c22921a2ce969d6d4f36881d85ab57cb8d13ca1e37f84b42860949029eead5e2ae324d1da0081c5318fe1ac02004b9b457cf38f850f04e3fe705987033488b5e65a0c88ba60db350bb41980904a99ed78eef682082bde9283894a5b79fc79913d77e1d609d84be30152a5aadce1c2e6e2ddef6879e9579d67c50ef921ab6c6a27d5f6f86126803b22b02730e46a6b7394be7097a580011bbe1c16707a77de4f735253ed0f563d453cf486ee5c7e6f872e67ae6c132375c75c754a6c88b99278a43c921c"}}, &(0x7f00000017c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a80)={0x44, &(0x7f0000001840)={0x0, 0x10, 0x4e, "9e11bf00d3b7618d8fc2ade214a6afeb7f1c85c1e514079841f1a31b560697e761fdcd99ec2f3654e4de5a8fe7d7388d32ef69556934e0d8283e899458241d28219f8472fd68cb8d823827092501"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001940)={0x20, 0x80, 0x1c, {0x3, 0x1, 0x8, 0x7f, 0xff80, 0x4, 0x1, 0x1, 0x4, 0x70e, 0x5, 0x1}}, &(0x7f0000001980)={0x20, 0x85, 0x4}, &(0x7f00000019c0)={0x20, 0x83, 0x2}, &(0x7f0000001a00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001a40)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xf2, {0xf2, 0x7, "b582a0f02b20a5718154aaa0649ce75fc176764ef141de62c151db184c7da026ed00b6a174d0074254978314f089734c7ff7f5a1d66acee3a70cc48c1c0318f6a6c6338da39203dcd45849b7383a7f663ca071409a807f67052185c38c83698057250388809296f73c3bff816a6baff554ed52f375412d66ae3081ee871ffd69c1bd964df5460b290b262a4e9eff9750031e4fbf256bdac20b8f9468c8e5465aeb198878736ee5c5b4da7c1d91feab642d1ca6481275aaf2857a92ceb621cf366cf4fe227ae33d79865f3ca88b77d96995aa4d62e74bf3ce26df34a3f25519ab48f676f94543a880b363d5ca1fd82688"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="e002040000000403fffc"], &(0x7f00000001c0)={0x0, 0xf, 0xc4, {0x5, 0xf, 0xc4, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0x6, 0xf00f, 0x8da}, @generic={0x8b, 0x10, 0x2, "05b2ada98d915b22744f0f0a3dff80cca44c147ddb0b7af2434d1e896ce63a0c485626d6118aa9710fe5447ab335f6a1e4f0ceb5b159f2a1d34536abbe29a6edd99251892605d739fc0e07cf5a9a056a9d9db68b242ceef322e34f2290bda24fc582c1723b689e6fb950ef5d23c9d1266f679d847e0fcb922f39c1df43d1e3e7aac86fa1959cdaa3"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "075de871955f3c5f5cdd729caf706de8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ed48ac8d89ce4926aa2de0da834b4081"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x9, 0x4d, "2fe899b8", "2d40d101"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x6, 0x5, 0x6, 0x4, 0x7}}}, &(0x7f0000000940)={0x84, &(0x7f0000000600)={0x20, 0x3, 0xac, "33b8eef70343ad1b3e7abdac3f11c07920b96beeca390fc581b693c163274d5ebdedd8b7f7f3648f6f7f28ad69941fafcf4bde6fe856f42868b797921011732633ae9d4237e11e0b809f1c3bcbd42fece756b252498ca7f5489bbc0b116dbdce79c47107136dc26e0fb598f09bed9055e37462fbd6530853c98f05b412faa0605267144968734045807254284449ef089bbd5f67b2ead3fb5e272cb887ef7e69d29a3be0c7492292045ebfdc"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf0ff]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xfbff}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0xb, 0x2, 'sK'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x13, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "7610"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x40}}) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000001680)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x7, "3a1a8fac"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000001140)={0x2c, &(0x7f0000000e80)={0x40, 0x2b, 0x7d, {0x7d, 0x21, "d4c8514d35664a66d385dc302a0eac021c6dc9f7e716d8988c5915a24eaaf9a1cb498aff0b9638c2ff2f4981fafa295748876caaf4481cda01b479ef66d4a0caa39f9ecb8920e23f947e34cca204c6d6b9b7e402534de19447820f6d03332b9e745ca0f78fc4c0e7b3c79054d142d240efa3b8adbb1a4f126275c1"}}, &(0x7f0000000f40)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "f200468a36330adb519968235dbd8e58af4ed5bf0bf36caa3131f8d10d9f9c9ec05b58f57e1048c7654b989c6c63918274d5a337814197a2857025d659da3885915ec5a958b08ee2d637ceb421f696eb6b1118c749c54f9ee413a39f3d8c687a39546234597c48b1a1a5b0dfad53a004f8a48a9bc6aec215837f330662983b6744ae797bc136c502281037301de562cfed8b5407bd0c351c4cbd4cc36a48e5c232c3cffc2b6bfe9677c55e6e08b7059e7c5a3027868f9f4b6e6249ee4f82d4f462e0b2c0ba6e5d84593908cb291ecafe"}}, &(0x7f0000001040)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x0, 0xba}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "62712783c8d2e6389fdbbf53c7caeb5d"}, @generic={0x41, 0x10, 0x2, "26d74b8a606552af34b0c2346cdbe06562d6a3a819e4ae6ec15a67220d08553072f9e585ea3bb791d50089396a74c6121aa5c9f566174cf904d529c4afcd"}]}}, &(0x7f00000010c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x2, 0x40, "9f5d2610", "949ff110"}}, &(0x7f0000001100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x80, 0x5, 0x42, 0x34, 0x1}}}, &(0x7f00000015c0)={0x84, &(0x7f0000001180)={0x0, 0x12, 0x76, "0cff0c694613fff4b88ed0a630ca4c91990da2ec72dad7870bbf90fdf7e86527d8e97f30879e56a35b3f26bfc6b12623881cf1ed3160a8c99ec6c10964e606455ddf25fe8eef3135be095e8a11ba3bc5dc85117bfd22c11835f8c726ce8b98b66f911232435d9a7ecb4f3f902ce8f799557c44dbc433"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000012c0)={0x20, 0x0, 0x8, {0x1400, 0x20, [0xfff0]}}, &(0x7f0000001300)={0x40, 0x7, 0x2}, &(0x7f0000001340)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001380)={0x40, 0xb, 0x2, 'oO'}, &(0x7f00000013c0)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000001400)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001440)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001480)={0x40, 0x19, 0x2, "32e8"}, &(0x7f00000014c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001500)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001540)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001580)={0x40, 0x21, 0x1, 0x3f}})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000001d80)={0x2c, &(0x7f0000001b00)={0x20, 0xd, 0x3c, {0x3c, 0x3, "aec199dc29f3d31f891844f4679a12c9c7cbd4c7170098c8d5830d84acab8238f3926307c0544ababb6fba9023123d544a08f7c9643f7e5d8c36"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000001bc0)={0x0, 0xf, 0xfe, {0x5, 0xf, 0xfe, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xf, 0x800}, @generic={0xe5, 0x10, 0x2, "15bb1149da0b475b4c454916fff08c31d3371fad48c34b2b4578e1f99a733d27b638ff40909d61271cd538bbe3695051c6838e315be92996827896519786aaebc5289a0a66ec0787cd332562c752e258d837b08d5e651bef1f2300d34a96d2c01ebea6eff6578683ba75003f49ac012fa6b2f46c7ee3f48b1367744479a4e486a4103673c7de4348201b3ae1bb9cf64facedc73b6ae5d52a999b4dda91a81900910c1d64c1204e8c541c66734f4c1b02aa816c48701ca112afd619bcaa74a99769f0629c14fb224a30cbcdce4e6c6528dae266190a9e7bca431a798c6f62c8f7a9ce"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000001d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x57, 0x80, 0x3, 0x4, "b9f7a466", "5b904b17"}}, &(0x7f0000001d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0xff, 0x5, 0x1, 0xfff, 0xc000}}}, &(0x7f0000002200)={0x84, &(0x7f0000001dc0)={0x0, 0x0, 0x41, "b5cdf9d04170bbad0c4da150e73a7cf55fd22ce2d81957ebb0820b729ff7c22c0f86cf84aee0dff5a91f64d7ccd8422cb6c010814693637cf5424ce56d96f863de"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001ec0)={0x20, 0x0, 0x4}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f0000001f40)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000001f80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001fc0)={0x40, 0xb, 0x2, "13f1"}, &(0x7f0000002000)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002040)={0x40, 0x13, 0x6}, &(0x7f0000002080)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x19, 0x2, "e928"}, &(0x7f0000002100)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000002140)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002180)={0x40, 0x1e, 0x1}, &(0x7f00000021c0)={0x40, 0x21, 0x1, 0x40}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b00)={0x14, &(0x7f0000000a00)={0x0, 0x5, 0x8c, {0x8c, 0x11, "53cb46134f2fd57f008ca4cee97461c1470acb026153c9a776154008208f49c8496c08be259cd9a9a81cfdee1772fe1aff5484483f50063d496a74f682c7acfa53f43a597f13326aeb6d4ce77ace6ff4dfd4ba6d6e81446e00c8c5c96e1314ab57c6bd1f2fe9d9e0345323429d2dd3757205030d34d28b73c871fc471023f1facf21a1a491ff6cb3eccc"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b40)={0xc0, 0x15, 0xd1, "a7d60525c01bdbd83d1d620fc31255a12bba173d47be50d3dfc87e0ce1ce15373b20b4124af312273c488845f21cd8511b1ec28a434b71e2218605fb9f141efcedbb520df39de393c69288bd7f6e5f89d64f8684723707ca05954f8fc2580e05a9c006a04742c24956fd4b13f9bd38e3e0aaed817ab3f9963c70194a5d09d6a4306eed07b62124ffb28a2c4928d0ca67833621cd66ddc46d9e34796ff5e1fc8507f5eee0a8f037723a9e1eb30a08a917bbaaba574b922703f916778d0abdd4d7362ce28e70c9cdd08cf258e995cc44bf30"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x80000001, 0x3, 0x1ff, 0x1ff, 0xfff, 0x1, 0x5, 0x4, 0x7, 0xffff}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000d40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000dc0)={0x20, 0x89, 0x2}})

[ 2415.662340][  T126] cdc_ncm 3-1:1.0: skipping garbage
[ 2415.667361][  T126] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2415.673823][  T126] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2415.675441][ T2577] usb 2-1: USB disconnect, device number 74
[ 2415.680754][  T126] cdc_ncm 3-1:1.0: bind() failure
[ 2416.057863][T26277] usb 3-1: USB disconnect, device number 5
00:04:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x79}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2416.181670][  T126] usb 1-1: new high-speed USB device number 105 using dummy_hcd
00:04:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2416.241618][T32621] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 2416.249070][ T2577] usb 2-1: new high-speed USB device number 75 using dummy_hcd
00:04:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xe2}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2416.501670][ T2577] usb 2-1: Using ep0 maxpacket: 32
00:04:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:08 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000020d"], 0x0)

00:04:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xf2}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2416.571697][  T126] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2416.580304][  T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2416.590673][  T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2416.599735][  T126] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2416.621849][T32621] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2416.632054][ T2577] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2416.645521][T32621] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2416.655394][T32621] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2416.861689][ T2577] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2416.870693][ T2577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2416.878728][ T2577] usb 2-1: Product: syz
[ 2416.882949][ T2577] usb 2-1: Manufacturer: syz
[ 2416.887425][ T2577] usb 2-1: SerialNumber: syz
[ 2416.901673][T32621] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2416.910550][T32621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2416.918459][T32621] usb 5-1: Product: syz
[ 2416.922458][T32621] usb 5-1: Manufacturer: syz
[ 2416.926855][T32621] usb 5-1: SerialNumber: syz
[ 2416.972086][T32621] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[ 2416.978748][T32621] cdc_ncm 5-1:1.0: bind() failure
[ 2416.991754][  T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2417.000764][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2417.008788][  T126] usb 1-1: Product: syz
[ 2417.012949][  T126] usb 1-1: Manufacturer: syz
[ 2417.017356][  T126] usb 1-1: SerialNumber: syz
[ 2417.073199][  T126] cdc_ncm 1-1:1.0: skipping garbage
[ 2417.078276][  T126] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2417.084998][ T2549] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 2417.092341][  T126] cdc_ncm 1-1:1.0: bind() failure
[ 2417.273617][T32621] usb 1-1: USB disconnect, device number 105
00:04:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2417.721647][ T2549] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2417.730189][ T2549] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2417.740127][ T2549] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2417.749779][ T2549] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2417.921823][ T2549] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2417.930716][ T2549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2417.938539][ T2549] usb 3-1: Product: syz
[ 2417.942597][ T2549] usb 3-1: Manufacturer: syz
[ 2417.947008][ T2549] usb 3-1: SerialNumber: syz
[ 2418.001957][ T2549] cdc_ncm 3-1:1.0: skipping garbage
[ 2418.007046][ T2549] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2418.013472][ T2549] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2418.020040][ T2549] cdc_ncm 3-1:1.0: bind() failure
[ 2418.202596][T32621] usb 3-1: USB disconnect, device number 6
[ 2418.227111][T26277] usb 5-1: USB disconnect, device number 74
[ 2418.291702][ T2577] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2418.297940][ T2577] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2418.305419][ T2577] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2418.502968][ T2577] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2418.515707][ T2577] usb 2-1: USB disconnect, device number 75
[ 2418.523893][ T2577] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:04:10 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:10 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401000002"], 0x0)

00:04:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x116}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:10 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401000002"], 0x0)

00:04:10 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0100000005810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001800)={0x14, &(0x7f00000016c0)={0x0, 0xc, 0xe5, {0xe5, 0xc, "7bab581c859320d9bee709b8a180fc77284b9853220a16c378b62a1bc8c6701c22921a2ce969d6d4f36881d85ab57cb8d13ca1e37f84b42860949029eead5e2ae324d1da0081c5318fe1ac02004b9b457cf38f850f04e3fe705987033488b5e65a0c88ba60db350bb41980904a99ed78eef682082bde9283894a5b79fc79913d77e1d609d84be30152a5aadce1c2e6e2ddef6879e9579d67c50ef921ab6c6a27d5f6f86126803b22b02730e46a6b7394be7097a580011bbe1c16707a77de4f735253ed0f563d453cf486ee5c7e6f872e67ae6c132375c75c754a6c88b99278a43c921c"}}, &(0x7f00000017c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a80)={0x44, &(0x7f0000001840)={0x0, 0x10, 0x4e, "9e11bf00d3b7618d8fc2ade214a6afeb7f1c85c1e514079841f1a31b560697e761fdcd99ec2f3654e4de5a8fe7d7388d32ef69556934e0d8283e899458241d28219f8472fd68cb8d823827092501"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001940)={0x20, 0x80, 0x1c, {0x3, 0x1, 0x8, 0x7f, 0xff80, 0x4, 0x1, 0x1, 0x4, 0x70e, 0x5, 0x1}}, &(0x7f0000001980)={0x20, 0x85, 0x4}, &(0x7f00000019c0)={0x20, 0x83, 0x2}, &(0x7f0000001a00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001a40)={0x20, 0x89, 0x2}}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xf2, {0xf2, 0x7, "b582a0f02b20a5718154aaa0649ce75fc176764ef141de62c151db184c7da026ed00b6a174d0074254978314f089734c7ff7f5a1d66acee3a70cc48c1c0318f6a6c6338da39203dcd45849b7383a7f663ca071409a807f67052185c38c83698057250388809296f73c3bff816a6baff554ed52f375412d66ae3081ee871ffd69c1bd964df5460b290b262a4e9eff9750031e4fbf256bdac20b8f9468c8e5465aeb198878736ee5c5b4da7c1d91feab642d1ca6481275aaf2857a92ceb621cf366cf4fe227ae33d79865f3ca88b77d96995aa4d62e74bf3ce26df34a3f25519ab48f676f94543a880b363d5ca1fd82688"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="e002040000000403fffc"], &(0x7f00000001c0)={0x0, 0xf, 0xc4, {0x5, 0xf, 0xc4, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0x6, 0xf00f, 0x8da}, @generic={0x8b, 0x10, 0x2, "05b2ada98d915b22744f0f0a3dff80cca44c147ddb0b7af2434d1e896ce63a0c485626d6118aa9710fe5447ab335f6a1e4f0ceb5b159f2a1d34536abbe29a6edd99251892605d739fc0e07cf5a9a056a9d9db68b242ceef322e34f2290bda24fc582c1723b689e6fb950ef5d23c9d1266f679d847e0fcb922f39c1df43d1e3e7aac86fa1959cdaa3"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "075de871955f3c5f5cdd729caf706de8"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ed48ac8d89ce4926aa2de0da834b4081"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x9, 0x4d, "2fe899b8", "2d40d101"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x6, 0x5, 0x6, 0x4, 0x7}}}, &(0x7f0000000940)={0x84, &(0x7f0000000600)={0x20, 0x3, 0xac, "33b8eef70343ad1b3e7abdac3f11c07920b96beeca390fc581b693c163274d5ebdedd8b7f7f3648f6f7f28ad69941fafcf4bde6fe856f42868b797921011732633ae9d4237e11e0b809f1c3bcbd42fece756b252498ca7f5489bbc0b116dbdce79c47107136dc26e0fb598f09bed9055e37462fbd6530853c98f05b412faa0605267144968734045807254284449ef089bbd5f67b2ead3fb5e272cb887ef7e69d29a3be0c7492292045ebfdc"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf0ff]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xfbff}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0xb, 0x2, 'sK'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x13, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "7610"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x40}}) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000001680)={0x0, 0x22, 0x9, {[@global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0x7, "3a1a8fac"}, @global=@item_012={0x1, 0x1, 0x0, "16"}, @main]}}, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000001140)={0x2c, &(0x7f0000000e80)={0x40, 0x2b, 0x7d, {0x7d, 0x21, "d4c8514d35664a66d385dc302a0eac021c6dc9f7e716d8988c5915a24eaaf9a1cb498aff0b9638c2ff2f4981fafa295748876caaf4481cda01b479ef66d4a0caa39f9ecb8920e23f947e34cca204c6d6b9b7e402534de19447820f6d03332b9e745ca0f78fc4c0e7b3c79054d142d240efa3b8adbb1a4f126275c1"}}, &(0x7f0000000f40)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "f200468a36330adb519968235dbd8e58af4ed5bf0bf36caa3131f8d10d9f9c9ec05b58f57e1048c7654b989c6c63918274d5a337814197a2857025d659da3885915ec5a958b08ee2d637ceb421f696eb6b1118c749c54f9ee413a39f3d8c687a39546234597c48b1a1a5b0dfad53a004f8a48a9bc6aec215837f330662983b6744ae797bc136c502281037301de562cfed8b5407bd0c351c4cbd4cc36a48e5c232c3cffc2b6bfe9677c55e6e08b7059e7c5a3027868f9f4b6e6249ee4f82d4f462e0b2c0ba6e5d84593908cb291ecafe"}}, &(0x7f0000001040)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x0, 0xba}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "62712783c8d2e6389fdbbf53c7caeb5d"}, @generic={0x41, 0x10, 0x2, "26d74b8a606552af34b0c2346cdbe06562d6a3a819e4ae6ec15a67220d08553072f9e585ea3bb791d50089396a74c6121aa5c9f566174cf904d529c4afcd"}]}}, &(0x7f00000010c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x2, 0x40, "9f5d2610", "949ff110"}}, &(0x7f0000001100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x80, 0x5, 0x42, 0x34, 0x1}}}, &(0x7f00000015c0)={0x84, &(0x7f0000001180)={0x0, 0x12, 0x76, "0cff0c694613fff4b88ed0a630ca4c91990da2ec72dad7870bbf90fdf7e86527d8e97f30879e56a35b3f26bfc6b12623881cf1ed3160a8c99ec6c10964e606455ddf25fe8eef3135be095e8a11ba3bc5dc85117bfd22c11835f8c726ce8b98b66f911232435d9a7ecb4f3f902ce8f799557c44dbc433"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000012c0)={0x20, 0x0, 0x8, {0x1400, 0x20, [0xfff0]}}, &(0x7f0000001300)={0x40, 0x7, 0x2}, &(0x7f0000001340)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001380)={0x40, 0xb, 0x2, 'oO'}, &(0x7f00000013c0)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000001400)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001440)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001480)={0x40, 0x19, 0x2, "32e8"}, &(0x7f00000014c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001500)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001540)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001580)={0x40, 0x21, 0x1, 0x3f}}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64)
syz_usb_control_io(r0, &(0x7f0000001d80)={0x2c, &(0x7f0000001b00)={0x20, 0xd, 0x3c, {0x3c, 0x3, "aec199dc29f3d31f891844f4679a12c9c7cbd4c7170098c8d5830d84acab8238f3926307c0544ababb6fba9023123d544a08f7c9643f7e5d8c36"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000001bc0)={0x0, 0xf, 0xfe, {0x5, 0xf, 0xfe, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xf, 0x800}, @generic={0xe5, 0x10, 0x2, "15bb1149da0b475b4c454916fff08c31d3371fad48c34b2b4578e1f99a733d27b638ff40909d61271cd538bbe3695051c6838e315be92996827896519786aaebc5289a0a66ec0787cd332562c752e258d837b08d5e651bef1f2300d34a96d2c01ebea6eff6578683ba75003f49ac012fa6b2f46c7ee3f48b1367744479a4e486a4103673c7de4348201b3ae1bb9cf64facedc73b6ae5d52a999b4dda91a81900910c1d64c1204e8c541c66734f4c1b02aa816c48701ca112afd619bcaa74a99769f0629c14fb224a30cbcdce4e6c6528dae266190a9e7bca431a798c6f62c8f7a9ce"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000001d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x57, 0x80, 0x3, 0x4, "b9f7a466", "5b904b17"}}, &(0x7f0000001d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0xff, 0x5, 0x1, 0xfff, 0xc000}}}, &(0x7f0000002200)={0x84, &(0x7f0000001dc0)={0x0, 0x0, 0x41, "b5cdf9d04170bbad0c4da150e73a7cf55fd22ce2d81957ebb0820b729ff7c22c0f86cf84aee0dff5a91f64d7ccd8422cb6c010814693637cf5424ce56d96f863de"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001ec0)={0x20, 0x0, 0x4}, &(0x7f0000001f00)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f0000001f40)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000001f80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001fc0)={0x40, 0xb, 0x2, "13f1"}, &(0x7f0000002000)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002040)={0x40, 0x13, 0x6}, &(0x7f0000002080)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000020c0)={0x40, 0x19, 0x2, "e928"}, &(0x7f0000002100)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000002140)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002180)={0x40, 0x1e, 0x1}, &(0x7f00000021c0)={0x40, 0x21, 0x1, 0x40}}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b00)={0x14, &(0x7f0000000a00)={0x0, 0x5, 0x8c, {0x8c, 0x11, "53cb46134f2fd57f008ca4cee97461c1470acb026153c9a776154008208f49c8496c08be259cd9a9a81cfdee1772fe1aff5484483f50063d496a74f682c7acfa53f43a597f13326aeb6d4ce77ace6ff4dfd4ba6d6e81446e00c8c5c96e1314ab57c6bd1f2fe9d9e0345323429d2dd3757205030d34d28b73c871fc471023f1facf21a1a491ff6cb3eccc"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b40)={0xc0, 0x15, 0xd1, "a7d60525c01bdbd83d1d620fc31255a12bba173d47be50d3dfc87e0ce1ce15373b20b4124af312273c488845f21cd8511b1ec28a434b71e2218605fb9f141efcedbb520df39de393c69288bd7f6e5f89d64f8684723707ca05954f8fc2580e05a9c006a04742c24956fd4b13f9bd38e3e0aaed817ab3f9963c70194a5d09d6a4306eed07b62124ffb28a2c4928d0ca67833621cd66ddc46d9e34796ff5e1fc8507f5eee0a8f037723a9e1eb30a08a917bbaaba574b922703f916778d0abdd4d7362ce28e70c9cdd08cf258e995cc44bf30"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x80000001, 0x3, 0x1ff, 0x1ff, 0xfff, 0x1, 0x5, 0x4, 0x7, 0xffff}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000d40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000dc0)={0x20, 0x89, 0x2}})

00:04:10 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000008, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2419.411624][ T2577] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 2419.419042][T32621] usb 3-1: new high-speed USB device number 7 using dummy_hcd
00:04:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x11b}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2419.501720][  T126] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 2419.509208][ T2549] usb 1-1: new high-speed USB device number 106 using dummy_hcd
00:04:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1f4}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2419.661668][ T2577] usb 2-1: Using ep0 maxpacket: 32
00:04:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2419.781710][T32621] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2419.790275][ T2577] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2419.800959][T32621] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2419.811074][T32621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
00:04:11 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x2000000a, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2419.819874][T32621] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:04:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x300}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2419.911681][  T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2419.921689][ T2549] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2419.972233][ T2577] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2419.981673][ T2549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2420.012040][T32621] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2420.188190][ T2549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2420.197090][  T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2420.205785][ T2549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2420.218556][  T126] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2420.227732][ T2577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.242788][T32621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.250620][T32621] usb 3-1: Product: syz
[ 2420.254625][ T2577] usb 2-1: Product: syz
[ 2420.258603][T32621] usb 3-1: Manufacturer: syz
[ 2420.263041][ T2577] usb 2-1: Manufacturer: syz
[ 2420.267441][T32621] usb 3-1: SerialNumber: syz
[ 2420.272202][ T2577] usb 2-1: SerialNumber: syz
00:04:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3e8}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2420.323125][T32621] cdc_ncm 3-1:1.0: skipping garbage
[ 2420.329379][T32621] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[ 2420.339555][T32621] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2420.346452][T32621] cdc_ncm 3-1:1.0: bind() failure
[ 2420.391711][ T2549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2420.400625][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2420.409510][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.417412][ T2549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.425363][ T2549] usb 1-1: Product: syz
[ 2420.429716][  T126] usb 5-1: Product: syz
[ 2420.434172][ T2549] usb 1-1: Manufacturer: syz
[ 2420.438615][  T126] usb 5-1: Manufacturer: syz
[ 2420.443069][ T2549] usb 1-1: SerialNumber: syz
[ 2420.447473][  T126] usb 5-1: SerialNumber: syz
[ 2420.492040][ T2549] cdc_ncm 1-1:1.0: skipping garbage
[ 2420.497467][  T126] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[ 2420.504132][ T2549] cdc_ncm 1-1:1.0: invalid descriptor buffer length
[ 2420.511764][  T126] cdc_ncm 5-1:1.0: bind() failure
[ 2420.516664][ T2549] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2420.523771][T26277] usb 3-1: USB disconnect, device number 7
[ 2420.526218][ T2549] cdc_ncm 1-1:1.0: bind() failure
[ 2420.693329][ T2549] usb 1-1: USB disconnect, device number 106
[ 2421.396015][T26277] usb 5-1: USB disconnect, device number 75
[ 2421.641696][ T2577] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2421.648033][ T2577] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2421.655606][ T2577] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2421.853688][ T2577] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2421.866336][ T2577] usb 2-1: USB disconnect, device number 76
[ 2421.876028][ T2577] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:04:13 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:13 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000"], 0x0)

00:04:13 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x2000000d, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x500}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:13 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

00:04:13 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x7, 0xe3, {0xe3, 0x23, "4ce0f7c547a0b3be446dff5d54c574a21697fa4badf62b4dd44790d9402c8eb604c30b3e2e82bb729ca3a896780e1d9139e54bf64999562fc16da02330abcab617b18c88b529925cd05d12a93a18c90cfacd8cc9f6d032be926d45ba5fca61e71b2f7fc4dea4dc498f358e678ae04e4836d8b0a1255c69dc7b3356e8f242e0122c3f209587013b56085ead5830057e3e6d561d60856c2384885cf09912a1595a4f99ba038765105a5d442e7764839ca7b1dfbd3974d69868437ccdaa77be8270a923ffd2b7ac373b8bca62efd2e09a9bc1520fdb0918d4c7f0ea1dfdf4ba6abf70"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x14, 0x40, "28544c3e2c3e9a08007c9741a5b38af97e67c67674e4322e8f8049845309dfcfebeee48bde8e5141103ddee9a7eef12ac3a4b2e1b1d4bd73e54578ade6ee5287"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x4, 0x3, 0x4, 0x8, 0x100, 0x5, 0x7fff, 0x1, 0x9, 0x400, 0x9}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xbb}, &(0x7f0000000440)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2422.690745][T26277] usb 2-1: new high-speed USB device number 77 using dummy_hcd
00:04:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x600}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2422.851638][ T1067] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 2422.859098][  T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 2422.866385][ T2549] usb 1-1: new high-speed USB device number 107 using dummy_hcd
00:04:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x700}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2422.941678][T26277] usb 2-1: Using ep0 maxpacket: 32
00:04:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x7d0}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2423.061657][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:04:14 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x2000000f, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x900}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2423.231721][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2423.240675][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2423.248723][T26277] usb 2-1: Product: syz
[ 2423.252875][T26277] usb 2-1: Manufacturer: syz
[ 2423.257306][T26277] usb 2-1: SerialNumber: syz
[ 2423.528418][ T1067] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2423.539145][  T126] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2423.547647][ T2549] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2423.556158][  T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2423.566322][ T2549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2423.576378][  T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2423.585193][ T2549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2423.593993][  T126] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2423.606868][ T2549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:04:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xa00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2423.761696][ T1067] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2423.770819][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2423.782163][ T1067] usb 5-1: Product: syz
[ 2423.786816][ T1067] usb 5-1: Manufacturer: syz
[ 2423.791349][ T1067] usb 5-1: SerialNumber: syz
[ 2423.801669][  T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2423.810606][ T2549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2423.820164][ T2549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2423.828567][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2423.837580][ T2549] usb 1-1: Product: syz
[ 2423.841738][  T126] usb 3-1: Product: syz
[ 2423.845732][ T2549] usb 1-1: Manufacturer: syz
[ 2423.850505][  T126] usb 3-1: Manufacturer: syz
[ 2423.855204][  T126] usb 3-1: SerialNumber: syz
[ 2423.859646][ T2549] usb 1-1: SerialNumber: syz
[ 2423.902693][  T126] cdc_ncm 3-1:1.0: skipping garbage
[ 2423.907857][ T2549] cdc_ncm 1-1:1.0: skipping garbage
[ 2423.912908][  T126] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2423.919485][ T2549] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2423.926304][  T126] cdc_ncm 3-1:1.0: bind() failure
[ 2423.931162][ T2549] cdc_ncm 1-1:1.0: bind() failure
[ 2424.103711][  T126] usb 1-1: USB disconnect, device number 107
[ 2424.103752][T11820] usb 3-1: USB disconnect, device number 8
[ 2424.611648][T26277] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2424.617964][T26277] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2424.625589][T26277] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2424.833027][T26277] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2424.844349][T26277] usb 2-1: USB disconnect, device number 77
[ 2424.850322][T26277] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2424.951691][ T1067] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2424.958000][ T1067] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2424.965797][ T1067] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2425.161687][ T1067] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2425.168199][ T1067] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2425.180002][ T1067] usb 5-1: USB disconnect, device number 76
[ 2425.186715][ T1067] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
00:04:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xb00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:16 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

00:04:16 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:16 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000"], 0x0)

00:04:17 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x7, 0xe3, {0xe3, 0x23, "4ce0f7c547a0b3be446dff5d54c574a21697fa4badf62b4dd44790d9402c8eb604c30b3e2e82bb729ca3a896780e1d9139e54bf64999562fc16da02330abcab617b18c88b529925cd05d12a93a18c90cfacd8cc9f6d032be926d45ba5fca61e71b2f7fc4dea4dc498f358e678ae04e4836d8b0a1255c69dc7b3356e8f242e0122c3f209587013b56085ead5830057e3e6d561d60856c2384885cf09912a1595a4f99ba038765105a5d442e7764839ca7b1dfbd3974d69868437ccdaa77be8270a923ffd2b7ac373b8bca62efd2e09a9bc1520fdb0918d4c7f0ea1dfdf4ba6abf70"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x14, 0x40, "28544c3e2c3e9a08007c9741a5b38af97e67c67674e4322e8f8049845309dfcfebeee48bde8e5141103ddee9a7eef12ac3a4b2e1b1d4bd73e54578ade6ee5287"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x4, 0x3, 0x4, 0x8, 0x100, 0x5, 0x7fff, 0x1, 0x9, 0x400, 0x9}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xbb}, &(0x7f0000000440)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x7, 0xe3, {0xe3, 0x23, "4ce0f7c547a0b3be446dff5d54c574a21697fa4badf62b4dd44790d9402c8eb604c30b3e2e82bb729ca3a896780e1d9139e54bf64999562fc16da02330abcab617b18c88b529925cd05d12a93a18c90cfacd8cc9f6d032be926d45ba5fca61e71b2f7fc4dea4dc498f358e678ae04e4836d8b0a1255c69dc7b3356e8f242e0122c3f209587013b56085ead5830057e3e6d561d60856c2384885cf09912a1595a4f99ba038765105a5d442e7764839ca7b1dfbd3974d69868437ccdaa77be8270a923ffd2b7ac373b8bca62efd2e09a9bc1520fdb0918d4c7f0ea1dfdf4ba6abf70"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x14, 0x40, "28544c3e2c3e9a08007c9741a5b38af97e67c67674e4322e8f8049845309dfcfebeee48bde8e5141103ddee9a7eef12ac3a4b2e1b1d4bd73e54578ade6ee5287"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x4, 0x3, 0x4, 0x8, 0x100, 0x5, 0x7fff, 0x1, 0x9, 0x400, 0x9}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xbb}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)

[ 2425.711739][T26277] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 2425.771631][ T2549] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 2425.779114][  T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 2425.951610][T26277] usb 2-1: Using ep0 maxpacket: 32
[ 2426.021620][ T1919] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 2426.071719][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:04:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000015, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xc00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2426.181706][  T126] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2426.191473][ T2549] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2426.200222][  T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2426.210432][ T2549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2426.220548][  T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2426.229363][ T2549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2426.238135][  T126] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2426.241767][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2426.250918][ T2549] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2426.260048][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2426.281057][T26277] usb 2-1: Product: syz
[ 2426.285457][T26277] usb 2-1: Manufacturer: syz
[ 2426.290203][T26277] usb 2-1: SerialNumber: syz
00:04:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xd00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xe00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2426.681752][ T1919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2426.731700][  T126] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2426.740617][ T2549] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2426.749931][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2426.757857][ T2549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2426.765769][  T126] usb 3-1: Product: syz
[ 2426.769775][ T2549] usb 1-1: Product: syz
[ 2426.773923][  T126] usb 3-1: Manufacturer: syz
[ 2426.778364][ T2549] usb 1-1: Manufacturer: syz
[ 2426.783066][  T126] usb 3-1: SerialNumber: syz
[ 2426.787492][ T2549] usb 1-1: SerialNumber: syz
00:04:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xe5e}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2426.842446][  T126] cdc_ncm 3-1:1.0: skipping garbage
[ 2426.847811][ T2549] cdc_ncm 1-1:1.0: skipping garbage
[ 2426.853732][  T126] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2426.860341][ T2549] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2426.866979][  T126] cdc_ncm 3-1:1.0: bind() failure
[ 2426.871837][ T2549] cdc_ncm 1-1:1.0: bind() failure
[ 2426.901689][ T1919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2426.910593][ T1919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2426.918605][ T1919] usb 5-1: Product: syz
[ 2426.922584][ T1919] usb 5-1: Manufacturer: syz
[ 2426.927121][ T1919] usb 5-1: SerialNumber: syz
00:04:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000018, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2427.001647][T26277] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 2427.007509][T26277] cdc_ncm 2-1:1.0: bind() failure
[ 2427.017914][T26277] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2427.024738][T26277] cdc_ncm 2-1:1.1: bind() failure
00:04:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xecc}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2427.052875][T26277] usb 3-1: USB disconnect, device number 9
[ 2427.061842][T22633] usb 1-1: USB disconnect, device number 108
00:04:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xf00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:19 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a000000090581030002000000090401"], 0x0)

[ 2427.921665][T26277] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 2428.111876][ T1919] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2428.118129][ T1919] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2428.125502][ T1919] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2428.291644][T26277] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2428.300195][T26277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2428.310108][T26277] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2428.319195][T13680] udc-core: couldn't find an available UDC or it's busy
[ 2428.319921][T26277] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:04:19 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1100}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:19 executing program 2:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000"], 0x0)

00:04:19 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000022, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:19 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x7, 0xe3, {0xe3, 0x23, "4ce0f7c547a0b3be446dff5d54c574a21697fa4badf62b4dd44790d9402c8eb604c30b3e2e82bb729ca3a896780e1d9139e54bf64999562fc16da02330abcab617b18c88b529925cd05d12a93a18c90cfacd8cc9f6d032be926d45ba5fca61e71b2f7fc4dea4dc498f358e678ae04e4836d8b0a1255c69dc7b3356e8f242e0122c3f209587013b56085ead5830057e3e6d561d60856c2384885cf09912a1595a4f99ba038765105a5d442e7764839ca7b1dfbd3974d69868437ccdaa77be8270a923ffd2b7ac373b8bca62efd2e09a9bc1520fdb0918d4c7f0ea1dfdf4ba6abf70"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x14, 0x40, "28544c3e2c3e9a08007c9741a5b38af97e67c67674e4322e8f8049845309dfcfebeee48bde8e5141103ddee9a7eef12ac3a4b2e1b1d4bd73e54578ade6ee5287"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x3ff, 0x4, 0x3, 0x4, 0x8, 0x100, 0x5, 0x7fff, 0x1, 0x9, 0x400, 0x9}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xbb}, &(0x7f0000000440)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2428.326280][ T1919] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2428.339184][T13680] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2428.349761][ T1919] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2428.377646][ T1919] usb 5-1: USB disconnect, device number 77
[ 2428.385350][T26281] usb 2-1: USB disconnect, device number 78
[ 2428.392245][ T1919] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2428.714890][T26277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2428.723824][T26277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2428.731554][T26277] usb 1-1: Product: syz
[ 2428.735553][T26277] usb 1-1: Manufacturer: syz
[ 2428.739981][T26277] usb 1-1: SerialNumber: syz
[ 2428.782262][T26277] cdc_ncm 1-1:1.0: skipping garbage
[ 2428.787333][T26277] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2428.793955][    T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 2428.801299][T26277] cdc_ncm 1-1:1.0: bind() failure
[ 2428.971619][T26281] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 2428.984676][T26277] usb 1-1: USB disconnect, device number 109
[ 2429.041661][ T1919] usb 5-1: new high-speed USB device number 78 using dummy_hcd
00:04:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2429.191666][    T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2429.200211][    T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2429.216761][    T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2429.225610][    T6] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
00:04:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1200}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2429.234267][T26281] usb 2-1: Using ep0 maxpacket: 32
[ 2429.442207][    T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2429.459416][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2429.468170][    T6] usb 3-1: Product: syz
[ 2429.484121][    T6] usb 3-1: Manufacturer: syz
00:04:21 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000"], 0x0)

[ 2429.530267][    T6] usb 3-1: SerialNumber: syz
[ 2429.582052][T26281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2429.603174][    T6] cdc_ncm 3-1:1.0: skipping garbage
[ 2429.608232][    T6] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2429.615123][    T6] cdc_ncm 3-1:1.0: bind() failure
[ 2429.631709][ T1919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2429.761701][T26281] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2429.770649][T26281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2429.778590][T26281] usb 2-1: Product: syz
[ 2429.782702][T26281] usb 2-1: Manufacturer: syz
[ 2429.787224][T26281] usb 2-1: SerialNumber: syz
[ 2429.801684][ T1919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2429.811355][ T1919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2429.819373][ T1919] usb 5-1: Product: syz
[ 2429.823490][ T1067] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 2429.830991][ T1919] usb 5-1: Manufacturer: syz
[ 2429.835979][ T1919] usb 5-1: SerialNumber: syz
[ 2429.840765][ T2549] usb 3-1: USB disconnect, device number 10
00:04:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20002ee0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1300}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x2, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:21 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2430.311682][ T1067] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2430.320820][ T1067] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2430.331058][ T1067] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2430.756039][T26281] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 2430.761933][T26281] cdc_ncm 2-1:1.0: bind() failure
[ 2430.767540][T26281] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2430.774170][ T1067] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2430.786859][T26281] cdc_ncm 2-1:1.1: bind() failure
[ 2430.901668][ T1919] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2430.907953][ T1919] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2430.915282][ T1919] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2430.952518][ T1067] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2430.961378][ T1067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2430.969265][ T1067] usb 1-1: Product: syz
[ 2430.973197][ T1067] usb 1-1: Manufacturer: syz
[ 2430.977608][ T1067] usb 1-1: SerialNumber: syz
[ 2431.022185][ T1067] cdc_ncm 1-1:1.0: skipping garbage
[ 2431.027238][ T1067] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2431.033890][ T1067] cdc_ncm 1-1:1.0: bind() failure
[ 2431.111647][ T1919] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2431.118339][ T1919] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2431.129704][ T1919] usb 5-1: USB disconnect, device number 78
[ 2431.141876][ T1919] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2431.223641][ T1067] usb 1-1: USB disconnect, device number 110
00:04:23 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x3, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1400}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000015, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:23 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x7, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2f, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x6, 0x2, 0x6, 0x36, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x40, 0xff, 'Y'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xa, 0x4, 0x10, 0x2, "5486221c4b"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x20, 0x3, 0xfd, 0x1, "1ee001a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x7, 0x81, {0x7, 0x25, 0x1, 0x80, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x1, 0x0, 0x800}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x7f, 0x6, 0x20, 0xf9}, 0x3f, &(0x7f0000000180)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x1, 0x77}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "1beaca03059cdab03932567776cd2dc0"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x4, 0x6, 0xfffe, 0x3a}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "894ee5d9e52481932df8cf1899680ca7"}]}, 0x2, [{0x6a, &(0x7f00000001c0)=@string={0x6a, 0x3, "9bb301910cfedcd413db94bfda61a9d6f485185afae5f7f5d159a4486e0dd12b6598a7fb859567e8f01be124eb27f9c9a988a5ad32de84d0f36f18d80052717122cd1bc0d6fbc824559f20cc44a8aa6d50adcbe55be2b7a2e584d5505a9ffa24eaaadac63f582066"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44}}]})
syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0xf, 0x26, {0x26, 0xb, "825c2913fb55aef287e163665e8992160abe91f645f7fb4ad31cf5a45dab94c5036449cf"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000f4e000000050f4e00030b10010201000407dc1d3f0a10030201000302050034100027fe17b92465b88b78673a412b6adab9751268ff970fddc6c9a163b10d9c2e84942e0f111730303b44db5d66434cd784ea07445daf2187c850756f400b71adce713445509300025001db3e23a6c7ba7ac2088204742c0c8cb8000287a687c1fe0331d89d5311afcc3fb6fbc842f1b320d3a2aa878e87a305dd809c7c87e3c30de55554c18d60d6522ef7f1ef08e5f8f3851a7721"], &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x4, 0x6, "23261098", "c34614e0"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x20, 0x61, 0x9, 0x20, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x20, 0x14, 0x74, "548f02ff99690d72a0c326b69a188a2ddc2d2b0b6415a84d0f5a8b9c38c0b685e94f4681b7382d0e2937c07f7e4f2acedd049f8c5fccae9cdd6f3d30ac6fbbf70c5be2120540600e3367c32bc88786d328473e37ab0a608ef2ac0f22901ebdb7ed985f383273349b2530a9d0cb2756e85936b9a0"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x160}}, &(0x7f0000000740)={0x40, 0x7, 0x2}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "50c3"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="ef997af3a30d"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "a7fe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x9}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2431.577121][    T6] usb 2-1: USB disconnect, device number 79
00:04:23 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000"], 0x0)

00:04:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x4, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xb00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xb00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xb00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1500}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2432.241752][T22633] usb 5-1: new high-speed USB device number 79 using dummy_hcd
00:04:23 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2432.391623][    T6] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 2432.471628][ T1919] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 2432.591766][T30410] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 2432.601763][T22633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2432.631726][    T6] usb 2-1: Using ep0 maxpacket: 32
[ 2432.751985][    T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2432.771902][T22633] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2432.780755][T22633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2432.788772][T22633] usb 5-1: Product: syz
[ 2432.792828][T22633] usb 5-1: Manufacturer: syz
[ 2432.797336][T22633] usb 5-1: SerialNumber: syz
[ 2432.831663][T30410] usb 3-1: Using ep0 maxpacket: 32
[ 2432.841836][ T1919] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2432.850397][ T1919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2432.860457][ T1919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2432.869306][ T1919] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2432.941701][    T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2432.950560][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2432.958442][    T6] usb 2-1: Product: syz
[ 2432.962383][    T6] usb 2-1: Manufacturer: syz
[ 2432.966786][    T6] usb 2-1: SerialNumber: syz
[ 2433.001708][T30410] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2433.041671][ T1919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2433.050585][ T1919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2433.058584][ T1919] usb 1-1: Product: syz
[ 2433.062673][ T1919] usb 1-1: Manufacturer: syz
[ 2433.067046][ T1919] usb 1-1: SerialNumber: syz
[ 2433.112083][ T1919] cdc_ncm 1-1:1.0: skipping garbage
[ 2433.117260][ T1919] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2433.123890][ T1919] cdc_ncm 1-1:1.0: bind() failure
[ 2433.171685][T30410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2433.180589][T30410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2433.188748][T30410] usb 3-1: Product: syz
[ 2433.192887][T30410] usb 3-1: Manufacturer: syz
[ 2433.197332][T30410] usb 3-1: SerialNumber: syz
[ 2433.312601][ T1919] usb 1-1: USB disconnect, device number 111
[ 2433.671668][    T6] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 2433.677487][    T6] cdc_ncm 2-1:1.0: bind() failure
[ 2433.683222][    T6] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2433.689802][    T6] cdc_ncm 2-1:1.1: bind() failure
[ 2433.911644][T22633] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2433.917962][T22633] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2433.925244][T22633] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2434.121773][T22633] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2434.128332][T22633] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2434.144870][T22633] usb 5-1: USB disconnect, device number 79
[ 2434.150810][T22633] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2434.561642][T30410] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2434.567964][T30410] cdc_ncm 3-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2434.575338][T30410] cdc_ncm 3-1:1.0: setting rx_max = 2048
00:04:26 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x5, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1601}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:26 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000001d240f0100000000000000000006241a0000000905810300020000000904010000"], 0x0)

00:04:26 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x7, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2f, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x6, 0x2, 0x6, 0x36, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x40, 0xff, 'Y'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xa, 0x4, 0x10, 0x2, "5486221c4b"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x20, 0x3, 0xfd, 0x1, "1ee001a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x7, 0x81, {0x7, 0x25, 0x1, 0x80, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x1, 0x0, 0x800}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x7f, 0x6, 0x20, 0xf9}, 0x3f, &(0x7f0000000180)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x1, 0x77}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "1beaca03059cdab03932567776cd2dc0"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x4, 0x6, 0xfffe, 0x3a}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "894ee5d9e52481932df8cf1899680ca7"}]}, 0x2, [{0x6a, &(0x7f00000001c0)=@string={0x6a, 0x3, "9bb301910cfedcd413db94bfda61a9d6f485185afae5f7f5d159a4486e0dd12b6598a7fb859567e8f01be124eb27f9c9a988a5ad32de84d0f36f18d80052717122cd1bc0d6fbc824559f20cc44a8aa6d50adcbe55be2b7a2e584d5505a9ffa24eaaadac63f582066"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44}}]})
syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0xf, 0x26, {0x26, 0xb, "825c2913fb55aef287e163665e8992160abe91f645f7fb4ad31cf5a45dab94c5036449cf"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000f4e000000050f4e00030b10010201000407dc1d3f0a10030201000302050034100027fe17b92465b88b78673a412b6adab9751268ff970fddc6c9a163b10d9c2e84942e0f111730303b44db5d66434cd784ea07445daf2187c850756f400b71adce713445509300025001db3e23a6c7ba7ac2088204742c0c8cb8000287a687c1fe0331d89d5311afcc3fb6fbc842f1b320d3a2aa878e87a305dd809c7c87e3c30de55554c18d60d6522ef7f1ef08e5f8f3851a7721"], &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x4, 0x6, "23261098", "c34614e0"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x20, 0x61, 0x9, 0x20, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x20, 0x14, 0x74, "548f02ff99690d72a0c326b69a188a2ddc2d2b0b6415a84d0f5a8b9c38c0b685e94f4681b7382d0e2937c07f7e4f2acedd049f8c5fccae9cdd6f3d30ac6fbbf70c5be2120540600e3367c32bc88786d328473e37ab0a608ef2ac0f22901ebdb7ed985f383273349b2530a9d0cb2756e85936b9a0"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x160}}, &(0x7f0000000740)={0x40, 0x7, 0x2}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "50c3"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="ef997af3a30d"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "a7fe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x9}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2434.654504][ T1067] usb 2-1: USB disconnect, device number 80
[ 2434.778494][T30410] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[ 2434.790460][T30410] usb 3-1: USB disconnect, device number 11
[ 2434.796672][T30410] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
00:04:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x8, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x9, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xb, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2435.216296][ T1919] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 2435.224034][T26281] usb 5-1: new high-speed USB device number 80 using dummy_hcd
00:04:26 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xd, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2435.401512][ T1067] usb 2-1: new high-speed USB device number 81 using dummy_hcd
00:04:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1b01}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xe, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2435.581666][T30410] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 2435.821650][T30410] usb 3-1: Using ep0 maxpacket: 32
[ 2435.841636][ T1067] usb 2-1: Using ep0 maxpacket: 32
[ 2435.871715][ T1919] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 2435.880259][ T1919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2435.890329][T26281] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2435.901075][ T1919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2435.909808][ T1919] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2435.981691][ T1067] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2435.991687][T30410] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2436.071694][T26281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2436.080728][T26281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2436.088722][ T1919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2436.097610][T26281] usb 5-1: Product: syz
[ 2436.101551][T26281] usb 5-1: Manufacturer: syz
[ 2436.101719][ T1919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2436.114140][T26281] usb 5-1: SerialNumber: syz
[ 2436.118739][ T1919] usb 1-1: Product: syz
[ 2436.123140][ T1919] usb 1-1: Manufacturer: syz
[ 2436.127553][ T1919] usb 1-1: SerialNumber: syz
[ 2436.151686][ T1067] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2436.160597][ T1067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2436.168933][ T1067] usb 2-1: Product: syz
[ 2436.173366][ T1919] cdc_ncm 1-1:1.0: skipping garbage
[ 2436.178381][ T1919] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[ 2436.185246][ T1067] usb 2-1: Manufacturer: syz
[ 2436.189643][ T1067] usb 2-1: SerialNumber: syz
[ 2436.191644][T30410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2436.194261][ T1919] cdc_ncm 1-1:1.0: bind() failure
[ 2436.203231][T30410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2436.215632][T30410] usb 3-1: Product: syz
[ 2436.219585][T30410] usb 3-1: Manufacturer: syz
[ 2436.224189][T30410] usb 3-1: SerialNumber: syz
[ 2436.375131][T32621] usb 1-1: USB disconnect, device number 112
[ 2436.981661][T26281] cdc_ncm 5-1:1.0: failed to get mac address
[ 2437.021708][T26281] cdc_ncm 5-1:1.0: bind() failure
[ 2437.027151][T26281] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2437.033810][T26281] cdc_ncm 5-1:1.1: bind() failure
[ 2437.561643][ T1067] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2437.567924][ T1067] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2437.575325][ T1067] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2437.591670][T30410] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2437.597905][T30410] cdc_ncm 3-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2437.605494][T30410] cdc_ncm 3-1:1.0: setting rx_max = 2048
[ 2437.783037][ T1067] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2437.796605][ T1067] usb 2-1: USB disconnect, device number 81
[ 2437.803149][ T1067] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2437.807997][T30410] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[ 2437.832278][T30410] usb 3-1: USB disconnect, device number 12
[ 2437.838385][T30410] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
[ 2437.907323][T32621] usb 5-1: USB disconnect, device number 80
00:04:29 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1d4c}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xf, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:29 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1601}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:29 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$uac1(0x7, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2f, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x6, 0x2, 0x6, 0x36, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x40, 0xff, 'Y'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xa, 0x4, 0x10, 0x2, "5486221c4b"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x20, 0x3, 0xfd, 0x1, "1ee001a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x7, 0x81, {0x7, 0x25, 0x1, 0x80, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x4, {0x7, 0x25, 0x1, 0x1, 0x0, 0x800}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x7f, 0x6, 0x20, 0xf9}, 0x3f, &(0x7f0000000180)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x1, 0x77}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "1beaca03059cdab03932567776cd2dc0"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x4, 0x6, 0xfffe, 0x3a}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "894ee5d9e52481932df8cf1899680ca7"}]}, 0x2, [{0x6a, &(0x7f00000001c0)=@string={0x6a, 0x3, "9bb301910cfedcd413db94bfda61a9d6f485185afae5f7f5d159a4486e0dd12b6598a7fb859567e8f01be124eb27f9c9a988a5ad32de84d0f36f18d80052717122cd1bc0d6fbc824559f20cc44a8aa6d50adcbe55be2b7a2e584d5505a9ffa24eaaadac63f582066"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44}}]})
syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0xf, 0x26, {0x26, 0xb, "825c2913fb55aef287e163665e8992160abe91f645f7fb4ad31cf5a45dab94c5036449cf"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000f4e000000050f4e00030b10010201000407dc1d3f0a10030201000302050034100027fe17b92465b88b78673a412b6adab9751268ff970fddc6c9a163b10d9c2e84942e0f111730303b44db5d66434cd784ea07445daf2187c850756f400b71adce713445509300025001db3e23a6c7ba7ac2088204742c0c8cb8000287a687c1fe0331d89d5311afcc3fb6fbc842f1b320d3a2aa878e87a305dd809c7c87e3c30de55554c18d60d6522ef7f1ef08e5f8f3851a7721"], &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x4, 0x6, "23261098", "c34614e0"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x20, 0x61, 0x9, 0x20, 0x4}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000600)={0x20, 0x14, 0x74, "548f02ff99690d72a0c326b69a188a2ddc2d2b0b6415a84d0f5a8b9c38c0b685e94f4681b7382d0e2937c07f7e4f2acedd049f8c5fccae9cdd6f3d30ac6fbbf70c5be2120540600e3367c32bc88786d328473e37ab0a608ef2ac0f22901ebdb7ed985f383273349b2530a9d0cb2756e85936b9a0"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x160}}, &(0x7f0000000740)={0x40, 0x7, 0x2}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "50c3"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="ef997af3a30d"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "a7fe"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x9}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:29 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:29 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x10, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x2000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2438.541718][T32621] usb 5-1: new high-speed USB device number 81 using dummy_hcd
00:04:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x12, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x262c}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x17, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2438.879382][T26281] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 2438.886830][ T1067] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 2438.921841][T32621] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:04:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x2c26}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2439.131712][T32621] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2439.140604][T32621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2439.152847][T32621] usb 5-1: Product: syz
[ 2439.156850][T32621] usb 5-1: Manufacturer: syz
[ 2439.161267][T32621] usb 5-1: SerialNumber: syz
[ 2439.211643][T26281] usb 3-1: Using ep0 maxpacket: 32
[ 2439.216623][ T1067] usb 2-1: Using ep0 maxpacket: 32
[ 2439.341666][ T1067] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2439.352401][T26281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2439.521651][T32621] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[ 2439.521696][T26281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2439.527504][T32621] cdc_ncm 5-1:1.0: bind() failure
[ 2439.536590][ T1067] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2439.542248][T32621] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2439.550379][ T1067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2439.556785][T32621] cdc_ncm 5-1:1.1: bind() failure
[ 2439.564592][T26281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2439.577143][T26281] usb 3-1: Product: syz
[ 2439.581097][T26281] usb 3-1: Manufacturer: syz
[ 2439.585582][ T1067] usb 2-1: Product: syz
[ 2439.589531][ T1067] usb 2-1: Manufacturer: syz
[ 2439.593982][T26281] usb 3-1: SerialNumber: syz
[ 2439.598560][ T1067] usb 2-1: SerialNumber: syz
[ 2440.771651][ T1067] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2440.777932][ T1067] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2440.785291][ T1067] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2440.951678][T26281] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2440.957951][T26281] cdc_ncm 3-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2440.965354][T26281] cdc_ncm 3-1:1.0: setting rx_max = 2048
[ 2440.982748][ T1067] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2440.994315][ T1067] usb 2-1: USB disconnect, device number 82
[ 2441.000896][ T1067] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2441.163212][T26281] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[ 2441.184964][T26281] usb 3-1: USB disconnect, device number 13
[ 2441.193197][T26281] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
[ 2441.273614][T32621] usb 5-1: USB disconnect, device number 81
00:04:32 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x18, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:32 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x262c}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3075}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:32 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x30, 0x63, {0x63, 0x1, "f04e5ef5f3300cba08cc4d93d7c4900e57bc7fc929795ac5cead0a0d0c44f970ff38dd528ce69a42df97d55596eed092228f518862967ff6a8d0c6df69e46eb17292f8b4af7c430bcf978fe67d3a6d3ecb0206470fb9987590395c827e337992ce"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x20, 0x2, 0x7e, "b66eacd1df3ff57811ab0e7aa15ba13f9a49c3d7c9c47a9c552f53dc26fe7bbbcb2763c2e3f6519d143caec4e5493cf91c7abb35db1dbd64a5c30164f553a50fb21e491a64d9f7de3fc0178e275587d4abcecce37a992d937ec3d9504d5f6d44eb4240beee2e20c6094d41da425d3c1b053efdfd3b2cf3dd5ee5651d614a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x91}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0xfff7, 0x9, 0x1f, 0x5, 0x2, 0x48b8, 0x2, 0x8640, 0x7f, 0x1, 0x8001}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0xffffff81}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x5, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:33 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0x45, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1500}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1500}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x1500}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3400}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3075}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2442.201649][T26281] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 2442.250196][T32621] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 2442.501624][T32621] usb 2-1: Using ep0 maxpacket: 32
[ 2442.571654][T26281] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2442.651669][T32621] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2442.741711][T26281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2442.750577][T26281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2442.758591][T26281] usb 5-1: Product: syz
[ 2442.762634][T26281] usb 5-1: Manufacturer: syz
[ 2442.766985][T26281] usb 5-1: SerialNumber: syz
[ 2442.821821][T32621] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2442.830718][T32621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2442.838564][T32621] usb 2-1: Product: syz
[ 2442.842523][T32621] usb 2-1: Manufacturer: syz
[ 2442.846918][T32621] usb 2-1: SerialNumber: syz
[ 2443.012137][T14114] udc-core: couldn't find an available UDC or it's busy
[ 2443.018894][T14114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2443.921648][T26281] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2443.927922][T26281] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2443.935386][T26281] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2444.031672][T32621] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2444.037916][T32621] cdc_ncm 2-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2444.045436][T32621] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2444.131668][T26281] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2444.140090][T26281] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2444.155626][T26281] usb 5-1: USB disconnect, device number 82
[ 2444.164519][T26281] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2444.243230][T32621] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2444.262955][T32621] usb 2-1: USB disconnect, device number 83
[ 2444.271674][T32621] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:04:36 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3075}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x3}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x262c}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3a98}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x30, 0x63, {0x63, 0x1, "f04e5ef5f3300cba08cc4d93d7c4900e57bc7fc929795ac5cead0a0d0c44f970ff38dd528ce69a42df97d55596eed092228f518862967ff6a8d0c6df69e46eb17292f8b4af7c430bcf978fe67d3a6d3ecb0206470fb9987590395c827e337992ce"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x20, 0x2, 0x7e, "b66eacd1df3ff57811ab0e7aa15ba13f9a49c3d7c9c47a9c552f53dc26fe7bbbcb2763c2e3f6519d143caec4e5493cf91c7abb35db1dbd64a5c30164f553a50fb21e491a64d9f7de3fc0178e275587d4abcecce37a992d937ec3d9504d5f6d44eb4240beee2e20c6094d41da425d3c1b053efdfd3b2cf3dd5ee5651d614a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x91}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0xfff7, 0x9, 0x1f, 0x5, 0x2, 0x48b8, 0x2, 0x8640, 0x7f, 0x1, 0x8001}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0xffffff81}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3075}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x2000000d, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2444.747153][T14198] udc-core: couldn't find an available UDC or it's busy
[ 2444.761164][T14198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
00:04:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x2000000d, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x5}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:36 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x3f00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2445.642047][T26281] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 2445.649531][ T1067] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 2445.891642][ T1067] usb 2-1: Using ep0 maxpacket: 32
[ 2445.896615][T26281] usb 5-1: Using ep0 maxpacket: 8
[ 2446.011726][T26281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 6912, setting to 1024
[ 2446.022531][ T1067] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2446.033275][T26281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024
[ 2446.043246][T26281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2446.052972][T26281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 2446.062545][T26281] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[ 2446.071407][T26281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2446.079860][T26281] usb 5-1: config 0 descriptor??
[ 2446.101710][T14199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 2446.122041][T26281] ums-alauda 5-1:0.0: USB Mass Storage device detected
[ 2446.129546][T26281] scsi host1: usb-storage 5-1:0.0
[ 2446.201918][ T1067] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2446.210775][ T1067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2446.218769][ T1067] usb 2-1: Product: syz
[ 2446.222838][ T1067] usb 2-1: Manufacturer: syz
[ 2446.227145][ T1067] usb 2-1: SerialNumber: syz
[ 2447.151936][T18274] scsi 1:0:0:0: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[ 2447.211744][T11152] sd 1:0:0:0: [sdb] Media removed, stopped polling
[ 2447.212024][T18274] scsi 1:0:0:1: Direct-Access     Olympus  MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS
[ 2447.391650][ T1067] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2447.397951][ T1067] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2447.405174][ T1067] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2447.462432][T32621] usb 5-1: USB disconnect, device number 83
[ 2447.471873][T11152] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[ 2447.471904][T32312] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK
[ 2447.471953][T14644] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK
[ 2447.478468][T32312] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK
[ 2447.497225][T32312] sd 1:0:0:1: [sdc] Sense not available.
[ 2447.512434][T32312] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B)
[ 2447.519469][T32312] sd 1:0:0:1: [sdc] 0-byte physical blocks
[ 2447.525241][T32312] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled
[ 2447.526701][T14644] udevd[14644]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[ 2447.532302][T32312] sd 1:0:0:1: [sdc] Asking for cache data failed
[ 2447.547604][T32312] sd 1:0:0:1: [sdc] Assuming drive cache: write through
[ 2447.560256][T14638] udevd[14638]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[ 2447.561292][T32312] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK
[ 2447.580644][T32312] sd 1:0:0:1: [sdc] Sense not available.
[ 2447.586242][T32312] sd 1:0:0:1: [sdc] Attached SCSI removable disk
[ 2447.604132][ T1067] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2447.615390][ T1067] usb 2-1: USB disconnect, device number 84
[ 2447.622265][ T1067] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:04:39 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x600}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x7}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x2000000d, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:39 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x4000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:39 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x30, 0x63, {0x63, 0x1, "f04e5ef5f3300cba08cc4d93d7c4900e57bc7fc929795ac5cead0a0d0c44f970ff38dd528ce69a42df97d55596eed092228f518862967ff6a8d0c6df69e46eb17292f8b4af7c430bcf978fe67d3a6d3ecb0206470fb9987590395c827e337992ce"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x20, 0x2, 0x7e, "b66eacd1df3ff57811ab0e7aa15ba13f9a49c3d7c9c47a9c552f53dc26fe7bbbcb2763c2e3f6519d143caec4e5493cf91c7abb35db1dbd64a5c30164f553a50fb21e491a64d9f7de3fc0178e275587d4abcecce37a992d937ec3d9504d5f6d44eb4240beee2e20c6094d41da425d3c1b053efdfd3b2cf3dd5ee5651d614a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x91}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0xfff7, 0x9, 0x1f, 0x5, 0x2, 0x48b8, 0x2, 0x8640, 0x7f, 0x1, 0x8001}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0xffffff81}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2448.115619][T14302] udc-core: couldn't find an available UDC or it's busy
[ 2448.122472][T14302] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
00:04:40 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x8}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2448.681616][ T2549] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[ 2448.689067][T18274] usb 2-1: new high-speed USB device number 85 using dummy_hcd
00:04:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x281}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x4400}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xa}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x116}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2449.088634][T26281] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 2449.221642][T18274] usb 2-1: Using ep0 maxpacket: 32
[ 2449.341655][T26281] usb 3-1: Using ep0 maxpacket: 32
[ 2449.346687][ T2549] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2449.357324][T18274] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2449.481696][T26281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2449.531712][ T2549] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2449.540605][ T2549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2449.548578][T18274] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2449.557589][T18274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2449.565624][ T2549] usb 5-1: Product: syz
[ 2449.569594][ T2549] usb 5-1: Manufacturer: syz
[ 2449.574068][T18274] usb 2-1: Product: syz
[ 2449.578011][T18274] usb 2-1: Manufacturer: syz
[ 2449.582468][ T2549] usb 5-1: SerialNumber: syz
[ 2449.587154][T18274] usb 2-1: SerialNumber: syz
[ 2449.701683][T26281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2449.710540][T26281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2449.718494][T26281] usb 3-1: Product: syz
[ 2449.722470][T26281] usb 3-1: Manufacturer: syz
[ 2449.726881][T26281] usb 3-1: SerialNumber: syz
[ 2449.861634][ T2549] cdc_ncm 5-1:1.0: bind() failure
[ 2449.867079][ T2549] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 2449.873895][ T2549] cdc_ncm 5-1:1.1: bind() failure
[ 2449.880888][ T2549] usb 5-1: USB disconnect, device number 84
[ 2450.761680][T18274] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2450.767925][T18274] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2450.775296][T18274] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2450.911656][T26281] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2450.917901][T26281] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2450.925327][T26281] cdc_ncm 3-1:1.0: setting rx_max = 2048
[ 2450.972812][T18274] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2450.984136][T18274] usb 2-1: USB disconnect, device number 85
[ 2450.990719][T18274] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2451.132767][T26281] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[ 2451.145287][T26281] usb 3-1: USB disconnect, device number 14
[ 2451.151207][T26281] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
00:04:42 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x4800}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:42 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xd}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:42 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:42 executing program 4:
r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002052406000105240000000d240f0100000000000000000006241a00000009058103000200000009040100000d00000904010102020d000009058202000200000009050302fa01000000"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:43 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xf}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2451.741616][T32621] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 2451.751686][T11820] usb 2-1: new high-speed USB device number 86 using dummy_hcd
00:04:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x10}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2451.911622][T26277] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 2451.992236][T11820] usb 2-1: Using ep0 maxpacket: 32
00:04:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x11}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2452.019321][T26281] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 2452.101669][T32621] usb 5-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[ 2452.112118][T32621] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 2
00:04:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x12}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2452.151660][T11820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2452.162461][T26277] usb 3-1: Using ep0 maxpacket: 32
[ 2452.291871][T26277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2452.303042][T32621] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2452.312422][T32621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2452.336830][T32621] usb 5-1: Product: syz
00:04:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x4880}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x14}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2452.351130][T32621] usb 5-1: Manufacturer: syz
[ 2452.355901][T11820] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2452.369760][T32621] usb 5-1: SerialNumber: syz
[ 2452.374549][T11820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2452.386552][T11820] usb 2-1: Product: syz
[ 2452.390625][T11820] usb 2-1: Manufacturer: syz
[ 2452.395269][T11820] usb 2-1: SerialNumber: syz
[ 2452.451590][T26281] usb 1-1: Using ep0 maxpacket: 32
[ 2452.502053][T26277] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2452.516316][T26277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2452.527497][T26277] usb 3-1: Product: syz
[ 2452.531875][T26277] usb 3-1: Manufacturer: syz
[ 2452.536384][T26277] usb 3-1: SerialNumber: syz
[ 2452.681730][T26281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2452.901652][T26281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2452.910567][T26281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2452.918517][T26281] usb 1-1: Product: syz
[ 2452.922549][T26281] usb 1-1: Manufacturer: syz
[ 2452.926950][T26281] usb 1-1: SerialNumber: syz
[ 2453.023534][T32621] usb 5-1: USB disconnect, device number 85
[ 2453.591663][T11820] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2453.597923][T11820] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2453.605282][T11820] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2453.711636][T26277] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2453.717989][T26277] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2453.725447][T26277] cdc_ncm 3-1:1.0: setting rx_max = 2048
[ 2453.802886][T11820] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2453.814192][T11820] usb 2-1: USB disconnect, device number 86
[ 2453.820122][T11820] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2453.923728][T26277] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[ 2453.940094][T26277] usb 3-1: USB disconnect, device number 15
[ 2453.946260][T26277] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
00:04:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x4c1d}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x22}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:45 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2454.271647][T26281] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2454.277929][T26281] cdc_ncm 1-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2454.285323][T26281] cdc_ncm 1-1:1.0: setting rx_max = 2048
[ 2454.511287][T26281] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[ 2454.525164][T26281] usb 1-1: USB disconnect, device number 113
[ 2454.531861][T26281] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[ 2454.571654][T26277] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 2454.821601][T26277] usb 2-1: Using ep0 maxpacket: 32
00:04:46 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x5e0e}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:46 executing program 4:
r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002052406000105240000000d240f0100000000000000000006241a00000009058103000200000009040100000d00000904010102020d000009058202000200000009050302fa01000000"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x45}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:46 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2454.941667][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:04:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x280}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2455.151849][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2455.160839][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2455.170975][T26277] usb 2-1: Product: syz
[ 2455.175196][T26277] usb 2-1: Manufacturer: syz
[ 2455.179699][T26277] usb 2-1: SerialNumber: syz
00:04:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x2}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2455.540181][T26281] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2455.547617][ T1067] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 2455.555194][T18274] usb 5-1: new high-speed USB device number 86 using dummy_hcd
00:04:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x6400}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x4}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2455.918603][T26281] usb 3-1: Using ep0 maxpacket: 32
[ 2455.923712][ T1067] usb 1-1: Using ep0 maxpacket: 32
[ 2456.171686][T26281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2456.182454][T18274] usb 5-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[ 2456.192351][ T1067] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2456.203333][T18274] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[ 2456.351642][T26277] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2456.358009][T26277] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2456.365167][T26277] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2456.381670][T26281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2456.390583][ T1067] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2456.399431][T18274] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2456.408266][ T1067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2456.416279][T26281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2456.424191][T18274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2456.432025][ T1067] usb 1-1: Product: syz
[ 2456.436002][T26281] usb 3-1: Product: syz
[ 2456.439998][ T1067] usb 1-1: Manufacturer: syz
[ 2456.444566][T26281] usb 3-1: Manufacturer: syz
[ 2456.448979][T18274] usb 5-1: Product: syz
[ 2456.453080][ T1067] usb 1-1: SerialNumber: syz
[ 2456.457485][T26281] usb 3-1: SerialNumber: syz
[ 2456.462025][T18274] usb 5-1: Manufacturer: syz
[ 2456.467381][T18274] usb 5-1: SerialNumber: syz
[ 2456.561692][T26277] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2456.570390][T26277] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2456.584819][T26277] usb 2-1: USB disconnect, device number 87
[ 2456.594000][T26277] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:04:48 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2457.132195][T18274] usb 5-1: USB disconnect, device number 86
[ 2457.331625][T26277] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 2457.571593][T26277] usb 2-1: Using ep0 maxpacket: 32
[ 2457.641709][T26281] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2457.647988][T26281] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2457.655305][T26281] cdc_ncm 3-1:1.0: setting rx_max = 2048
[ 2457.691664][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2457.811644][ T1067] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2457.817920][ T1067] cdc_ncm 1-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2457.825316][ T1067] cdc_ncm 1-1:1.0: setting rx_max = 2048
[ 2457.861667][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2457.863213][T26281] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[ 2457.870920][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2457.882379][T26281] usb 3-1: USB disconnect, device number 16
[ 2457.894875][T26277] usb 2-1: Product: syz
[ 2457.897534][T26281] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
[ 2457.898996][T26277] usb 2-1: Manufacturer: syz
[ 2457.911472][T26277] usb 2-1: SerialNumber: syz
[ 2458.022776][ T1067] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[ 2458.035093][ T1067] usb 1-1: USB disconnect, device number 114
[ 2458.041103][ T1067] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
00:04:50 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x7530}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:50 executing program 4:
r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002052406000105240000000d240f0100000000000000000006241a00000009058103000200000009040100000d00000904010102020d000009058202000200000009050302fa01000000"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) (async)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) (async)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002052406000105240000000d240f0100000000000000000006241a00000009058103000200000009040100000d00000904010102020d000009058202000200000009050302fa01000000"], 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)

00:04:50 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:04:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x7900}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2458.791679][T32621] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 2458.801640][T11820] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 2458.801669][ T3454] usb 3-1: new high-speed USB device number 17 using dummy_hcd
00:04:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x7}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2459.051712][T11820] usb 1-1: Using ep0 maxpacket: 32
00:04:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x8}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2459.081594][ T3454] usb 3-1: Using ep0 maxpacket: 32
[ 2459.091767][T26277] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2459.101939][T26277] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2459.109303][T26277] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2459.171674][T32621] usb 5-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[ 2459.182026][T11820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2459.193287][T32621] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 2
[ 2459.202470][ T3454] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:04:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x9}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2459.311736][T26277] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2459.318682][T26277] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2459.331085][T26277] usb 2-1: USB disconnect, device number 88
[ 2459.371999][ T3454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2459.372095][T32621] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2459.372121][T11820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2459.405136][T11820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2459.413362][ T3454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2459.429714][ T3454] usb 3-1: Product: syz
[ 2459.434012][T11820] usb 1-1: Product: syz
[ 2459.438463][T26277] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2459.446926][T11820] usb 1-1: Manufacturer: syz
[ 2459.451432][ T3454] usb 3-1: Manufacturer: syz
[ 2459.456086][ T3454] usb 3-1: SerialNumber: syz
[ 2459.460582][T11820] usb 1-1: SerialNumber: syz
00:04:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xa}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2459.475751][T32621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2459.483784][T32621] usb 5-1: Product: syz
[ 2459.487873][T32621] usb 5-1: Manufacturer: syz
[ 2459.500395][T32621] usb 5-1: SerialNumber: syz
[ 2459.516776][T30410] ==================================================================
[ 2459.524667][T30410] BUG: KASAN: use-after-free in worker_thread+0xb14/0x1340
[ 2459.531693][T30410] Read of size 8 at addr ffff888113846c60 by task kworker/0:11/30410
[ 2459.539598][T30410] 
[ 2459.541761][T30410] CPU: 0 PID: 30410 Comm: kworker/0:11 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0
[ 2459.551657][T30410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2459.561550][T30410] Workqueue:  0x0 (events)
[ 2459.565803][T30410] Call Trace:
[ 2459.568927][T30410]  <TASK>
[ 2459.571704][T30410]  dump_stack_lvl+0x151/0x1b7
[ 2459.576220][T30410]  ? bfq_pos_tree_add_move+0x43e/0x43e
[ 2459.581511][T30410]  ? __wake_up_klogd+0xd9/0x110
[ 2459.586199][T30410]  ? panic+0x727/0x727
[ 2459.590108][T30410]  print_address_description+0x87/0x3d0
[ 2459.595489][T30410]  kasan_report+0x1a6/0x1f0
[ 2459.599825][T30410]  ? worker_thread+0xb14/0x1340
[ 2459.604513][T30410]  ? worker_thread+0xb14/0x1340
[ 2459.609200][T30410]  __asan_report_load8_noabort+0x14/0x20
[ 2459.614666][T30410]  worker_thread+0xb14/0x1340
[ 2459.619186][T30410]  kthread+0x41c/0x500
[ 2459.623100][T30410]  ? worker_clr_flags+0x180/0x180
[ 2459.627947][T30410]  ? kthread_blkcg+0xd0/0xd0
[ 2459.632633][T30410]  ret_from_fork+0x1f/0x30
[ 2459.636887][T30410]  </TASK>
[ 2459.639749][T30410] 
[ 2459.641922][T30410] Allocated by task 26277:
[ 2459.646173][T30410]  ____kasan_kmalloc+0xdc/0x110
[ 2459.650859][T30410]  __kasan_kmalloc+0x9/0x10
[ 2459.655200][T30410]  __kmalloc+0x203/0x350
[ 2459.659278][T30410]  kvmalloc_node+0x82/0x130
[ 2459.663616][T30410]  alloc_netdev_mqs+0x8c/0xc80
[ 2459.668219][T30410]  alloc_etherdev_mqs+0x33/0x40
[ 2459.672907][T30410]  usbnet_probe+0x1c2/0x2750
[ 2459.677329][T30410]  usb_probe_interface+0x632/0xae0
[ 2459.682279][T30410]  really_probe+0x28d/0x970
[ 2459.686616][T30410]  __driver_probe_device+0x1b7/0x290
[ 2459.691749][T30410]  driver_probe_device+0x54/0x3d0
[ 2459.696597][T30410]  __device_attach_driver+0x2bf/0x470
[ 2459.701806][T30410]  bus_for_each_drv+0x18a/0x210
[ 2459.706494][T30410]  __device_attach+0x32b/0x530
[ 2459.711094][T30410]  device_initial_probe+0x1a/0x20
[ 2459.715954][T30410]  bus_probe_device+0xbc/0x1f0
[ 2459.720553][T30410]  device_add+0xb1e/0xef0
[ 2459.724720][T30410]  usb_set_configuration+0x1a91/0x2020
[ 2459.730100][T30410]  usb_generic_driver_probe+0x89/0x150
[ 2459.735397][T30410]  usb_probe_device+0x140/0x240
[ 2459.740081][T30410]  really_probe+0x28d/0x970
[ 2459.744422][T30410]  __driver_probe_device+0x1b7/0x290
[ 2459.749540][T30410]  driver_probe_device+0x54/0x3d0
[ 2459.754397][T30410]  __device_attach_driver+0x2bf/0x470
[ 2459.759606][T30410]  bus_for_each_drv+0x18a/0x210
[ 2459.764295][T30410]  __device_attach+0x32b/0x530
[ 2459.768892][T30410]  device_initial_probe+0x1a/0x20
[ 2459.773754][T30410]  bus_probe_device+0xbc/0x1f0
[ 2459.778359][T30410]  device_add+0xb1e/0xef0
[ 2459.782520][T30410]  usb_new_device+0x1012/0x1ba0
[ 2459.787206][T30410]  hub_event+0x2c85/0x5160
[ 2459.791460][T30410]  process_one_work+0x6db/0xc00
[ 2459.796145][T30410]  worker_thread+0xb3e/0x1340
[ 2459.800662][T30410]  kthread+0x41c/0x500
[ 2459.804565][T30410]  ret_from_fork+0x1f/0x30
[ 2459.808818][T30410] 
[ 2459.810988][T30410] Freed by task 26277:
[ 2459.814894][T30410]  kasan_set_track+0x4c/0x70
[ 2459.819320][T30410]  kasan_set_free_info+0x23/0x40
[ 2459.824094][T30410]  ____kasan_slab_free+0x126/0x160
[ 2459.829041][T30410]  __kasan_slab_free+0x11/0x20
[ 2459.833651][T30410]  slab_free_freelist_hook+0xc9/0x1a0
[ 2459.838848][T30410]  kfree+0xc8/0x210
[ 2459.842495][T30410]  kvfree+0x35/0x40
[ 2459.846137][T30410]  netdev_freemem+0x3e/0x60
[ 2459.850481][T30410]  netdev_release+0x79/0xa0
[ 2459.854822][T30410]  device_release+0x9c/0x1d0
[ 2459.859246][T30410]  kobject_put+0x163/0x240
[ 2459.863498][T30410]  put_device+0x1f/0x30
[ 2459.867490][T30410]  free_netdev+0x365/0x450
[ 2459.871796][T30410]  usbnet_disconnect+0x277/0x3b0
[ 2459.876518][T30410]  usb_unbind_interface+0x20f/0x8e0
[ 2459.881552][T30410]  device_release_driver_internal+0x528/0x7e0
[ 2459.887451][T30410]  device_release_driver+0x19/0x20
[ 2459.892398][T30410]  bus_remove_device+0x2de/0x340
[ 2459.897175][T30410]  device_del+0x64e/0xec0
[ 2459.901345][T30410]  usb_disable_device+0x3a4/0x710
[ 2459.906208][T30410]  usb_disconnect+0x342/0x880
[ 2459.910713][T30410]  hub_event+0x1d59/0x5160
[ 2459.914968][T30410]  process_one_work+0x6db/0xc00
[ 2459.919658][T30410]  worker_thread+0xe94/0x1340
[ 2459.924166][T30410]  kthread+0x41c/0x500
[ 2459.928071][T30410]  ret_from_fork+0x1f/0x30
[ 2459.932324][T30410] 
[ 2459.934492][T30410] Last potentially related work creation:
[ 2459.940048][T30410]  kasan_save_stack+0x3b/0x60
[ 2459.944560][T30410]  __kasan_record_aux_stack+0xd3/0xf0
[ 2459.949769][T30410]  kasan_record_aux_stack_noalloc+0xb/0x10
[ 2459.955411][T30410]  insert_work+0x56/0x340
[ 2459.959576][T30410]  __queue_work+0x934/0xcf0
[ 2459.963916][T30410]  queue_work_on+0xf2/0x170
[ 2459.968256][T30410]  usbnet_link_change+0xe6/0x100
[ 2459.973029][T30410]  usbnet_probe+0x1cf3/0x2750
[ 2459.977543][T30410]  usb_probe_interface+0x632/0xae0
[ 2459.982489][T30410]  really_probe+0x28d/0x970
[ 2459.986832][T30410]  __driver_probe_device+0x1b7/0x290
[ 2459.991953][T30410]  driver_probe_device+0x54/0x3d0
[ 2459.996812][T30410]  __device_attach_driver+0x2bf/0x470
[ 2460.002018][T30410]  bus_for_each_drv+0x18a/0x210
[ 2460.006708][T30410]  __device_attach+0x32b/0x530
[ 2460.011304][T30410]  device_initial_probe+0x1a/0x20
[ 2460.016167][T30410]  bus_probe_device+0xbc/0x1f0
[ 2460.020766][T30410]  device_add+0xb1e/0xef0
[ 2460.024934][T30410]  usb_set_configuration+0x1a91/0x2020
[ 2460.030227][T30410]  usb_generic_driver_probe+0x89/0x150
[ 2460.035521][T30410]  usb_probe_device+0x140/0x240
[ 2460.040903][T30410]  really_probe+0x28d/0x970
[ 2460.045246][T30410]  __driver_probe_device+0x1b7/0x290
[ 2460.050362][T30410]  driver_probe_device+0x54/0x3d0
[ 2460.055234][T30410]  __device_attach_driver+0x2bf/0x470
[ 2460.060432][T30410]  bus_for_each_drv+0x18a/0x210
[ 2460.065118][T30410]  __device_attach+0x32b/0x530
[ 2460.069718][T30410]  device_initial_probe+0x1a/0x20
[ 2460.074581][T30410]  bus_probe_device+0xbc/0x1f0
[ 2460.079176][T30410]  device_add+0xb1e/0xef0
[ 2460.083344][T30410]  usb_new_device+0x1012/0x1ba0
[ 2460.088029][T30410]  hub_event+0x2c85/0x5160
[ 2460.092284][T30410]  process_one_work+0x6db/0xc00
[ 2460.096973][T30410]  worker_thread+0xb3e/0x1340
[ 2460.101485][T30410]  kthread+0x41c/0x500
[ 2460.105396][T30410]  ret_from_fork+0x1f/0x30
[ 2460.109640][T30410] 
[ 2460.111817][T30410] The buggy address belongs to the object at ffff888113846000
[ 2460.111817][T30410]  which belongs to the cache kmalloc-4k of size 4096
[ 2460.125699][T30410] The buggy address is located 3168 bytes inside of
[ 2460.125699][T30410]  4096-byte region [ffff888113846000, ffff888113847000)
[ 2460.138980][T30410] The buggy address belongs to the page:
[ 2460.144448][T30410] page:ffffea00044e1000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113840
[ 2460.154513][T30410] head:ffffea00044e1000 order:3 compound_mapcount:0 compound_pincount:0
[ 2460.162677][T30410] flags: 0x4000000000010200(slab|head|zone=1)
[ 2460.168578][T30410] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043380
[ 2460.177085][T30410] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 2460.185607][T30410] page dumped because: kasan: bad access detected
[ 2460.191851][T30410] page_owner tracks the page as allocated
[ 2460.197403][T30410] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14487, ts 978112174823, free_ts 978068114887
[ 2460.218150][T30410]  post_alloc_hook+0x1ab/0x1b0
[ 2460.222750][T30410]  get_page_from_freelist+0x38b/0x400
[ 2460.228045][T30410]  __alloc_pages+0x3a8/0x7c0
[ 2460.232469][T30410]  allocate_slab+0x62/0x580
[ 2460.236808][T30410]  ___slab_alloc+0x2e2/0x6f0
[ 2460.241286][T30410]  __slab_alloc+0x4a/0x90
[ 2460.245402][T30410]  __kmalloc_track_caller+0x25a/0x350
[ 2460.250613][T30410]  kmemdup+0x24/0x50
[ 2460.254342][T30410]  __devinet_sysctl_register+0xad/0x2b0
[ 2460.259722][T30410]  devinet_sysctl_register+0x169/0x1e0
[ 2460.265102][T30410]  inetdev_init+0x27a/0x4b0
[ 2460.269441][T30410]  inetdev_event+0x202/0x1090
[ 2460.273955][T30410]  raw_notifier_call_chain+0x9e/0x110
[ 2460.279164][T30410]  call_netdevice_notifiers+0x14e/0x1d0
[ 2460.284544][T30410]  register_netdevice+0x13bb/0x1720
[ 2460.289579][T30410]  veth_newlink+0x90b/0xe60
[ 2460.293920][T30410] page last free stack trace:
[ 2460.298433][T30410]  free_pcp_prepare+0x448/0x450
[ 2460.303119][T30410]  free_unref_page+0x9c/0x370
[ 2460.307645][T30410]  __free_pages+0xd8/0x100
[ 2460.311884][T30410]  __free_slab+0xf0/0x1d0
[ 2460.316050][T30410]  __unfreeze_partials+0x17d/0x1b0
[ 2460.320997][T30410]  put_cpu_partial+0xc4/0x120
[ 2460.325510][T30410]  __slab_free+0x1c0/0x2f0
[ 2460.329764][T30410]  ___cache_free+0x112/0x130
[ 2460.334193][T30410]  qlink_free+0x4d/0x90
[ 2460.338182][T30410]  qlist_free_all+0x4c/0xc0
[ 2460.342524][T30410]  kasan_quarantine_reduce+0x15a/0x180
[ 2460.347817][T30410]  __kasan_slab_alloc+0x2f/0xe0
[ 2460.352502][T30410]  kmem_cache_alloc_trace+0x18a/0x310
[ 2460.357710][T30410]  register_netdevice+0x51f/0x1720
[ 2460.362667][T30410]  veth_newlink+0x90b/0xe60
[ 2460.366996][T30410]  rtnl_newlink+0x1484/0x2060
[ 2460.371512][T30410] 
[ 2460.373702][T30410] Memory state around the buggy address:
00:04:51 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2460.379154][T30410]  ffff888113846b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2460.387050][T30410]  ffff888113846b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2460.394951][T30410] >ffff888113846c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2460.402844][T30410]                                                        ^
[ 2460.409879][T30410]  ffff888113846c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2460.417776][T30410]  ffff888113846d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2460.425674][T30410] ==================================================================
[ 2460.433571][T30410] Disabling lock debugging due to kernel taint
[ 2460.791664][T26277] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 2461.031639][T26277] usb 2-1: Using ep0 maxpacket: 32
[ 2461.092231][T14709] udc-core: couldn't find an available UDC or it's busy
[ 2461.099032][T14709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2461.151698][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2461.331649][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2461.340552][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2461.348480][T26277] usb 2-1: Product: syz
[ 2461.352558][T26277] usb 2-1: Manufacturer: syz
[ 2461.356907][T26277] usb 2-1: SerialNumber: syz
[ 2461.421663][ T3454] cdc_ncm 3-1:1.0: failed to get mac address
[ 2461.441639][ T3454] cdc_ncm 3-1:1.0: bind() failure
[ 2461.461662][ T3454] cdc_ncm: probe of 3-1:1.1 failed with error -71
[ 2461.481634][ T3454] cdc_mbim: probe of 3-1:1.1 failed with error -71
[ 2461.488928][ T3454] usb 3-1: USB disconnect, device number 17
[ 2461.601621][T11820] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2461.607934][T11820] cdc_ncm 1-1:1.0: dwNtbInMaxSize=129 is too small. Using 2048
[ 2461.615324][T11820] cdc_ncm 1-1:1.0: setting rx_max = 2048
[ 2461.814748][T11820] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[ 2461.831604][T11820] usb 1-1: USB disconnect, device number 115
[ 2461.837626][T11820] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[ 2462.184651][ T1067] usb 5-1: USB disconnect, device number 87
00:04:53 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:04:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x8048}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xb}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:53 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:04:53 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xd1, {0xd1, 0x23, "760e77a7e775a5a757626cd1dedcf0cd2cd734c25da4dd5fa0a5f30df85bb4e245fb73fbc585d7029ecb77ee19912fbf3942e759c1669fc1eeeddc9ad19d4a3cedc57de34b9719b1c77c7d8e8f2b9d4810a045db682b48a4711003d21ffb6315c63563840d0443cca47033e2f2d891868a91c2ec6b0aa6a403645666e2ae40f47bc4ad11fc4462be0dcaa0ac33eea7dffb7b51a33c920e950aa612b4e2cd13563393c8711a59615fd1aa8ccbddf0d8eeb9bb7df15ce88e3ccf6adfa078a9b0fea098ea66fc14d82249e523dadaed58"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x30, 0xd, "34cc5ae7af1d25dcda5614a75a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd82, 0x80, 0x200, 0x7, 0x95, 0x3ff, 0x9, 0x2, 0x8, 0x7, 0x800, 0x6}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xc}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x8102}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2462.561704][T26277] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2462.568329][T26277] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2462.575649][T26277] cdc_ncm 2-1:1.0: setting rx_max = 2048
[ 2462.671645][T11820] usb 3-1: new high-speed USB device number 18 using dummy_hcd
00:04:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xd}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2462.720610][T26281] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 2462.771665][T26277] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2462.780229][T26277] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2462.840769][T26277] usb 2-1: USB disconnect, device number 89
[ 2462.856560][T26277] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:04:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x983a}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xe}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2462.911638][T11820] usb 3-1: Using ep0 maxpacket: 32
[ 2463.031814][T11820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:04:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xf}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2463.162806][ T1067] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 2463.221593][T26281] usb 1-1: Using ep0 maxpacket: 32
[ 2463.221657][T11820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2463.235866][T11820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2463.243767][T11820] usb 3-1: Product: syz
[ 2463.247682][T11820] usb 3-1: Manufacturer: syz
[ 2463.255207][T11820] usb 3-1: SerialNumber: syz
00:04:54 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

[ 2463.451683][T26281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2463.601606][T26277] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 2463.631661][ T1067] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2463.651753][T26281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2463.660604][T26281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2463.668475][T26281] usb 1-1: Product: syz
[ 2463.672419][T26281] usb 1-1: Manufacturer: syz
[ 2463.676830][T26281] usb 1-1: SerialNumber: syz
[ 2463.801626][ T1067] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2463.810509][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2463.818512][ T1067] usb 5-1: Product: syz
[ 2463.822610][ T1067] usb 5-1: Manufacturer: syz
[ 2463.827037][ T1067] usb 5-1: SerialNumber: syz
[ 2463.841632][T26277] usb 2-1: Using ep0 maxpacket: 32
[ 2463.961662][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2464.131758][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2464.140637][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2464.148470][T26277] usb 2-1: Product: syz
[ 2464.152490][T26277] usb 2-1: Manufacturer: syz
[ 2464.156875][T26277] usb 2-1: SerialNumber: syz
[ 2464.451608][T11820] cdc_ncm 3-1:1.0: failed to get mac address
[ 2464.471664][T11820] cdc_ncm 3-1:1.0: bind() failure
[ 2464.491597][T11820] cdc_ncm: probe of 3-1:1.1 failed with error -71
[ 2464.511662][T11820] cdc_mbim: probe of 3-1:1.1 failed with error -71
[ 2464.519338][T11820] usb 3-1: USB disconnect, device number 18
[ 2464.731850][T14762] udc-core: couldn't find an available UDC or it's busy
[ 2464.738663][T14762] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2464.991632][ T1067] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2464.997896][ T1067] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2465.005252][ T1067] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2465.031669][T26281] cdc_ncm 1-1:1.0: failed to get mac address
[ 2465.051674][T26281] cdc_ncm 1-1:1.0: bind() failure
[ 2465.071624][T26281] cdc_ncm: probe of 1-1:1.1 failed with error -71
[ 2465.091648][T26281] cdc_mbim: probe of 1-1:1.1 failed with error -71
[ 2465.098727][T26281] usb 1-1: USB disconnect, device number 116
[ 2465.201646][ T1067] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2465.208044][ T1067] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2465.221987][ T1067] usb 5-1: USB disconnect, device number 88
[ 2465.227907][ T1067] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2465.341686][T26277] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2465.348417][T26277] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2465.355881][T26277] cdc_ncm 2-1:1.0: setting rx_max = 2048
00:04:56 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

00:04:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xb700}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x10}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:56 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[ 2465.551661][T26277] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2465.558408][T26277] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2465.578706][T26277] usb 2-1: USB disconnect, device number 90
[ 2465.585723][T26277] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
00:04:57 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xd1, {0xd1, 0x23, "760e77a7e775a5a757626cd1dedcf0cd2cd734c25da4dd5fa0a5f30df85bb4e245fb73fbc585d7029ecb77ee19912fbf3942e759c1669fc1eeeddc9ad19d4a3cedc57de34b9719b1c77c7d8e8f2b9d4810a045db682b48a4711003d21ffb6315c63563840d0443cca47033e2f2d891868a91c2ec6b0aa6a403645666e2ae40f47bc4ad11fc4462be0dcaa0ac33eea7dffb7b51a33c920e950aa612b4e2cd13563393c8711a59615fd1aa8ccbddf0d8eeb9bb7df15ce88e3ccf6adfa078a9b0fea098ea66fc14d82249e523dadaed58"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x30, 0xd, "34cc5ae7af1d25dcda5614a75a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd82, 0x80, 0x200, 0x7, 0x95, 0x3ff, 0x9, 0x2, 0x8, 0x7, 0x800, 0x6}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x11}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xcc0e}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2465.781637][T11820] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 2465.789108][T32621] usb 1-1: new high-speed USB device number 117 using dummy_hcd
00:04:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x12}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xd007}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2465.991659][T30410] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 2466.031717][T32621] usb 1-1: Using ep0 maxpacket: 32
[ 2466.031742][T11820] usb 3-1: Using ep0 maxpacket: 32
00:04:57 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x13}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xe200}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2466.161675][T11820] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2466.172865][T32621] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2466.421686][T30410] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2466.432529][T32621] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2466.441403][T11820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2466.450287][T32621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2466.458071][T11820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2466.465901][T32621] usb 1-1: Product: syz
[ 2466.469851][T11820] usb 3-1: Product: syz
[ 2466.473867][T32621] usb 1-1: Manufacturer: syz
[ 2466.478271][T11820] usb 3-1: Manufacturer: syz
[ 2466.482787][T32621] usb 1-1: SerialNumber: syz
[ 2466.487137][T11820] usb 3-1: SerialNumber: syz
[ 2466.501641][T26277] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 2466.601649][T30410] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2466.610521][T30410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2466.618381][T30410] usb 5-1: Product: syz
[ 2466.622415][T30410] usb 5-1: Manufacturer: syz
[ 2466.626747][T30410] usb 5-1: SerialNumber: syz
[ 2466.741614][T26277] usb 2-1: Using ep0 maxpacket: 32
[ 2466.861652][T26277] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2467.031658][T26277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2467.040529][T26277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2467.048573][T26277] usb 2-1: Product: syz
[ 2467.052724][T26277] usb 2-1: Manufacturer: syz
[ 2467.057143][T26277] usb 2-1: SerialNumber: syz
[ 2467.072960][T14924] udc-core: couldn't find an available UDC or it's busy
[ 2467.079708][T14924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2467.087235][T14924] udc-core: couldn't find an available UDC or it's busy
[ 2467.094071][T14924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2467.101395][T14924] udc-core: couldn't find an available UDC or it's busy
[ 2467.108554][T14924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2467.115996][T14924] udc-core: couldn't find an available UDC or it's busy
[ 2467.122775][T14924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2467.130124][T14924] udc-core: couldn't find an available UDC or it's busy
[ 2467.136917][T14924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 2467.231668][T30410] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2467.237908][T30410] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2467.245312][T30410] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 2467.341672][T30410] cdc_ncm 5-1:1.0: setting tx_max = 184
[ 2467.348164][T30410] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42
[ 2467.651665][T11820] cdc_ncm 3-1:1.0: failed to get mac address
[ 2467.671647][T11820] cdc_ncm 3-1:1.0: bind() failure
[ 2467.691619][T11820] cdc_ncm: probe of 3-1:1.1 failed with error -71
[ 2467.711646][T11820] cdc_mbim: probe of 3-1:1.1 failed with error -71
[ 2467.722532][T11820] usb 3-1: USB disconnect, device number 19
[ 2467.871643][T32621] cdc_ncm 1-1:1.0: failed to get mac address
[ 2467.891622][T32621] cdc_ncm 1-1:1.0: bind() failure
[ 2467.911614][T32621] cdc_ncm: probe of 1-1:1.1 failed with error -71
[ 2467.931634][T32621] cdc_mbim: probe of 1-1:1.1 failed with error -71
[ 2467.938877][T32621] usb 1-1: USB disconnect, device number 117
[ 2468.241667][T26277] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2468.247953][T26277] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2468.255164][T26277] cdc_ncm 2-1:1.0: setting rx_max = 2048
00:04:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x14}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xe803}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:04:59 executing program 2:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:04:59 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x9, 0x7, 0x81, 0x3, 0x9, 0x0, 0x0, 0x7, 0x400, 0x1f, 0xa45}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[ 2468.551616][T26277] cdc_ncm 2-1:1.0: setting tx_max = 184
[ 2468.559360][T26277] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42
[ 2468.575103][T26277] usb 2-1: USB disconnect, device number 91
[ 2468.584831][T26277] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM
[ 2468.611675][T32621] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 2468.622937][T11820] usb 1-1: new high-speed USB device number 118 using dummy_hcd
00:05:00 executing program 4:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ac61b408b4070a0102010000000109022400010000005b090400000219a4b40009050e02001bc4000009058202"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xd1, {0xd1, 0x23, "760e77a7e775a5a757626cd1dedcf0cd2cd734c25da4dd5fa0a5f30df85bb4e245fb73fbc585d7029ecb77ee19912fbf3942e759c1669fc1eeeddc9ad19d4a3cedc57de34b9719b1c77c7d8e8f2b9d4810a045db682b48a4711003d21ffb6315c63563840d0443cca47033e2f2d891868a91c2ec6b0aa6a403645666e2ae40f47bc4ad11fc4462be0dcaa0ac33eea7dffb7b51a33c920e950aa612b4e2cd13563393c8711a59615fd1aa8ccbddf0d8eeb9bb7df15ce88e3ccf6adfa078a9b0fea098ea66fc14d82249e523dadaed58"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x30, 0xd, "34cc5ae7af1d25dcda5614a75a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd82, 0x80, 0x200, 0x7, 0x95, 0x3ff, 0x9, 0x2, 0x8, 0x7, 0x800, 0x6}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:05:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x15}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:05:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xf200}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2468.730815][T26281] usb 5-1: USB disconnect, device number 89
[ 2468.745062][T26281] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM
[ 2468.851589][T32621] usb 3-1: Using ep0 maxpacket: 32
[ 2468.861653][T11820] usb 1-1: Using ep0 maxpacket: 32
00:05:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x16}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:05:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xf401}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2468.971739][T32621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2468.983851][T11820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
00:05:00 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xcd09}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

00:05:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x17}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2469.151686][T32621] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2469.160562][T32621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2469.168480][T11820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2469.192978][T11820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
00:05:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0xff00}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2469.207347][T32621] usb 3-1: Product: syz
[ 2469.207459][T11820] usb 1-1: Product: syz
[ 2469.218890][T32621] usb 3-1: Manufacturer: syz
[ 2469.223515][T32621] usb 3-1: SerialNumber: syz
[ 2469.228023][T11820] usb 1-1: Manufacturer: syz
[ 2469.236453][T11820] usb 1-1: SerialNumber: syz
00:05:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000001700))
sched_setattr(0x0, 0x0, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x1f)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18}, 0x1c)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendto$inet6(r4, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

00:05:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
getpid()
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setparam(0x0, &(0x7f0000000180)=0xe4db)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(0x0, 0x0, &(0x7f0000001700))
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x8}, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6, 0x0, 0x0, 0x20000}, 0x40000110)
sendto$inet6(r0, &(0x7f0000000180)="ef", 0x1, 0x4000001, 0x0, 0x0)

[ 2469.511590][T30410] usb 2-1: new high-speed USB device number 92 using dummy_hcd