64741a31923344fb52d1af7c6b875f69dac2dbbf7a9748e34c26281111706071e8746ddbf7446634f2d5c765a253a286a259aecb148019ec7f8333c30b74aab3a02fe71ad976d0db1c4e114fa2d596e87be16259dd6de773cb33f680c1f823119cc728492"}]}}]}}]}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002e00)={0xa, 0x6, 0x201, 0xff, 0x6d, 0x8, 0xff, 0x2}, 0x16, &(0x7f0000002e40)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0xaad1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x5, 0x8}]}, 0x1, [{0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io(r3, &(0x7f0000003100)={0x2c, &(0x7f0000002f00)={0x40, 0xb, 0xf7, {0xf7, 0x24, "393a5a7a1c73fb14c4c017b60397d743e91a3623c29faf01241529977faa4dbdfbbe340768bda4c5ddd24b86d96c9e94d92dd329304bd6175cdf25ccbaa95dc016ef43e6c01e0e9dcae164dd3753489d0ae0c73ae1b7d3d0000b6c0e09f37560e7b091e78963e362d1418cc3928c9a8ccfcf65083b749a4a9b48012b0fd337650538b612d97ded25cc785ca42adb05714b94b3daa238e93f6c7a99217deb2ed71f78664f57dc56024b878463a9d47f048cc544e8458585b6be2d6ae724163fc39abda698c3094c701a0cb54fdf111361a82fb57c79c7eed5ec549de51fbb7af3136f5cf90003493bbb250fbd556db3e5e19455099a"}}, &(0x7f0000003000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000003040)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x6, 0x9, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3f, 0x81, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "b71fd10a8f77e20c1acaca074ce2db3e"}, @ptm_cap={0x3}]}}, &(0x7f0000003080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x7, 0x3, "a766aa75", "0a186292"}}, &(0x7f00000030c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x1, 0x40, 0x4, 0x3, 0x3}}}, &(0x7f0000003600)={0x84, &(0x7f0000003140)={0x0, 0x3, 0xde, "bf3a649f2169c079f12a34c87311a9921585d2c5edcc9e17aca27f0f26023c4e86f61040418db550a758e273dff43d7c439085fbf4b7ff4efc0fa5e38b7e89e77e3ae2fad73a8b46019213a0344c242d2f5de8c14fe40b7d1f8c4af3c8961ebba66217a62af1419920d6141c31afe57fa5e74b196770cefbf3f1a433f37756daf70da6eb53fd5dd3b778ff0ec639669ad4dc8c07aafb0b4031d2fe095bfd8b3554442dcb2842ac7a80e868cade2847ddebdb6a1a0b180bbaef5bc227dfa06477fb4efda1170f9fd62edc1ffcc4b3facc769739ba10b6b3e3ca284a24fd16"}, &(0x7f0000003240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000003280)={0x0, 0x8, 0x1, 0x2a}, &(0x7f00000032c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000003300)={0x20, 0x0, 0x8, {0x152, 0x8, [0xf00]}}, &(0x7f0000003340)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000003380)={0x40, 0x9, 0x1, 0x3f}, &(0x7f00000033c0)={0x40, 0xb, 0x2, "f844"}, &(0x7f0000003400)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000003440)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000003480)={0x40, 0x17, 0x6}, &(0x7f00000034c0)={0x40, 0x19, 0x2, "efb6"}, &(0x7f0000003500)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000003540)={0x40, 0x1c, 0x1}, &(0x7f0000003580)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000035c0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$uac1(r0, &(0x7f0000001b00)={0x14, &(0x7f0000001900)={0x20, 0x64, 0xbc, {0xbc, 0xc, "3fcafb192605283271cf5f1135ba79f7144c2135c5930ab2ba7ae39e2910f6c313788de0fd3cdd5169d329708d072a52d7f83ee738964450b151e2538b55fb6b6fa4fa4c450c28a5f1df84427002bb8044bfa8b528bc379d4788476f5c789ae150d1fea8997f99f4a5d36e6966123caac0b10d88571b8777c62e86121f346b9416730cb2a10a16f452cfd33e43b27d1216015512f9c5b640b35f4b0c1c45b67383122d5668436a489124d4fd2db38e37a93864a9c575339eb3c1"}}, &(0x7f0000001a00)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "1a24fce60d877c1bf84ed4609d78f05d056e8e0beedea545efad542f9b554c3b381a683011e204fda7dd23be449366baf645cc6689906008741fb41b3ffb113be3f7bfdc2df99b0c9f4b458409c9416e6b5de9c93ab66559b96d717009051539cd860b4b2995b237cfe67de58acf08a02b429823ab776c7969f76292e2aaa9dc39640993441453d0a2f38d9b78a10cadab9be0b9802fc8d150473ff81303adbdc5090a5bb9861697abd621de1f83105c3883f1a85d923f5cb402bf3761a1605b7097acac572d1509df059ce0d057f34a12960c7eca5d6eb3bf"}}}, &(0x7f0000001d80)={0x44, &(0x7f00000036c0)={0x20, 0x7, 0x3e, "5772fdba82f4cc6491293e3326c14bcbb7b53e10f8a4082399b731969c7160cf9572e4f00d15a3d8c5d2b0fb1ffef654be8d85460c5a8fd7f8c5b4e3f1b8"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001c40)={0x20, 0x81, 0x1, 'u'}, &(0x7f0000001c80)={0x20, 0x82, 0x3, "1bf76f"}, &(0x7f0000001cc0)={0x20, 0x83, 0x1, "aa"}, &(0x7f0000001d00)={0x20, 0x84, 0x1, "ec"}, &(0x7f0000001d40)={0x20, 0x85, 0x3, "feb41d"}}) r4 = syz_usb_connect(0x5, 0xa13, &(0x7f0000003740)={{0x12, 0x1, 0x201, 0xdf, 0x61, 0x1d, 0x8, 0x17cc, 0x2305, 0x70b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa01, 0x3, 0x0, 0x6, 0x30, 0x3, [{{0x9, 0x4, 0xef, 0x16, 0x2, 0x31, 0x81, 0xd4, 0x8, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "3a31d6"}, {0x5, 0x24, 0x0, 0xc7c}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x9, 0x28}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6e}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7f, 0x0, 0x4, 0x1, 0x7f}]}], [{{0x9, 0x5, 0x4, 0x8, 0x8, 0x4, 0x3, 0x4, [@generic={0x5b, 0x74bdb1c3a3f0cfbd, "b03229ced44aa38c80a899271ae8dbea0cf1b68dab5e4911c7f8efce43930f0e477829d6b60ca6c2b2fdcc0bac82fac28aef85c611874caab620f04936512c9cc06a566d3e0e8a33dd43217236e3378609144c8690a23163a5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0x4, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7f}]}}]}}, {{0x9, 0x4, 0xf5, 0x2, 0x1, 0xc0, 0xcf, 0x8f, 0x20, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "d2f2"}, {0x5, 0x24, 0x0, 0x12d}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x40, 0x8, 0xa8}, {0x6, 0x24, 0x1a, 0x800, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0x6}, @mdlm_detail={0xc9, 0x24, 0x13, 0x1f, "9bed693756b2f0591601db71878691940154e468c41311cf2499488b004c85cb4051a9acd0f96610850183ced312f8cd9ed87c4dcceba3d73d62e5dfedb748c407037011ab2e2d6eb125946b18deab24356220cee1fd7cb4d6e2644d850a37d771e546b754605df5dbadae9c85639bb450924c5e07b12ca1d4fbbc69990b6068853e1aaff788e7fa75bd1bd95e8a817a6040acdf98b6cc50157244a826ed3193b10010cda3de671382ad5bf53c19c41863d37061b31603c72f6aaa7e4e56487808025e251a"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x7}]}], [{{0x9, 0x5, 0x2, 0x0, 0x410, 0x9, 0x1f, 0x8, [@generic={0x5f, 0x2f, "b791f80e270684828717f2383500c05c2660015af87ed83ce202ef224c663defa3b3a53cf26a3e47dcd24dc6747cfbba265954df08a102f1f2efa4467747937b3826c700c0cba1337b1cad6021f18b23986ec73fef7109e16f364be779"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffc}]}}]}}, {{0x9, 0x4, 0x58, 0x10, 0xc, 0x4f, 0x8a, 0xdf, 0x8, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0x1, 0xb2, "b5", '@'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x1, "c6599ae858883670"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x9, 0xff}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8001, 0x8, 0x7f, "793e7c61d2acc50a"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x20, 0x7, "8682"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x81, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x4, 0x9b}, @generic={0x100, 0x2, "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"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x8, 0x7, 0x4, [@generic={0xa8, 0x8, "79f0c1f29e49298cff9e0cece32f489f5c6d13c1115e3af1ee1a6677d211c6843f68540d9f0db92a4219fcbb85b9ea077144374672caf013387741c2d9dfae1ca82bdf78fa7bc388e507bbb92d638180d124fde0091e07e372a9736902b9f78afa937b1265e59ce3f3ce5cff233c740a1b3ed2a5deac508470092a6584b74b9bd6949712a68f0864b083d967b02d6fcbf1979064228ba8baadb889c9b2b25eb81139a067fe71"}, @generic={0xfa, 0x31, "5b1218092aac493f710a872f8ba5359f8224ca74dd9e0181053460efc5b15a4383d627da9fd28090dc8fe01446ef31cf242f1dbf75b31dbfe54ace9e12441e1db504257e4e6038d1923c5af9411bc6740e641154d99c5be543e8128107c92800526a47a7fd0d751a5959d9102ea726e19f13edd36250715d32c1c193587f0aa13cdadd37c9be01ee706b5847145fb4a75ab3f68cc6e92cd795d321b46c24e0dff77e35f08c7c5819588a425cf57ea790f32886519cac289580c3dc7ce2bb3dfde2fcf2c9ba097eada9c4b58da25967f4e896ec71287f627fee357fc92d8592e71ec80a114431cbde972fbee3d3eb5cdb76a50085890bcce6"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xff, 0x8, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xef, 0x7, 0x1, [@generic={0x8, 0x36, "284c47c74606"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x1, 0x7, 0x9, [@generic={0xf1, 0x11, "71b1e0ffb1a74b832b853ce4e7af81b1684feff5fd9dbfbbc62c6f0eeaee080740b764522cd1bf11a09852e65f706ef6e32bc581a558294f49d8adef2f50959913ae0b62866ede43f4b4cd0381226546d75a1737d8ecdeb148281252fc59da24b89b49539326adc18c06654104c7f4ea8a3fad8e677c36799c004fdd5c47cafd66922ad4c9c54cd92622135f3e7014ec1bcf1abe9de45282e6165be41452ce72baa7eec34d037aca3e38652f5cc412bcfeb85e34f0fd131db22dd9b9e2ac737b8f4c095dead4795c4f9c43be1c042c0e353c85f93d02925011b0594b8bce32d3fc8cc6565acb2896ce81e6496bd181"}, @generic={0x6f, 0x26, "49b7accff84fdcc468e80d5c2e5eb456704b50a98e71c64a7f465dc84aa3f1e90c2ed011a1218132589701d68da17d73fb43e1a49c9ca73a3e53c7dbc999a551a6176c0459451fda7f6857f66fba4c031c23f8ea840b3d24480236c3ff5509de5f5a2e04d84887a23133f210fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xfe, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf000}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x7, 0xa9, 0x2, [@generic={0x53, 0x11, "f9a4dc44b243d4c790bd93db06ca8dbdd77ef7f5081b24f24974e12a8529769c97eed29fbc9252a7c43d89630537b8680e84e1eab8c3591a925c7056f6f0647a3c80e4489dd4a88ba13880a0ccfb6f32bf"}, @generic={0xfd, 0x2, "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"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x8, 0xc0, 0x1, [@generic={0xac, 0xc, "bb231b91ce3d2ccd93775ef0cd49e73021639f75ff9ebd63c288c1fd7fb59eef9ec3f51972dd04ada1444cdda6ebe59a34f4f04b3e7dc69bf092bef137dcb694663121f216f71cabac35386b450072ee7ce972967486e45414b8ec5ba5fb83f73361041a9770ddc073c79311d15d046db841eea172a94bc620c2779bf247308f8a27b75dc6a2627cbf1bdcc171c1642471c3e42298e6cdc4c01da80ce1d1a69f8ebbcae02d6e2ae913b4"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0x9, 0x1, [@generic={0x8b, 0x11, "4cd4de790a487bc952761344d3801701a904aed037a08918896eb76620a3fe141e7c76fa791a35f8b2f07cea24ad4e062598e3b1bbac91c15ad3faddc10db84b3bb70b5fa55887185403f03c1fa1ac5f5d698821ed1f8f6abe644b3129029a10960760058f75c43783be3edf6b2b837729cbc915ef4b3e31b5ded886c24a66ab197525a611346d70b7"}, @generic={0x4a, 0xe, "a5b7b2f5aa50a699a4cb7d365973ab1cd8dfff8d9f18e4a5ecffb6a26ecbc6f5372e8ec3dda53f1866783c8b975f21827ed93238754e80943ad3f9eb88e1aebcb0a937f72231c92c"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x18, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xee6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x20, 0x5, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000004600)={0xa, &(0x7f0000001b40)={0xa, 0x6, 0x201, 0x3a, 0x6, 0xd3, 0xff, 0x2}, 0x59, &(0x7f0000004180)={0x5, 0xf, 0x59, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x3f, 0x9}, @generic={0xf, 0x10, 0x3, "980ce5b657793a3567349144"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x7, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x7ff, 0xf000, 0x84f9, [0xff30, 0x3f00, 0xc0, 0x7f8000, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "fe11ae4eb14a377d122d322951b79776"}]}, 0x8, [{0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x198ca87d0a72c88d}}, {0x4, &(0x7f0000004200)=@lang_id={0x4, 0x3, 0x807}}, {0xd0, &(0x7f0000004240)=@string={0xd0, 0x3, "5f2a62fd3e1c6acaefbd500bb85678cff2f2af673f5b90f5ecf7fe513f0bdba9f7c02b1a438b57ddcf3a1154239af72eda3da633760a6eead12e03e9a040c8a71a78e307142770b1dff46c1b35591968df1cb4289b3a49236e0b4185b546fcb12f93c117c7ddbce46296c70499d56bc82dbc61dd110ca2fd7ca74564645e4aec10d5f3761ae695c49e1966497531ff2caa0a3dabd3c5e934c7e9c7523a5ef818c76ec3d6f1d50a2a5681410330605ac3a40bb520df4ee4e60cb16e90808e251579d3df3397c1930673c114a1d77f"}}, {0xe9, &(0x7f0000004340)=@string={0xe9, 0x3, "412b19071a6703b997431e4bf6b5a276072d5bcb7aa34c22ab9cc47f8bdb11d4918aa90d6f34c911b04ba280a9e6f16a702211f12b4d774d95e47f596f903b42fe5e81d6e531236983a9d97f2c56b0942c4353ddb3bc88a141c0ed320a6906a7f1bbb0b101632e9749c9e2f50fd67e958962a794a1ea0688b51a928cbec59bedcdecbeaae853fa7c7c890e211c6daed9a4117a63071f40bbe80002fdafd7776b26a079e40e3db8524e4b320b4f2c97bcb19d34b008f1875bff0a62ba02af8b446803e422c2db6182ae354954a2647ab20178e0d8b77d7cd383d855399d0fefbb88528bb09fbd40"}}, {0xf6, &(0x7f0000004440)=@string={0xf6, 0x3, "9eba1c47c00f0876a11380cccbbe45c3189a0accd14c1a69fff6244ace17b63645c490285c806c04b8c6a32ac67e3105b35526990d3c59c05c5531cf6107cec6d245be0a6f6979c276a4fcfd495cd1000141c0efb222be2152be35af227ac40f02905354300292cdcc01bfc8dae8b7bae835a4a73b812cf701f2a7d962881c0cb0dd67be05b8a00962fc39e041c47bf233aca64db51e99df385a4548f4e5ddbff7421eeffeea0c092975d7114b8834e086f00f605d41e36d0a59f3163e0d280cdda7a697a385692bd1c2dd77c9a671e6293a2a693ef028a7a29bda1f8b45a04a2a611c286f4b7d2a55d3a2d0ce9de48f62bd8180"}}, {0x17, &(0x7f0000004540)=@string={0x17, 0x3, "29fb2689bd59381e51eacca3b0d3502f4794015408"}}, {0x8, &(0x7f0000004580)=ANY=[@ANYBLOB="0837036606d9a8bb"]}, {0x4, &(0x7f00000045c0)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r4, &(0x7f0000004880)={0x2c, &(0x7f0000004680)={0x20, 0x23, 0x10, {0x10, 0xd, "8de735726f9a65085332edec8d8d"}}, &(0x7f00000046c0)={0x0, 0x3, 0xe8, @string={0xe8, 0x3, "cb1d955de32e2ecb87abb31164372f2196eac9bf8f48c8a75cb1ae6cd9dd602517bb93cfe6b980b55832f7c3c45243e11f6a03965c1c9ae83404795f1d0702b09ed71aae68ddf771a43fc985ff4c9b988bee3c509062ad7997c64b918c67fc9c1a9e10bdd72f8a0b86d192ddd864372e877d60ee5d6ce3ef5a994195f461b40ddda1a38ca095c121c6e29558fffa5a1746ad4e895e361b2d34f175c1938867f500b8c0f2a198bc488da262d5a5d82d09f0fd0af55c092712a8ce1f4d58ab06acd06b5b25415400ba493be272be5b36cd296237c9514d343e844c54a254d513a946fea48a46d2"}}, &(0x7f00000047c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x3, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xc1, 0x0, 0x3}]}}, &(0x7f0000004800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0xd897ef0649b038d6, 0x3f, 0x7, "e94fb876", "0f79fa97"}}, &(0x7f0000004840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe1, 0x18, 0x5, 0x7, 0xff, 0xf91, 0x7fff}}}, &(0x7f0000004d40)={0x84, &(0x7f00000048c0)={0x40, 0xc, 0x92, "51337cf981494135f40da2e867c781dcae63802b39e4af23732a4caf4ae9b184dc25b99896b3c8a0441d740baa387e05b307296898186714323a3c85bc149b4d6ede8b81d0178ed59648b365cf7027dffbf50266339deaba19a7823832f7bb30c99d08ae5f5aae607aef9acb39de74c105bd337d1ef71cfc16fa143bfe4dd4b03c95b2ed746df829b230c967bd3fc3e6003b"}, &(0x7f0000004980)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000049c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000004a00)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000004a40)={0x20, 0x0, 0x4, {0x20, 0x10}}, &(0x7f0000004a80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000004ac0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000004b00)={0x40, 0xb, 0x2, 'P;'}, &(0x7f0000004b40)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000004b80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000004bc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000004c00)={0x40, 0x19, 0x2, '\nx'}, &(0x7f0000004c40)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000004c80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000004cc0)={0x40, 0x1e, 0x1, 0x82}, &(0x7f0000004d00)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io(r2, &(0x7f0000001380)={0x2c, &(0x7f00000010c0)={0x0, 0x31, 0xe0, {0xe0, 0xe, "9afd0b6c7e05d89168a3565b64c6a325441f1df4fd60efce8f42e1216ddb31c0c4c2e574f42ed44b8c52f7eb2fc2529ad59dbc6ff1c2208b6fe463fd6b0c57526f55d03357486097fa6c069ee3f1bf1db8a2d6b430deedbe10174f40cfa84cf99816178e8c4976a9c805e144d2d6737657b82d9dad1e02dcf93f150974ebec5b36348d21e5bd7cf568e5644d35126a1dae2fed9b10a0cef5e60b34158c0a0bb04c347e92f32daeda7d13a336a692b20ea351af6b108e29c00ad0e531041aca1c6d8e830c6589726a8a042fd3438ab47a9821f031753c68df91da9f7cf0f7"}}, &(0x7f00000011c0)={0x0, 0x3, 0xc5, @string={0xc5, 0x3, "278ef513e7190c6a81c59ff30224a17b50ea244d0e63b362dc88d27ead2c3793d419d6d2a96f2a259d68177d90cf7814c2271956ab9151f20d78322bc496c43f8811e0edbd13c9f00a451f23592ad8873e64b968a24d9d08bd58562ad96c9ab7a8cb43005a321176a2b3fbe51f13ce46d789a624699c1ece466f414ce5d793e54f0bd2cf6422a2bf8e532e0be719cba8107f45afaca8bec31d2cb9ba5942986f2a8339c4de06a9c4d238e20f2fdaea3f26dcf3ab8cb81b562a14f1598ec451fc3c4c9f"}}, &(0x7f00000012c0)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x4, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xffff, 0x0, 0x4, [0x7e00]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x5, 0xff07, 0x7, [0xa0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x20, 0x4, 0x1f}]}}, &(0x7f0000001300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1a, 0x0, 0x80, "e7325d2a", "c6fe5958"}}, &(0x7f0000001340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x1f, 0x3, 0x3, 0x8000, 0x2}}}, &(0x7f0000001840)={0x84, &(0x7f00000013c0)={0x0, 0xe, 0x9c, "f3df7e548ff7ff0760eca3c534c36aa730df8f347e84ab1e976e3d8ba6f8bfb93a1bd40f11319b052c1b3a5ea3db49954d8158b02f701586e283c527a14d188ec03dba0a88c69b10d0eddb7339da56d714b3e49da2a0d65feaa6dc1a0e1963f338f94833ecebfb4aa4bded578dd5b14945d415a602f50abeaacda9a93a540abb274f365236925ae49f5dac4779cf94805875e488c0a3af1e744e71d3"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001500)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x40, 0x40}}, &(0x7f0000001580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000015c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001600)={0x40, 0xb, 0x2, ',J'}, &(0x7f0000001640)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000001680)={0x40, 0x13, 0x6, @local}, &(0x7f00000016c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000001700)={0x40, 0x19, 0x2, "62de"}, &(0x7f0000001740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001780)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000017c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001800)={0x40, 0x21, 0x1, 0x80}}) [ 1573.160161][ T5037] usb 6-1: USB disconnect, device number 63 [ 1573.173154][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x350, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x2, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "819e533e9533"}, {0x5, 0x24, 0x0, 0xff00}, {0xd, 0x24, 0xf, 0x1, 0xd785, 0x1, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0xc75d}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x40, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xed, 0x9c, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf7, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0xaa, 0x4, 0x10, 0x81}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0xc, 0xbf, {0xbf, 0x8, "604984dc4200f12b00c77d0b2dad1594a61ba263b95078598e075b38ae8c9f813de3f36cbd98152b8c6f046609fb16837612780ca1e04fcdf6acf1081d08ed60ed6689ffefa7248b6eb804ce7f522058b6ebbafec90f1bd636ae13cb838512a909407f67488c17c3038dceed23726e74655249c20a76f393737a53c5ff928b4ab91b2377dfe8d9ccca377d366bbfaa68bf7b53cb3899458083d096dbad3a39d1852eaa84930701c52f79d539263a429f1eb1b3ac130e5bfc77eb81965c"}}, &(0x7f0000000300)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "2764f9f819f79a5f0410293ca06b21e1b1d14203435695397e22e2a4d649216f562423b2cc9b711f9b8feead8d70910ce52a1a638f7a12ebdf8b12d37118543fcff22f0e709c0fab2679d6cc0ac9562ce1013aa090ff45f6a8515b345805e6129e1cd0c864da037906a3cecf04e24e7fe1837168170f754ab845508bd80a862056d0106cb2a4a1d2d680dd16e9b353b9472b053e5a66361b8c90fb8770e75036d5c11de25b2ee24dfeb55d07a67cfb8192c3d15163cada58fb53320ae42a5e516176adfe2ea8b3b91e94cafe142a9df7b1569710235aaf2f4d8437e0db59b5c7a58078625fc0e4e4c5262eb62b93a193435fc5f8c97de209"}}, &(0x7f0000000400)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "6c6c70fac7d20644b803e8fefba6f110"}, @generic={0x11, 0x10, 0xb, "a3bb03e79364eea6d6af741e19f8"}, @ss_container_id={0x14, 0x10, 0x4, 0xf2, "d9c18b59928473d4fbffeda028e8e0c5"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x61, 0x6, 0x1f, 0x8}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0xefcfec674313142a, 0x1, 0x3, '^f\r\n', "df5315ca"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc4, 0x1, 0x7, 0x9, 0xe8, 0x7, 0x5}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x20, 0xa, 0x8a, "efed4f5ce77df03adebe054e488e5b3cd65e0257fccc2455a4c23c9cb75e019127f6a1febc9c9212b4fecdd65838914570c66e909438956ef8b049ab405f34d420fa8cecddbbcc0ab0f69c51ee3c90491d3eabdb5f00e3751b9805d6444da11a1e1dd0f9c42333ada8df97244e23c262e63027401b30f8efb0d47639e87573b786253563db86bad268be"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf00]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "0389"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xad9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @random="df2dbc814b4f"}, &(0x7f0000000980)={0x40, 0x19, 0x2, "3ef1"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xebd}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f9600026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fcecd4e0649876c6002b90987854f632ecb1ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248670f10007a315728e7794cfdf84e7ebb"]}) (async) syz_usb_connect$uac1(0x3, 0x100, &(0x7f0000000d00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x8, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xcb}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x1, 0x2e, 0x7, 0x3f, 0x4d}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0x0, "04eb"}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x2, 0xff, "899fdb14dd"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x9], 0xc4}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xf000, 0x3, 0x1, "faf4c80e827aadd0a1"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x6, 0x2, "16546575"}, @as_header={0x7, 0x24, 0x1, 0x4c, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0xfd, 0x38, {0x7, 0x25, 0x1, 0x2, 0x4, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x1, 0x3, 0x8, "1aef0bd9341d4aa4"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x19, 0x1, 0x7f, 0x3}, @as_header={0x7, 0x24, 0x1, 0x40, 0x2, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xdb, 0x4, 0x1, 0x20, "", "7d90c5"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x1f, 0x2, '\b', "4f28e4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x1f, 0x80, {0x7, 0x25, 0x1, 0x1, 0x6, 0x7}}}}}}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x1, 0x81, 0xa2, 0xc956e26ea73f0646, 0x80}, 0xe8, &(0x7f0000000e00)={0x5, 0xf, 0xe8, 0x3, [@generic={0xd6, 0x10, 0xb, "73e0097aaa9673aedf7eab8e4d04934b69db9ab5e525ca3240af90b1030818213bf524bf1e444564218d3aecf803278d58481a227487e38bce01baeacc38363dbc9635ebb0975fbd036db4aa4e7ad599f29c78c44a0ce719b01cf48ae325897dff23d18415a7d9648c4ccc94505cd0cc5b1d4aae3b59087b34c7e301dd17b7ba9b50d300e84fb71cce652170801f6a1de38dcd4439ae2823b147276914c458f0c539ce0111b5c56c266887d2c519eb5b513e3aa6a2923fb590d8c8c05ff006554edb090523623fd15d5a25bada427957a1f177"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x7f, 0xfffd}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x41c}}, {0xa9, &(0x7f0000000f00)=@string={0xa9, 0x3, "b40b99bb0eee10c2b271c5c6bc4624a7a3cc4fb18ff2f6046f72a4f5298c4e4daa22bbbb8aab9a5cccdac210ed9e5b5eced11e6c87b07180c3cfe2c53e51a12cd1766654bf1bc1951bfeb70ad2b3089316732cedec6b619ea2de2a8d05bee67affa8c3d240c82e7e6b7452027ef24da753ee53339c4ab1a0eba0f83de280967fe5d8312a50678fa7f0b7bcb2c0ae54b8fb387fd1a9a629081d33f36d5d81c06152f502766f54c2"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x344a}}]}) (async) syz_usb_connect(0x1, 0xff5, &(0x7f0000001e00)={{0x12, 0x1, 0x50, 0xc6, 0x27, 0x29, 0x8, 0x8d1, 0x3, 0xc626, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe3, 0x4, 0x80, 0xf6, 0x0, 0x9, [{{0x9, 0x4, 0x97, 0x20, 0xc, 0x9e, 0xd2, 0xdc, 0xa5, [@generic={0xdf, 0x8, "2ece7da5d1122a3f214d90c85126b9c007307ad36fb010d2a59a7091c5872b2fc469cbb33268d594e5ee7165ba31e8ef6b25535fbab69158c3d78614a59fb4ea4a9221132d8ff15e84f6e9f4ba8602f15044ff737a1031cf5acb64ab5b127e610b1a5f4478e2a325c97c570d3912761f35d74459e92407d29f016bb3e0541a4b9e41550bdbb53903b212d4f00d55387331a19ce93d3481b874b87d33c6f6eff49cd6393ce5e2f3e8c3bd1f0c46d7b5619a99fb7b6e0fc6598bd6e3b48898b3115684701b3ddb91f4f9ab24fdbaa4c7e2ce1a478839fbbfc29df8f9e17c"}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x7f}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x4, 0xf1, 0x8, 0x0, 0xe3}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x4, 0x4, [0x3, 0x2, 0x1, 0x3], 0x1}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0xfffe, 0xf6, "8f629a2719ae"}, @output_terminal={0x9, 0x24, 0x3, 0x80, 0x303, 0x1, 0x2, 0x7}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0x9, "cc"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x4, 0x4, 0x9}]}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x20, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xfff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x19, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x2}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x0, 0x3, 0x4, [@generic={0xd1, 0x8, "0236c5956b9d21f948760cf87563e0bb859c6c53ef3411e9073d5e2ad22ceda1da4a0e49cf1fa839b2b974e9c3433f68fbc55d6cca88dc0c814e66a9b6235aca9772793cd34458b445e295699ffe3f58ad829a49d73745ec4f335198e8d6cacec21fa612777a064d76a71dcf0f656a16747322307db955d07d61adbe19fd44bc15e191853f5b25da383246f1e698136f2194ebc4652e129e5d547bed53bdf3c0ec69647e548b7a2c7339dee0256fe1481d7e23632b016269b0aee52de28adcbeba10eabfc524c2f9a1f1eaf1d4bc0e"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x81, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x83, 0x800}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x7f, 0x4, 0x4, [@generic={0xc3, 0x7, "ca82777d93d6f3528e7f3f625e60728bbb618f9ff0c630f734c91bbdd0f7fbeb102eb1a5de95ebc00284e418a223138748572bdc71f9fc5446783f09baeb4b53d3a94b734f91bc7344e0ccecbf93c2b064afa9ebabe84f77b843a3b9266caf90404c77942ad8a65b0f01b15be481990cbf5efd81c7f136112a6d353677b883cfd778f0776e5c30914a8571b2fdfa3a09ea23f18e7f0392f6eea52f8d945b414d6e0a389ccd74bf7714ec63da56691eeb12fd425815c5c31cdb914d91e273fe4dbc"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x4, 0x2, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x61, 0x40}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x10, 0x3, 0xfa, [@generic={0x98, 0x10, "bd3f94ae74056727b6d32fe02b99d9f948e0cd0f773f66fb67070819f58b8015874db610f126547043e6d52c9baae5c2c17d26dec4d102f7f914130cd4a49f97009c7b41e1a958a7363d25a7f552252d762dd6079b52438239952ec45c24d471e92b0a5ec7c47859c070600c678d17bac77c6ad5d9cd3ed5bdaa663f717b36f5eb32fd24afcbb4459e00b025a48d71a73cd5c5b53112"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0xb8, 0x1f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x2, 0x3, 0x7, [@generic={0x16, 0x0, "15cec45e4752a37bc76b13b7d547ff0496dc1ce3"}]}}, {{0x9, 0x5, 0xcfdfce5af2e97bd2, 0x1, 0x0, 0x80, 0x9, 0x6, [@generic={0x58, 0x10, "86d27940d182c4010af767f5157e416b3ee9469e9bec4715bb4a9c94a4fa09e7711a45e3e2a0bb0da3f35be506329d45d7af070c24e8a16ead18ed3027e900bcd7a09166bd16d77d1c31be4ed8e17d0964c0386c6d06"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0x20, 0x0, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x100}]}}]}}, {{0x9, 0x4, 0xdb, 0x6, 0x1, 0xff, 0xff, 0xff, 0x3c, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "e0142120"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x800, 0x5, 0x1}, [@mdlm_detail={0xcb, 0x24, 0x13, 0x20, "45b632abdf9c1296bc7e0c9c028b2a6b9bf0ccfef5b82dca2dcb4b76a0e7c1c65369106626dda50a1458f05f2267bf69b32be925488a5ce2839ac96be835d7129c64cf8e44e4ac668af7e40481574d4a75d582a9e93068603a1d53e749aec375243ba25cdb80f689c0b2c34b772aea120bf43f2cc26eca84e259574c0d3ab63a62301d93729fb15fd46d5e740ebf2d57828653283a3cb641ee34b547edf489de095fcf6d09825781dbb3ceba763b1e6ef3c23f61cf108ff789abb14633119f10510edae130ec32"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x6f, 0x4, 0x6, [@generic={0xe9, 0x22, "e1c447c4f39b3d4dd5f6b8363f98e21c571f126ce691d86a1946c8494078561896a79539c713aa69f421e4bfd4c29ac8d14e0dcb1c81ac09aea7335e0a0f91b1a32784de7d08b01df4509a940d70c1a49b10ffb2de07908dcab4696b1785cc5becc3e1e459edf034a1eb6c647f6f9e2b80fc6d0544ec49c9beb7f4c6a88cc1cfafb4c27a4a6b3aa6f2b79cd95a1bef2bcbced148d07bc18a02227b3c5a8132df6e76d16f20b5e1294f8a717f21f1bdb9c82245ffd1c357d6ec3c47ada8e34a348858337324a7fbbcb51f3da11d7057c8c45dac39b4d6a5e01cddb382536eb1e3e378e84e175d33"}]}}]}}, {{0x9, 0x4, 0xaf, 0xf7, 0x6, 0x69, 0x17, 0x6a, 0x40, [@generic={0x60, 0x3, "bbe2d7d3cedb767db3787c0798164ef96ec75a65e5d7de3d77d5312d1f644c36c5f70b4c4cd4de96ba3d806dd1e9cf8404fa01e9fe2e82a115b42bc808c47be6a39702dbe782932a8322efa63f70bdefa6d2c48cad748d08e11ff97ccf9d"}], [{{0x9, 0x5, 0xa, 0x4, 0x20, 0x80, 0xc1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xcb, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd2, 0xfff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0x2, 0x4b, [@generic={0xac, 0x8, "fe6eb77a90b8a27d8f6816b75e770210c9df87840927af6bb6dc2eabe48735cffde34ce5086fa9e5c858a8163f0c876428b6cb169269d7961b9e5bafc0c6a66fae5954e21e0012e9d3b87edd05abead63b3c699ddfb512a5a5e5f72ef6065860e07000c90fd06b1a888049b2dbded8d82fbb687f578fc41d8be8b077ce7924a251028fb8d55111b9370b3a44f58df1b57356eb7d54dceec476858aa21b98e6b54a8d3123a4a7883b4ef8"}, @generic={0xf8, 0x2, "22f3f01522923e168c04476abe7fcb1c84a27fd9def52ae25cc524e5107b60706a1432773a7e1bb2a71f1d2af9fc1b450e8ccb7947a4c618c3e96df78ed9840318430c879ec4f74033ef7e068aca23bc170e892935f009d300605f4030d4b4205f753358dbe87d602b6e8e4bb449be72c2d1b89280e3dfda84296799a672711a53a4adcccd561f7d2f4df75ce93ae67b247dfa76e1c0e533fb8e72436540baca75fec66e38f87937efbba45f33dc290afea358c18de574805b75e26e8260f8f7bffa37d72bd0005f5f862ab01005f894089e454e9b116960c746310bf992743bd213bcd052fbb8658ddb59aab9babd37d1d121ecdfca"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x1, 0xed, 0x2, [@generic={0xae, 0x23, "e322737f972dd83f0da3d7221cc46ef495f59992a443fc76b5e922a38711c3925e9e177b1ead3912ed82eac3baaa73944af28f508bb64e92559f12d6496bfad3f993658ec9f9e004299d6fbf5eddc344866d3c20d02a2656b3446f48a452b498af95a051cb896f8d649ade4e3a8da188ffa3444f70c5fb0f74a17b3d0e4c7032b546434bcfc326df3c1810940b6468ed34d57864ae714506b669ebc8618fef4d33a670fdbcb08e07cb082d43"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x7f, 0x2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x401}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x4e, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x76f49fc4d0daa672, 0x0, 0xfeff}]}}]}}, {{0x9, 0x4, 0x81, 0x1f, 0xb, 0x4d, 0xe3, 0xff, 0xc4, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x1, 0x8, 0x1f, "b71330ab4d9c60"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x66, 0xce, "153a07"}]}], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x9, 0x7, 0x5, [@generic={0xcc, 0xa, "1a670cc5c72d64a92d840ee6785f925269288dfd7d99e7f02e6f7f8246994beb0d1e46cb92d9a48ab09a97e98a953838dc7059f56efb7cecfbb4e040a511e9dccae9ab5282cb7318357362c7e45f4cc7325da3f1e7f2ba20a9fef4cb2e73141906040c19087e3de09761bcf1bd321d069254f5b8a01116546884f2f58eb0856e8121d4a788545f9b3900543ba17ee31a1574bc32630d3b416945ba61e23d326e589041c5da1db3d14a1e54719b56258ca6fd4200b6831a2bff852a074239dd9ce22f67c05464b037aa5d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xfb, 0x4, 0x3f, [@generic={0xce, 0xa, "771435839ecdda60e9ebfb4d793168f82a504b3569857a57ab649abdcedaf6bbdd25ad133a38bcb8df0de6e17799269ac0cecb361ef3fa7696a65d2b11754629e18caab43ec8bcbedac07cbe217ee82f5298875744d8c7a7b8687e4d4b1429c24cf1258e62b7dd5a8cfc9636a157dba82f4c1620bcbd24dc3e855b9fef102f3bca954a52264f0f2c2f8dfdab953b1e45315cb560cf0787021e454f703709ce4bb74fb9a78e3037911a6ce816cfb71efcb750815abc1dce40a3af63d1e81922d873a30605f40a1555cf8cf19f"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x20, 0x31, 0x80, [@generic={0x36, 0xe, "3c2e013baea67a7a2b2bd28fc5eebe12cbfeb629dfc4d6d8fad5834fb952ec96cf7828fd49c904e013d2239b127ae21e0616b596"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xf290}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x5, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x51d8}]}}, {{0x9, 0x5, 0x6, 0x980b1fd355e97c8c, 0x3ef, 0x81, 0x5a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @generic={0xdf, 0x5, "2fd5bb2a15bfcebe3a537e8b3160e280d77b6e189014b51c595d8e084b5d3c770ed2bf7eea0d0385f862760e0ce4af02e276391639cb816d00f215cd7f851b38074718fa222bbbbde80f5b8372d705cb0621296dd2464908e9115029bd6b18a272ba293c44a31d0324402dfcb5a64d7f309072e2d3d3ef3e0cace7a3678b45221acbf49221ff20c27b5661a082d1d707031a6cd9b7d3d25d38bc67e79fdd46e6583f62699d9a5463b79f05b98f8cd7421f2f341045404f30717bc9083a28ee95ea96701adb6dddc5453a49066ac3b40e7b474935f040f844aea5e3ef62"}]}}, {{0x9, 0x5, 0x273f9ef4b8d53cd6, 0x8, 0x8, 0x1f, 0x80, 0x3, [@generic={0xd0, 0x31, "f37e81540a7eeb772be08b7c5e30bc108dffd19107b639addb66db6b6989bd954808d1b22c18f0da9f6dd38d806494545b55e70cb0c2f166f3720f9e3883303a689beaef2644d04ba38577dab74ffe33d6a8eee528f99c11d94b3d12fe671fb5af0a6a401cfdaeec6a004679de11702ed46faf448a97da550592780f1fca89816d2334aad42744302a15e5ffa9579c4f284b52332fedfc9fa592e428367290c663b31ee02dc3b222ef87ea3330c702025890b856f252cf23c0236e3787305f0c6db26feebfd99ecac3c382bc15d0"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0x6}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7f, 0x20, 0xe9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x81}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0x1f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xfff8}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x1d, 0x4, 0x80, [@generic={0x5, 0x10, "ebe7fd"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x8, 0x1, 0x8, [@generic={0xf4, 0xa, "602d7da950d8c148c8d525a213ff2f1a1e2b98ea518fcc3be251fa9dea863ed91db552e9f88659f09755232ed79cd16993dcc73fd487ecc6126443f5883e7d517a192cfc3fbcf889305caac5e15a7c87a867506454b042861407f35a5bb2b5e7805a6c3144ce50e878ff1b32a6e19530dbc47d1a79572bf59377a5c35f0d329edc4c0ae024f39400c1505ad0ae70c926863cbc75e6e9a6f07f288564be4c93e0d9898ed4f79bbad53e97c88470a5de1efb15530f5ee7e888208cee6516a1610f245e9cfc86c3d94555f0758829c37d780c844178aac5e302e86e06c418e611caef5527b3aa879551c0931aecf562c2b44459"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3, 0x6, 0x80, [@generic={0x68, 0x5, "e0a22a2b358c0e4ee5a8ad050e863aa163278125b3cf86e730b9047b354aba88dd94f5c8c1bcc508dc23a22bf3f3681a89c586337d7371ae197d1c858df712ebdcff7f6ae84f9104b70873bd16c49e015fb2d2b71ede6ecbb7977bec8819f8cc54d3055acc53"}, @generic={0xd6, 0x10, "07269ceeab80891182923c4cb584b97eefe06545e284dbba4f283cc1a2d7ccd68d93086ca672d46a82e7e348184ea997ca84013145656bfb9db438f19a7f313585fc1808fe2c08bb9ecf691aefd02b17f5b23c069479500f9c85e23a1a3a6f39185625e9ffae2b532dde2fcfce4118764741a31923344fb52d1af7c6b875f69dac2dbbf7a9748e34c26281111706071e8746ddbf7446634f2d5c765a253a286a259aecb148019ec7f8333c30b74aab3a02fe71ad976d0db1c4e114fa2d596e87be16259dd6de773cb33f680c1f823119cc728492"}]}}]}}]}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002e00)={0xa, 0x6, 0x201, 0xff, 0x6d, 0x8, 0xff, 0x2}, 0x16, &(0x7f0000002e40)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0xaad1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x5, 0x8}]}, 0x1, [{0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x427}}]}) (async) syz_usb_control_io(r3, &(0x7f0000003100)={0x2c, &(0x7f0000002f00)={0x40, 0xb, 0xf7, {0xf7, 0x24, "393a5a7a1c73fb14c4c017b60397d743e91a3623c29faf01241529977faa4dbdfbbe340768bda4c5ddd24b86d96c9e94d92dd329304bd6175cdf25ccbaa95dc016ef43e6c01e0e9dcae164dd3753489d0ae0c73ae1b7d3d0000b6c0e09f37560e7b091e78963e362d1418cc3928c9a8ccfcf65083b749a4a9b48012b0fd337650538b612d97ded25cc785ca42adb05714b94b3daa238e93f6c7a99217deb2ed71f78664f57dc56024b878463a9d47f048cc544e8458585b6be2d6ae724163fc39abda698c3094c701a0cb54fdf111361a82fb57c79c7eed5ec549de51fbb7af3136f5cf90003493bbb250fbd556db3e5e19455099a"}}, &(0x7f0000003000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000003040)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x6, 0x9, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3f, 0x81, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "b71fd10a8f77e20c1acaca074ce2db3e"}, @ptm_cap={0x3}]}}, &(0x7f0000003080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x7, 0x3, "a766aa75", "0a186292"}}, &(0x7f00000030c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x1, 0x40, 0x4, 0x3, 0x3}}}, &(0x7f0000003600)={0x84, &(0x7f0000003140)={0x0, 0x3, 0xde, "bf3a649f2169c079f12a34c87311a9921585d2c5edcc9e17aca27f0f26023c4e86f61040418db550a758e273dff43d7c439085fbf4b7ff4efc0fa5e38b7e89e77e3ae2fad73a8b46019213a0344c242d2f5de8c14fe40b7d1f8c4af3c8961ebba66217a62af1419920d6141c31afe57fa5e74b196770cefbf3f1a433f37756daf70da6eb53fd5dd3b778ff0ec639669ad4dc8c07aafb0b4031d2fe095bfd8b3554442dcb2842ac7a80e868cade2847ddebdb6a1a0b180bbaef5bc227dfa06477fb4efda1170f9fd62edc1ffcc4b3facc769739ba10b6b3e3ca284a24fd16"}, &(0x7f0000003240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000003280)={0x0, 0x8, 0x1, 0x2a}, &(0x7f00000032c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000003300)={0x20, 0x0, 0x8, {0x152, 0x8, [0xf00]}}, &(0x7f0000003340)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000003380)={0x40, 0x9, 0x1, 0x3f}, &(0x7f00000033c0)={0x40, 0xb, 0x2, "f844"}, &(0x7f0000003400)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000003440)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000003480)={0x40, 0x17, 0x6}, &(0x7f00000034c0)={0x40, 0x19, 0x2, "efb6"}, &(0x7f0000003500)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000003540)={0x40, 0x1c, 0x1}, &(0x7f0000003580)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000035c0)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io$uac1(r0, &(0x7f0000001b00)={0x14, &(0x7f0000001900)={0x20, 0x64, 0xbc, {0xbc, 0xc, "3fcafb192605283271cf5f1135ba79f7144c2135c5930ab2ba7ae39e2910f6c313788de0fd3cdd5169d329708d072a52d7f83ee738964450b151e2538b55fb6b6fa4fa4c450c28a5f1df84427002bb8044bfa8b528bc379d4788476f5c789ae150d1fea8997f99f4a5d36e6966123caac0b10d88571b8777c62e86121f346b9416730cb2a10a16f452cfd33e43b27d1216015512f9c5b640b35f4b0c1c45b67383122d5668436a489124d4fd2db38e37a93864a9c575339eb3c1"}}, &(0x7f0000001a00)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "1a24fce60d877c1bf84ed4609d78f05d056e8e0beedea545efad542f9b554c3b381a683011e204fda7dd23be449366baf645cc6689906008741fb41b3ffb113be3f7bfdc2df99b0c9f4b458409c9416e6b5de9c93ab66559b96d717009051539cd860b4b2995b237cfe67de58acf08a02b429823ab776c7969f76292e2aaa9dc39640993441453d0a2f38d9b78a10cadab9be0b9802fc8d150473ff81303adbdc5090a5bb9861697abd621de1f83105c3883f1a85d923f5cb402bf3761a1605b7097acac572d1509df059ce0d057f34a12960c7eca5d6eb3bf"}}}, &(0x7f0000001d80)={0x44, &(0x7f00000036c0)={0x20, 0x7, 0x3e, "5772fdba82f4cc6491293e3326c14bcbb7b53e10f8a4082399b731969c7160cf9572e4f00d15a3d8c5d2b0fb1ffef654be8d85460c5a8fd7f8c5b4e3f1b8"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001c40)={0x20, 0x81, 0x1, 'u'}, &(0x7f0000001c80)={0x20, 0x82, 0x3, "1bf76f"}, &(0x7f0000001cc0)={0x20, 0x83, 0x1, "aa"}, &(0x7f0000001d00)={0x20, 0x84, 0x1, "ec"}, &(0x7f0000001d40)={0x20, 0x85, 0x3, "feb41d"}}) (async) syz_usb_connect(0x5, 0xa13, &(0x7f0000003740)={{0x12, 0x1, 0x201, 0xdf, 0x61, 0x1d, 0x8, 0x17cc, 0x2305, 0x70b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa01, 0x3, 0x0, 0x6, 0x30, 0x3, [{{0x9, 0x4, 0xef, 0x16, 0x2, 0x31, 0x81, 0xd4, 0x8, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "3a31d6"}, {0x5, 0x24, 0x0, 0xc7c}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x9, 0x28}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6e}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7f, 0x0, 0x4, 0x1, 0x7f}]}], [{{0x9, 0x5, 0x4, 0x8, 0x8, 0x4, 0x3, 0x4, [@generic={0x5b, 0x74bdb1c3a3f0cfbd, "b03229ced44aa38c80a899271ae8dbea0cf1b68dab5e4911c7f8efce43930f0e477829d6b60ca6c2b2fdcc0bac82fac28aef85c611874caab620f04936512c9cc06a566d3e0e8a33dd43217236e3378609144c8690a23163a5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x80, 0x4, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7f}]}}]}}, {{0x9, 0x4, 0xf5, 0x2, 0x1, 0xc0, 0xcf, 0x8f, 0x20, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "d2f2"}, {0x5, 0x24, 0x0, 0x12d}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x40, 0x8, 0xa8}, {0x6, 0x24, 0x1a, 0x800, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0x6}, @mdlm_detail={0xc9, 0x24, 0x13, 0x1f, "9bed693756b2f0591601db71878691940154e468c41311cf2499488b004c85cb4051a9acd0f96610850183ced312f8cd9ed87c4dcceba3d73d62e5dfedb748c407037011ab2e2d6eb125946b18deab24356220cee1fd7cb4d6e2644d850a37d771e546b754605df5dbadae9c85639bb450924c5e07b12ca1d4fbbc69990b6068853e1aaff788e7fa75bd1bd95e8a817a6040acdf98b6cc50157244a826ed3193b10010cda3de671382ad5bf53c19c41863d37061b31603c72f6aaa7e4e56487808025e251a"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x7}]}], [{{0x9, 0x5, 0x2, 0x0, 0x410, 0x9, 0x1f, 0x8, [@generic={0x5f, 0x2f, "b791f80e270684828717f2383500c05c2660015af87ed83ce202ef224c663defa3b3a53cf26a3e47dcd24dc6747cfbba265954df08a102f1f2efa4467747937b3826c700c0cba1337b1cad6021f18b23986ec73fef7109e16f364be779"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffc}]}}]}}, {{0x9, 0x4, 0x58, 0x10, 0xc, 0x4f, 0x8a, 0xdf, 0x8, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0x1, 0xb2, "b5", '@'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x1, "c6599ae858883670"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x9, 0xff}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8001, 0x8, 0x7f, "793e7c61d2acc50a"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x20, 0x7, "8682"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x81, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x4, 0x9b}, @generic={0x100, 0x2, "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"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x8, 0x7, 0x4, [@generic={0xa8, 0x8, "79f0c1f29e49298cff9e0cece32f489f5c6d13c1115e3af1ee1a6677d211c6843f68540d9f0db92a4219fcbb85b9ea077144374672caf013387741c2d9dfae1ca82bdf78fa7bc388e507bbb92d638180d124fde0091e07e372a9736902b9f78afa937b1265e59ce3f3ce5cff233c740a1b3ed2a5deac508470092a6584b74b9bd6949712a68f0864b083d967b02d6fcbf1979064228ba8baadb889c9b2b25eb81139a067fe71"}, @generic={0xfa, 0x31, "5b1218092aac493f710a872f8ba5359f8224ca74dd9e0181053460efc5b15a4383d627da9fd28090dc8fe01446ef31cf242f1dbf75b31dbfe54ace9e12441e1db504257e4e6038d1923c5af9411bc6740e641154d99c5be543e8128107c92800526a47a7fd0d751a5959d9102ea726e19f13edd36250715d32c1c193587f0aa13cdadd37c9be01ee706b5847145fb4a75ab3f68cc6e92cd795d321b46c24e0dff77e35f08c7c5819588a425cf57ea790f32886519cac289580c3dc7ce2bb3dfde2fcf2c9ba097eada9c4b58da25967f4e896ec71287f627fee357fc92d8592e71ec80a114431cbde972fbee3d3eb5cdb76a50085890bcce6"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xff, 0x8, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xef, 0x7, 0x1, [@generic={0x8, 0x36, "284c47c74606"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x1, 0x7, 0x9, [@generic={0xf1, 0x11, "71b1e0ffb1a74b832b853ce4e7af81b1684feff5fd9dbfbbc62c6f0eeaee080740b764522cd1bf11a09852e65f706ef6e32bc581a558294f49d8adef2f50959913ae0b62866ede43f4b4cd0381226546d75a1737d8ecdeb148281252fc59da24b89b49539326adc18c06654104c7f4ea8a3fad8e677c36799c004fdd5c47cafd66922ad4c9c54cd92622135f3e7014ec1bcf1abe9de45282e6165be41452ce72baa7eec34d037aca3e38652f5cc412bcfeb85e34f0fd131db22dd9b9e2ac737b8f4c095dead4795c4f9c43be1c042c0e353c85f93d02925011b0594b8bce32d3fc8cc6565acb2896ce81e6496bd181"}, @generic={0x6f, 0x26, "49b7accff84fdcc468e80d5c2e5eb456704b50a98e71c64a7f465dc84aa3f1e90c2ed011a1218132589701d68da17d73fb43e1a49c9ca73a3e53c7dbc999a551a6176c0459451fda7f6857f66fba4c031c23f8ea840b3d24480236c3ff5509de5f5a2e04d84887a23133f210fd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xfe, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf000}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x7, 0xa9, 0x2, [@generic={0x53, 0x11, "f9a4dc44b243d4c790bd93db06ca8dbdd77ef7f5081b24f24974e12a8529769c97eed29fbc9252a7c43d89630537b8680e84e1eab8c3591a925c7056f6f0647a3c80e4489dd4a88ba13880a0ccfb6f32bf"}, @generic={0xfd, 0x2, "a48f2a038ecdf2a1ed64e787960cd8de1294aaca84bde570cb2dbbffe33cb96010c27ef3cd462562ecfa1f7f0cb95b0dfa275872379fb1e5c67bb2385444cd2e2f9bab2c63fe5e43f92204a533c0939b7cac15b5f1ae1a75e935e26167a118c077102a0ed155b06104ba1cee9f089c56257c913b71ba02a68d59adb412234cec515f969b58fe729a287ee658ec649729e0988fb22ffc204d2ab8bdcb16902a547a29675e14945bcfe5cf9cc965cfe2a99c9da30333a25c41c4e315a9e19f98d94cbb4b393bbb8bd0f53024cec2fed165c5032d33e2144b16f43d6fe37aae56d4d273c5e9ff74bbfb5f959144034e274d6559fc1c4c4a2fa3d34f66"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x8, 0xc0, 0x1, [@generic={0xac, 0xc, "bb231b91ce3d2ccd93775ef0cd49e73021639f75ff9ebd63c288c1fd7fb59eef9ec3f51972dd04ada1444cdda6ebe59a34f4f04b3e7dc69bf092bef137dcb694663121f216f71cabac35386b450072ee7ce972967486e45414b8ec5ba5fb83f73361041a9770ddc073c79311d15d046db841eea172a94bc620c2779bf247308f8a27b75dc6a2627cbf1bdcc171c1642471c3e42298e6cdc4c01da80ce1d1a69f8ebbcae02d6e2ae913b4"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0x9, 0x1, [@generic={0x8b, 0x11, "4cd4de790a487bc952761344d3801701a904aed037a08918896eb76620a3fe141e7c76fa791a35f8b2f07cea24ad4e062598e3b1bbac91c15ad3faddc10db84b3bb70b5fa55887185403f03c1fa1ac5f5d698821ed1f8f6abe644b3129029a10960760058f75c43783be3edf6b2b837729cbc915ef4b3e31b5ded886c24a66ab197525a611346d70b7"}, @generic={0x4a, 0xe, "a5b7b2f5aa50a699a4cb7d365973ab1cd8dfff8d9f18e4a5ecffb6a26ecbc6f5372e8ec3dda53f1866783c8b975f21827ed93238754e80943ad3f9eb88e1aebcb0a937f72231c92c"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x18, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xee6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x20, 0x5, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000004600)={0xa, &(0x7f0000001b40)={0xa, 0x6, 0x201, 0x3a, 0x6, 0xd3, 0xff, 0x2}, 0x59, &(0x7f0000004180)={0x5, 0xf, 0x59, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x3f, 0x9}, @generic={0xf, 0x10, 0x3, "980ce5b657793a3567349144"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x7, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x7ff, 0xf000, 0x84f9, [0xff30, 0x3f00, 0xc0, 0x7f8000, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "fe11ae4eb14a377d122d322951b79776"}]}, 0x8, [{0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x198ca87d0a72c88d}}, {0x4, &(0x7f0000004200)=@lang_id={0x4, 0x3, 0x807}}, {0xd0, &(0x7f0000004240)=@string={0xd0, 0x3, "5f2a62fd3e1c6acaefbd500bb85678cff2f2af673f5b90f5ecf7fe513f0bdba9f7c02b1a438b57ddcf3a1154239af72eda3da633760a6eead12e03e9a040c8a71a78e307142770b1dff46c1b35591968df1cb4289b3a49236e0b4185b546fcb12f93c117c7ddbce46296c70499d56bc82dbc61dd110ca2fd7ca74564645e4aec10d5f3761ae695c49e1966497531ff2caa0a3dabd3c5e934c7e9c7523a5ef818c76ec3d6f1d50a2a5681410330605ac3a40bb520df4ee4e60cb16e90808e251579d3df3397c1930673c114a1d77f"}}, {0xe9, &(0x7f0000004340)=@string={0xe9, 0x3, "412b19071a6703b997431e4bf6b5a276072d5bcb7aa34c22ab9cc47f8bdb11d4918aa90d6f34c911b04ba280a9e6f16a702211f12b4d774d95e47f596f903b42fe5e81d6e531236983a9d97f2c56b0942c4353ddb3bc88a141c0ed320a6906a7f1bbb0b101632e9749c9e2f50fd67e958962a794a1ea0688b51a928cbec59bedcdecbeaae853fa7c7c890e211c6daed9a4117a63071f40bbe80002fdafd7776b26a079e40e3db8524e4b320b4f2c97bcb19d34b008f1875bff0a62ba02af8b446803e422c2db6182ae354954a2647ab20178e0d8b77d7cd383d855399d0fefbb88528bb09fbd40"}}, {0xf6, &(0x7f0000004440)=@string={0xf6, 0x3, "9eba1c47c00f0876a11380cccbbe45c3189a0accd14c1a69fff6244ace17b63645c490285c806c04b8c6a32ac67e3105b35526990d3c59c05c5531cf6107cec6d245be0a6f6979c276a4fcfd495cd1000141c0efb222be2152be35af227ac40f02905354300292cdcc01bfc8dae8b7bae835a4a73b812cf701f2a7d962881c0cb0dd67be05b8a00962fc39e041c47bf233aca64db51e99df385a4548f4e5ddbff7421eeffeea0c092975d7114b8834e086f00f605d41e36d0a59f3163e0d280cdda7a697a385692bd1c2dd77c9a671e6293a2a693ef028a7a29bda1f8b45a04a2a611c286f4b7d2a55d3a2d0ce9de48f62bd8180"}}, {0x17, &(0x7f0000004540)=@string={0x17, 0x3, "29fb2689bd59381e51eacca3b0d3502f4794015408"}}, {0x8, &(0x7f0000004580)=ANY=[@ANYBLOB="0837036606d9a8bb"]}, {0x4, &(0x7f00000045c0)=@lang_id={0x4, 0x3, 0x41e}}]}) (async) syz_usb_control_io(r4, &(0x7f0000004880)={0x2c, &(0x7f0000004680)={0x20, 0x23, 0x10, {0x10, 0xd, "8de735726f9a65085332edec8d8d"}}, &(0x7f00000046c0)={0x0, 0x3, 0xe8, @string={0xe8, 0x3, "cb1d955de32e2ecb87abb31164372f2196eac9bf8f48c8a75cb1ae6cd9dd602517bb93cfe6b980b55832f7c3c45243e11f6a03965c1c9ae83404795f1d0702b09ed71aae68ddf771a43fc985ff4c9b988bee3c509062ad7997c64b918c67fc9c1a9e10bdd72f8a0b86d192ddd864372e877d60ee5d6ce3ef5a994195f461b40ddda1a38ca095c121c6e29558fffa5a1746ad4e895e361b2d34f175c1938867f500b8c0f2a198bc488da262d5a5d82d09f0fd0af55c092712a8ce1f4d58ab06acd06b5b25415400ba493be272be5b36cd296237c9514d343e844c54a254d513a946fea48a46d2"}}, &(0x7f00000047c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x3, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xc1, 0x0, 0x3}]}}, &(0x7f0000004800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0xd897ef0649b038d6, 0x3f, 0x7, "e94fb876", "0f79fa97"}}, &(0x7f0000004840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe1, 0x18, 0x5, 0x7, 0xff, 0xf91, 0x7fff}}}, &(0x7f0000004d40)={0x84, &(0x7f00000048c0)={0x40, 0xc, 0x92, "51337cf981494135f40da2e867c781dcae63802b39e4af23732a4caf4ae9b184dc25b99896b3c8a0441d740baa387e05b307296898186714323a3c85bc149b4d6ede8b81d0178ed59648b365cf7027dffbf50266339deaba19a7823832f7bb30c99d08ae5f5aae607aef9acb39de74c105bd337d1ef71cfc16fa143bfe4dd4b03c95b2ed746df829b230c967bd3fc3e6003b"}, &(0x7f0000004980)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000049c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000004a00)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000004a40)={0x20, 0x0, 0x4, {0x20, 0x10}}, &(0x7f0000004a80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000004ac0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000004b00)={0x40, 0xb, 0x2, 'P;'}, &(0x7f0000004b40)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000004b80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000004bc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000004c00)={0x40, 0x19, 0x2, '\nx'}, &(0x7f0000004c40)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000004c80)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000004cc0)={0x40, 0x1e, 0x1, 0x82}, &(0x7f0000004d00)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_control_io(r2, &(0x7f0000001380)={0x2c, &(0x7f00000010c0)={0x0, 0x31, 0xe0, {0xe0, 0xe, "9afd0b6c7e05d89168a3565b64c6a325441f1df4fd60efce8f42e1216ddb31c0c4c2e574f42ed44b8c52f7eb2fc2529ad59dbc6ff1c2208b6fe463fd6b0c57526f55d03357486097fa6c069ee3f1bf1db8a2d6b430deedbe10174f40cfa84cf99816178e8c4976a9c805e144d2d6737657b82d9dad1e02dcf93f150974ebec5b36348d21e5bd7cf568e5644d35126a1dae2fed9b10a0cef5e60b34158c0a0bb04c347e92f32daeda7d13a336a692b20ea351af6b108e29c00ad0e531041aca1c6d8e830c6589726a8a042fd3438ab47a9821f031753c68df91da9f7cf0f7"}}, &(0x7f00000011c0)={0x0, 0x3, 0xc5, @string={0xc5, 0x3, "278ef513e7190c6a81c59ff30224a17b50ea244d0e63b362dc88d27ead2c3793d419d6d2a96f2a259d68177d90cf7814c2271956ab9151f20d78322bc496c43f8811e0edbd13c9f00a451f23592ad8873e64b968a24d9d08bd58562ad96c9ab7a8cb43005a321176a2b3fbe51f13ce46d789a624699c1ece466f414ce5d793e54f0bd2cf6422a2bf8e532e0be719cba8107f45afaca8bec31d2cb9ba5942986f2a8339c4de06a9c4d238e20f2fdaea3f26dcf3ab8cb81b562a14f1598ec451fc3c4c9f"}}, &(0x7f00000012c0)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x4, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0xffff, 0x0, 0x4, [0x7e00]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x5, 0xff07, 0x7, [0xa0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x20, 0x4, 0x1f}]}}, &(0x7f0000001300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x1a, 0x0, 0x80, "e7325d2a", "c6fe5958"}}, &(0x7f0000001340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x1f, 0x3, 0x3, 0x8000, 0x2}}}, &(0x7f0000001840)={0x84, &(0x7f00000013c0)={0x0, 0xe, 0x9c, "f3df7e548ff7ff0760eca3c534c36aa730df8f347e84ab1e976e3d8ba6f8bfb93a1bd40f11319b052c1b3a5ea3db49954d8158b02f701586e283c527a14d188ec03dba0a88c69b10d0eddb7339da56d714b3e49da2a0d65feaa6dc1a0e1963f338f94833ecebfb4aa4bded578dd5b14945d415a602f50abeaacda9a93a540abb274f365236925ae49f5dac4779cf94805875e488c0a3af1e744e71d3"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001500)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001540)={0x20, 0x0, 0x4, {0x40, 0x40}}, &(0x7f0000001580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000015c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001600)={0x40, 0xb, 0x2, ',J'}, &(0x7f0000001640)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000001680)={0x40, 0x13, 0x6, @local}, &(0x7f00000016c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000001700)={0x40, 0x19, 0x2, "62de"}, &(0x7f0000001740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001780)={0x40, 0x1c, 0x1, 0x20}, &(0x7f00000017c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001800)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x350, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x2, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "819e533e9533"}, {0x5, 0x24, 0x0, 0xff00}, {0xd, 0x24, 0xf, 0x1, 0xd785, 0x1, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0xc75d}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x40, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xed, 0x9c, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf7, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x81, 0xaa, 0x4, 0x10, 0x81}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1004}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0xc, 0xbf, {0xbf, 0x8, "604984dc4200f12b00c77d0b2dad1594a61ba263b95078598e075b38ae8c9f813de3f36cbd98152b8c6f046609fb16837612780ca1e04fcdf6acf1081d08ed60ed6689ffefa7248b6eb804ce7f522058b6ebbafec90f1bd636ae13cb838512a909407f67488c17c3038dceed23726e74655249c20a76f393737a53c5ff928b4ab91b2377dfe8d9ccca377d366bbfaa68bf7b53cb3899458083d096dbad3a39d1852eaa84930701c52f79d539263a429f1eb1b3ac130e5bfc77eb81965c"}}, &(0x7f0000000300)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "2764f9f819f79a5f0410293ca06b21e1b1d14203435695397e22e2a4d649216f562423b2cc9b711f9b8feead8d70910ce52a1a638f7a12ebdf8b12d37118543fcff22f0e709c0fab2679d6cc0ac9562ce1013aa090ff45f6a8515b345805e6129e1cd0c864da037906a3cecf04e24e7fe1837168170f754ab845508bd80a862056d0106cb2a4a1d2d680dd16e9b353b9472b053e5a66361b8c90fb8770e75036d5c11de25b2ee24dfeb55d07a67cfb8192c3d15163cada58fb53320ae42a5e516176adfe2ea8b3b91e94cafe142a9df7b1569710235aaf2f4d8437e0db59b5c7a58078625fc0e4e4c5262eb62b93a193435fc5f8c97de209"}}, &(0x7f0000000400)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "6c6c70fac7d20644b803e8fefba6f110"}, @generic={0x11, 0x10, 0xb, "a3bb03e79364eea6d6af741e19f8"}, @ss_container_id={0x14, 0x10, 0x4, 0xf2, "d9c18b59928473d4fbffeda028e8e0c5"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x61, 0x6, 0x1f, 0x8}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0xefcfec674313142a, 0x1, 0x3, '^f\r\n', "df5315ca"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc4, 0x1, 0x7, 0x9, 0xe8, 0x7, 0x5}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x20, 0xa, 0x8a, "efed4f5ce77df03adebe054e488e5b3cd65e0257fccc2455a4c23c9cb75e019127f6a1febc9c9212b4fecdd65838914570c66e909438956ef8b049ab405f34d420fa8cecddbbcc0ab0f69c51ee3c90491d3eabdb5f00e3751b9805d6444da11a1e1dd0f9c42333ada8df97244e23c262e63027401b30f8efb0d47639e87573b786253563db86bad268be"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf00]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "0389"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xad9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000940)={0x40, 0x17, 0x6, @random="df2dbc814b4f"}, &(0x7f0000000980)={0x40, 0x19, 0x2, "3ef1"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xebd}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) 07:36:02 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="00bb5fb08d8b12ad6f3e6214cd4559170b9e0f7c000000020f7c00020c100a0000000000000000006b1000f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c37e41df0bf25571cf7973904b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb35bad0e3d61eb54b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210162ebaec1b4c24baae7cf780cfb4d16d48d2d2390981146eab6b42ed4e90b0f310e60fc5baf4c390ce790a3d86d1eb45a61c2a3a59a99bb0151840128cf57db9e247c0a2cd3c1625383e6b8"], 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async, rerun: 32) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x6, 0x1c, {0x1c, 0x9, "20933e9ed37fb9d0dbd2b3ce5d9f0c4e664a3811aac8b841ccb3"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f0000000880)=ANY=[@ANYBLOB="000f45000000050f45c1251bd03200050b10010c05003f0601010907100204fd05001d100203d88dd3509e5b57a084f4f38c8a308fb58358b8f14ec4b473380710020d3601000a1003020c0030f90101"], &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x0, 0x40, '\t\x00', "0f9c6ecc"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x52, 0x1, 0x1, 0xff, 0xa1, 0xb73e, 0x7ff}}}, &(0x7f0000000f00)={0x84, &(0x7f0000000400)={0x0, 0x10, 0xb7, "ff997f7fc0b4c19a1e6551658aef1c0c2335c1b02f8a1ffaf3365a46a4fb1cd99c4cfe0793c69f0cccfe4524b5bc537579fdabdcdffed1dddf7f3303cdf64ff93066774cf1ad0037ad146ca58ba98df6d15aa67eec7c9594175d0d69491df94934c1a0796511349a21f20beecdf957ec8cc277ace1516daa1b4d30cb7f1e58a727523ecde545e75b20ed94a620977522780a23ab73ab3997f24781cca9c067d438731de51662485f363c745b1f3ae573aa148c826641a7"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1070, 0x80}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x3f}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "eed3"}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000d40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "c32d"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000e40)={0x40, 0x1c, 0x1}, &(0x7f0000000e80)={0x40, 0x1e, 0x29}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000900000009222297c71d9498071af597046bbe4d3551365f65d0cb60d749cb5db1655542b38b1447e0407e4864b0da69a70aa4b89a00dd07e9e9f316f249a6d26ea38b58f3f31014e5a706e97542d193e0d36880399d3787ed5e8797980e6d0fb1dec47b81eedce001867b34f1197aac2010b5b80df8b4803e6a54e8cf220746cfe95479198e9d43c159dbf53b72"], &(0x7f00000000c0)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "c76a283dbca1f0ee85b50b347589933863d00b115425202abec308717d1eb318d8e4b8a901688479d0a6e7e944d777b0b85b334aacfdbef581dd00bbda884907aa54394cda89194135dd6ee1cc8a7ecdc7f2cc96d76c369a1f6b3d093715dc12024a47463a057a153d9849f3ff235ab97e7701e18cb4dfe9d845e05069f5faecf56668e91c023b09b6cf33dcf45c73cf22264467609b29eb7e406c7da0b4b137f128772ef5aade8ae761bd040b856545"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00221a000000aa4a2c2b9a9e265783a3d5079d04838f24dc7277c6a3e94599f2"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x81, 0x1, {0x22, 0x2ba}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000005c0)={0x20, 0x11, 0xd2, "abdef6183ff64554db27781e3e82b878136f2bfa0969ac71bfa3d1a76ea9c3830ffdc00669263d57dd8008d55cd625c37caff58fba19814b88735e57f9106d742560e068752c937f0021acacb22f4bf4215f620877cf0524ed99e0a4ed3eee52ac9defa1e90e54cca5324ba6f4f3fcc9717a6bcb9c79350c6811263f0005c11cbbc44ba7f94e57e5c0ad8508fc055c193a769c2d4c73b939594e50fec228704008d351c37db3dbcf7b60b4aa7b05deece13538e159d8de673d3e8b64003b20e0df70f9d7a2fed9dc55b7c84f52bad14f8146"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000900)={0x20, 0x1, 0xa5, "2b50007a1fc402ea9f39a7336d884c0e1a242d03fe8b46e4c1e671359a6263d157fe07e3975238b989114c8ef191ebd8454dbddc33a4afa7d9655c645d8aba7aea30836b3cf83ee84a91f9a6e6b56e84211e2504cda4ea3013187715b2016400c330a31583ec4369684d358e9ee424e8d9f34a4797d9056455b498cf6ef20549f1bba67dd5a5f514ef993bad472d7af05cc3969dd44f8685f2ce7d160aa657daac6903b3d9"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x3}}) 07:36:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5c}], 0x0, 0x0, 0x0}) 07:36:02 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:02 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x1f, 0x40282) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x4, 0xb6, 0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x8, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x80}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) [ 1573.333682][T19861] binder: 19855:19861 ioctl c0306201 20001480 returned -14 [ 1573.372972][T19863] binder: 19856:19863 ioctl c00c620b 20000100 returned -22 [ 1573.379985][T19862] binder: 19854:19862 unknown command 25348 [ 1573.386742][T19862] binder: 19854:19862 ioctl c0306201 20000080 returned -22 [ 1573.429464][T19861] binder: transaction release 11200 bad object at offset 0, size 104 [ 1573.430091][T19862] binder: 19854:19862 ioctl c0306201 20001480 returned -14 [ 1573.438179][T19861] binder: transaction release 11200 bad object at offset 32, size 104 [ 1573.458695][T19861] binder: transaction release 11200 bad object at offset 72, size 104 07:36:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x68}], 0x0, 0x0, 0x0}) [ 1573.562919][T16196] usb 4-1: new high-speed USB device number 24 using dummy_hcd 07:36:02 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1573.603120][T11153] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1573.688779][T19870] binder: BINDER_SET_CONTEXT_MGR already set [ 1573.695360][T19870] binder: 19869:19870 ioctl 4018620d 20000000 returned -16 [ 1573.713985][T19871] binder: 19868:19871 ioctl c00c620c 20000100 returned -22 [ 1573.735928][T19870] binder: 19869:19870 ioctl c0306201 20001480 returned -14 [ 1573.770909][T19873] binder: 19872:19873 unknown command 25348 [ 1573.777806][T19873] binder: 19872:19873 ioctl c0306201 20000080 returned -22 07:36:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1573.812691][T16196] usb 4-1: Using ep0 maxpacket: 32 07:36:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x300}], 0x0, 0x0, 0x0}) [ 1573.837406][T19873] binder: 19872:19873 ioctl c0306201 20001480 returned -14 [ 1573.845388][ T5037] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1573.858187][T11153] usb 1-1: Using ep0 maxpacket: 32 [ 1573.933111][T16196] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1573.942052][T16196] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1573.951004][T16196] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.965397][T16196] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1573.975354][T16196] usb 4-1: config 1 has no interface number 0 07:36:03 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1573.981702][T16196] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1573.991127][T16196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.002413][T11153] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1574.011000][T11153] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1574.020257][T11153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1574.029672][T11153] usb 1-1: config 1 has no interface number 0 [ 1574.036126][T11153] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1574.047386][T11153] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1574.064575][T11153] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1574.071309][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1574.074829][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.106082][T19876] binder: BINDER_SET_CONTEXT_MGR already set [ 1574.112712][T19876] binder: 19875:19876 ioctl 4018620d 20000000 returned -16 [ 1574.132970][T19876] binder: 19875:19876 ioctl c0306201 20001480 returned -14 [ 1574.141102][T19877] binder: 19874:19877 ioctl c00c620d 20000100 returned -22 [ 1574.182579][ T5037] usb 6-1: Using ep0 maxpacket: 32 [ 1574.215145][T19880] binder: 19879:19880 unknown command 287492 [ 1574.221431][T19880] binder: 19879:19880 ioctl c0306201 20000080 returned -22 [ 1574.316448][T19881] binder: 19879:19881 ioctl c0306201 20001480 returned -14 [ 1574.333223][ T5037] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1574.342551][ T5037] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1574.351392][ T5037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1574.360788][ T5037] usb 6-1: config 1 has no interface number 0 [ 1574.371512][ T5037] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1574.382745][ T5037] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1574.396013][ T5037] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1574.405358][ T5037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.545206][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1574.587142][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1574.769605][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1574.789976][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.799863][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.849516][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.859791][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.944319][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1575.145468][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.155226][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.852797][ T21] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1575.935261][T19887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.944953][T19887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:05 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1576.017953][ T21] usb 6-1: USB disconnect, device number 64 [ 1576.026962][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 07:36:05 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x500}], 0x0, 0x0, 0x0}) 07:36:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:05 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:05 executing program 3: syz_open_dev$mouse(&(0x7f0000000180), 0x1f, 0x40282) (async) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x1f, 0x40282) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x4, 0xb6, 0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x8, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x80}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) [ 1576.288999][ T5033] usb 1-1: USB disconnect, device number 87 [ 1576.298787][T16196] snd_usb_pod 4-1:1.1: set_interface failed [ 1576.305424][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1576.320817][T16196] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1576.362675][ T5033] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1576.399237][T19898] binder: 19896:19898 ioctl c00c620e 20000100 returned -22 [ 1576.430133][T16196] usb 4-1: USB disconnect, device number 24 [ 1576.448175][T19901] binder: 19899:19901 unknown command 287492 [ 1576.454659][T19901] binder: 19899:19901 ioctl c0306201 20000080 returned -22 [ 1576.482367][ T21] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1576.508713][T19901] binder: 19899:19901 ioctl c0306201 20001480 returned -14 07:36:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c6210, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1576.555533][T19900] binder: 19897:19900 ioctl c0306201 20001480 returned -14 [ 1576.702820][T19909] binder: 19905:19909 ioctl c00c6210 20000100 returned -22 07:36:05 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1576.756020][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 1576.768664][T19910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.778833][T19910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x600}], 0x0, 0x0, 0x0}) [ 1576.882570][ T21] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1576.891184][ T21] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1576.900226][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1576.909959][ T21] usb 6-1: config 1 has no interface number 0 [ 1576.916507][ T21] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 07:36:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c6211, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1576.931966][ T21] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1576.945985][ T21] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1576.955401][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.000554][T19912] binder: 19911:19912 unknown command 287492 [ 1577.007192][T19912] binder: 19911:19912 ioctl c0306201 20000080 returned -22 [ 1577.043817][ T5037] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1577.060906][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1577.092115][T16196] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1577.113297][T19912] binder: 19911:19912 ioctl c0306201 20001480 returned -14 [ 1577.140592][T19915] binder: 19913:19915 ioctl c0306201 20001480 returned -14 07:36:06 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x1f, 0x40282) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x4, 0xb6, 0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x8, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x80}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) syz_open_dev$mouse(&(0x7f0000000180), 0x1f, 0x40282) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x4, 0xb6, 0x2}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x8, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x80}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) (async) 07:36:06 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1577.260244][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1577.347329][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 1577.471481][ T5033] usb 6-1: USB disconnect, device number 65 [ 1577.483285][ T5037] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1577.492121][ T5037] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1577.492407][ T5033] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1577.500866][ T5037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1577.500997][ T5037] usb 1-1: config 1 has no interface number 0 [ 1577.524835][ T5037] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1577.536193][ T5037] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1577.549465][ T5037] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1577.558971][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.653161][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1577.922100][T16196] usb 4-1: device descriptor read/64, error -71 07:36:07 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1578.192145][T16196] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1578.341964][ T5033] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1578.432112][T16196] usb 4-1: Using ep0 maxpacket: 32 [ 1578.552831][T16196] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1578.565492][T16196] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1578.576253][T16196] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.586665][T16196] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1578.596044][T16196] usb 4-1: config 1 has no interface number 0 [ 1578.602577][T16196] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1578.611988][T16196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.622788][ T5033] usb 6-1: Using ep0 maxpacket: 32 [ 1578.680667][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1578.743310][ T5033] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1578.752380][ T5033] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1578.761253][ T5033] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1578.774544][ T5033] usb 6-1: config 1 has no interface number 0 [ 1578.780912][ T5033] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1578.792876][ T5033] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1578.806220][ T5033] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1578.815597][ T5033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.880568][ T5033] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1579.002359][T16196] snd_usb_pod 4-1:1.1: set_interface failed [ 1579.008646][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1579.017379][T16196] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1579.070155][T16196] usb 4-1: USB disconnect, device number 26 [ 1579.102790][ T5033] snd_usb_pod 6-1:1.1: set_interface failed [ 1579.109148][ T5033] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1579.117565][ T5033] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 1579.130860][ T5033] usb 6-1: USB disconnect, device number 66 07:36:08 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:08 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c6212, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x700}], 0x0, 0x0, 0x0}) 07:36:08 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:08 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0) r0 = syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0xff}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3, 0x10, 0xb}]}, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect$uac1(0x5, 0xd7, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x3, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x400, 0x9, "67a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7fff, 0x8218, 0x0, "978a8fcf2536c3"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf7, 0x4, 0xe3, 0x40, "a3de"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x5, 0x7f, "4bde9004"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xadbe, 0x5, "8d28f3c6b943f7bc"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xd, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xca, 0x7, 0x5, {0x7, 0x25, 0x1, 0x3, 0x1, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0x40, 0xff, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfd, 0x9, 0x8, {0x7, 0x25, 0x1, 0x2, 0x7, 0x101}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0xd7, 0x40, 0x40, 0xc8}, 0x30, &(0x7f00000001c0)={0x5, 0xf, 0x30, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x7f}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7ff, 0xf00, 0x6, [0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5449c839cff569c3e05f36ed134e625a"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0x23, 0x54, {0x54, 0x21, "4ed14c3035a64e68e3be51a96dfdd8c151bbc7ccd319dc24cf838a2161fc5cac4f617c2ad8d399435edf9b90e66f2205548ea55aaf199f7b6b0e20ed7815527fae1b4aa6da8d4afd62aedc583c01d4cb6e69"}}, &(0x7f00000008c0)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "e51c84f9896bb527d3450f9423c1e86f6bc83199f620f2c3559a5712d715a7ee534418ed65367c2b3c00bd7ebccd54a4f62794e6d71099bceb8dc3dc0c9132bfa7e8e0cfbaea25a0016b93396f64a0621215764276ab06c448f2cd35c019da6081df5c1c2627c4fef65d9086af9a5c813114b3f7725769825cf8ea64472bbefb3752540f0e9a794c67189f28c52617baa6d67c72af064119ec496bf16a91a250c9453800c1bfbb0f2b382dc7a249458098c421ded4cb5861b238e7e87d984501cc0ad6ddbed6c1"}}, &(0x7f00000009c0)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "f7bc06e9e6c79eed075a462c7d2306b5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0xee, 0x200}, @ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0xff, 0xf00f, 0x7, [0x180c0, 0x3f1e, 0xcf, 0xf, 0xf, 0x1f80]}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x0, 0xe5, "1b12e54c", "47ec734a"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2a, 0x0, 0xe1, 0x5, 0x82, 0x8, 0x180}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000ac0)={0x0, 0x6, 0x7c, "0113c464d30c0198ee378bf57983ec9e17f2afa281a51b52eeb4e0d8e145ccfbf436cd653d33cefb55d7998ffc12d5aa5c2adc6910aa41d1ae61b93381c66709e46fcfad9bea0760fb3e5200b4d1f5ac34569404c6ec2651003d3793163d60b6f3e536831d3b423fe55351f98915f7aee8a49756ef4b034bc84a1e44"}, &(0x7f0000000b80)={0x0, 0xa, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000d40)={0x40, 0xb, 0x2, 'Y8'}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @random="f6da25e2ae8f"}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "e911"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0xf9e}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$uac1(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000300)={0x0, 0xc, 0xa9, {0xa9, 0x4, "b670236aaecc63c1e5edbebb45b9296dd59ceb5fc8bc5a3cbe19e8c609b3ec7bd72d99cb5d89a740094578af04c9f51def57a1b9fc644c8df6875eac7971c31cead6160803535564bac0a007dcbdd6fdea05e732d9a0a8d501ffc116b07b03b150ed0fe172da9aab48a8bd6426ae941dff5bc322f2f053947d5cef8e4be68bab51be5c8a552aa5c05741508f087bf2235e1a9e8cab642f2fc489c1ecfa59e86f395998b514b9d9"}}, &(0x7f00000003c0)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "b344695da50add501868328e2e5d03b4d650ccfc4701a1b7aa267941cd7aa56364496c91aa612d53800acbae012cdc80175c92a66ace68e6bf0314adc65762648fd09760516bee8c833808a5652372ba9cf2ea1d3c9110f3bbb1478a45e9723a726d08872e43981730680f5b7da1f31e6c2d54cd7e26c3cc20cc31b8b3d2ed825ec566a2915b0be5b0524a321b8c0a1dd6bda5420569ea0cf44e880c667f607d6fa03dddade28269428c83f5009663b3d36bebb4d0670316bea066b69ac417ae0fe1d422c8b0cd4e2b58391967ec8c1d790415fcedeb5e4acd1284e4b0737306523694d80441a38638e542a20dd47c7e2bd7e1"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x20, 0x3, 0x4d, "b175825700b3b1e64dc422207435d0715da6563e93efe524545ad6e7285f1a50f080ea4261f367a3aee49ee54456cf95a7988d73244f612c028fe25f1fe3bf903d30c711fa845aaac624678fda"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000800)=ANY=[@ANYBLOB="e6a6064b364106208101000700d6"], &(0x7f0000000680)={0x20, 0x82, 0x3, "eece04"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "9a"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "fcf0"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "c620f3"}}) 07:36:08 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) [ 1579.652274][ T5037] snd_usb_pod 1-1:1.1: set_interface failed [ 1579.658544][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1579.666958][ T5037] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 1579.812180][ T5037] usb 1-1: USB disconnect, device number 88 [ 1579.841588][T19941] binder: 19938:19941 ioctl c0306201 20001480 returned -14 [ 1579.860560][T19943] binder: 19936:19943 ioctl c0306201 20001480 returned -14 07:36:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c625e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:09 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x900}], 0x0, 0x0, 0x0}) [ 1580.042171][ T5033] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1580.147022][T19950] binder: 19948:19950 ioctl c0306201 20001480 returned -14 [ 1580.181442][T19951] binder: 19949:19951 ioctl c00c625e 20000100 returned -22 [ 1580.192750][T11153] usb 6-1: new high-speed USB device number 67 using dummy_hcd 07:36:09 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c6264, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1580.232196][ T5033] usb 4-1: device descriptor read/64, error 18 [ 1580.322373][ T5037] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1580.328730][T19953] binder: 19952:19953 ioctl c0306201 20001480 returned -14 [ 1580.380429][T19957] binder: 19955:19957 ioctl c00c6264 20000100 returned -22 [ 1580.396085][T19956] binder: 19954:19956 ioctl c0306201 20001480 returned -14 07:36:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1580.462472][T11153] usb 6-1: Using ep0 maxpacket: 32 [ 1580.501980][ T5033] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1580.572699][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 1580.593752][T11153] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1580.603486][T11153] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1580.612447][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1580.621707][T11153] usb 6-1: config 1 has no interface number 0 [ 1580.628079][T11153] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1580.639353][T11153] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1580.652782][T11153] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1580.662306][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.715903][ T5033] usb 4-1: device descriptor read/64, error 18 [ 1580.741144][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1580.782541][ T5037] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1580.791135][ T5037] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1580.800158][ T5037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1580.809725][ T5037] usb 1-1: config 1 has no interface number 0 [ 1580.820004][ T5037] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1580.832223][ T5037] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1580.845540][ T5037] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1580.846296][ T5033] usb usb4-port1: attempt power cycle [ 1580.854810][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.930696][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1580.944373][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1581.147759][T19947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.157623][T19947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.203120][T11153] usb 6-1: USB disconnect, device number 67 [ 1581.222763][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1581.283350][ T5033] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1581.452264][ T5033] usb 4-1: device descriptor read/8, error -61 [ 1581.722134][ T5033] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1581.892595][ T5033] usb 4-1: device descriptor read/8, error -61 [ 1582.012481][ T5033] usb usb4-port1: unable to enumerate USB device 07:36:11 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xa00}], 0x0, 0x0, 0x0}) 07:36:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:11 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:11 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f0000000000)={0xfffffffffffffe36, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x6}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:11 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0) r0 = syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0xff}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3, 0x10, 0xb}]}, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_usb_connect$uac1(0x5, 0xd7, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x3, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x400, 0x9, "67a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7fff, 0x8218, 0x0, "978a8fcf2536c3"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf7, 0x4, 0xe3, 0x40, "a3de"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x5, 0x7f, "4bde9004"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xadbe, 0x5, "8d28f3c6b943f7bc"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xd, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xca, 0x7, 0x5, {0x7, 0x25, 0x1, 0x3, 0x1, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0x40, 0xff, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfd, 0x9, 0x8, {0x7, 0x25, 0x1, 0x2, 0x7, 0x101}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0xd7, 0x40, 0x40, 0xc8}, 0x30, &(0x7f00000001c0)={0x5, 0xf, 0x30, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x7f}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7ff, 0xf00, 0x6, [0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5449c839cff569c3e05f36ed134e625a"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0x23, 0x54, {0x54, 0x21, "4ed14c3035a64e68e3be51a96dfdd8c151bbc7ccd319dc24cf838a2161fc5cac4f617c2ad8d399435edf9b90e66f2205548ea55aaf199f7b6b0e20ed7815527fae1b4aa6da8d4afd62aedc583c01d4cb6e69"}}, &(0x7f00000008c0)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "e51c84f9896bb527d3450f9423c1e86f6bc83199f620f2c3559a5712d715a7ee534418ed65367c2b3c00bd7ebccd54a4f62794e6d71099bceb8dc3dc0c9132bfa7e8e0cfbaea25a0016b93396f64a0621215764276ab06c448f2cd35c019da6081df5c1c2627c4fef65d9086af9a5c813114b3f7725769825cf8ea64472bbefb3752540f0e9a794c67189f28c52617baa6d67c72af064119ec496bf16a91a250c9453800c1bfbb0f2b382dc7a249458098c421ded4cb5861b238e7e87d984501cc0ad6ddbed6c1"}}, &(0x7f00000009c0)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "f7bc06e9e6c79eed075a462c7d2306b5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0xee, 0x200}, @ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0xff, 0xf00f, 0x7, [0x180c0, 0x3f1e, 0xcf, 0xf, 0xf, 0x1f80]}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x0, 0xe5, "1b12e54c", "47ec734a"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2a, 0x0, 0xe1, 0x5, 0x82, 0x8, 0x180}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000ac0)={0x0, 0x6, 0x7c, "0113c464d30c0198ee378bf57983ec9e17f2afa281a51b52eeb4e0d8e145ccfbf436cd653d33cefb55d7998ffc12d5aa5c2adc6910aa41d1ae61b93381c66709e46fcfad9bea0760fb3e5200b4d1f5ac34569404c6ec2651003d3793163d60b6f3e536831d3b423fe55351f98915f7aee8a49756ef4b034bc84a1e44"}, &(0x7f0000000b80)={0x0, 0xa, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000d40)={0x40, 0xb, 0x2, 'Y8'}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @random="f6da25e2ae8f"}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "e911"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0xf9e}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io$uac1(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000300)={0x0, 0xc, 0xa9, {0xa9, 0x4, "b670236aaecc63c1e5edbebb45b9296dd59ceb5fc8bc5a3cbe19e8c609b3ec7bd72d99cb5d89a740094578af04c9f51def57a1b9fc644c8df6875eac7971c31cead6160803535564bac0a007dcbdd6fdea05e732d9a0a8d501ffc116b07b03b150ed0fe172da9aab48a8bd6426ae941dff5bc322f2f053947d5cef8e4be68bab51be5c8a552aa5c05741508f087bf2235e1a9e8cab642f2fc489c1ecfa59e86f395998b514b9d9"}}, &(0x7f00000003c0)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "b344695da50add501868328e2e5d03b4d650ccfc4701a1b7aa267941cd7aa56364496c91aa612d53800acbae012cdc80175c92a66ace68e6bf0314adc65762648fd09760516bee8c833808a5652372ba9cf2ea1d3c9110f3bbb1478a45e9723a726d08872e43981730680f5b7da1f31e6c2d54cd7e26c3cc20cc31b8b3d2ed825ec566a2915b0be5b0524a321b8c0a1dd6bda5420569ea0cf44e880c667f607d6fa03dddade28269428c83f5009663b3d36bebb4d0670316bea066b69ac417ae0fe1d422c8b0cd4e2b58391967ec8c1d790415fcedeb5e4acd1284e4b0737306523694d80441a38638e542a20dd47c7e2bd7e1"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x20, 0x3, 0x4d, "b175825700b3b1e64dc422207435d0715da6563e93efe524545ad6e7285f1a50f080ea4261f367a3aee49ee54456cf95a7988d73244f612c028fe25f1fe3bf903d30c711fa845aaac624678fda"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000800)=ANY=[@ANYBLOB="e6a6064b364106208101000700d6"], &(0x7f0000000680)={0x20, 0x82, 0x3, "eece04"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "9a"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "fcf0"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "c620f3"}}) [ 1582.902202][ T5037] snd_usb_pod 1-1:1.1: set_interface failed [ 1582.908501][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1582.916928][ T5037] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 1583.005376][T19970] binder: 19964:19970 ioctl c0306201 20001480 returned -14 [ 1583.013486][T19968] binder: 19967:19968 ioctl c018620c 20000100 returned -1 [ 1583.045680][ T5037] usb 1-1: USB disconnect, device number 89 [ 1583.057570][T19972] binder: BINDER_SET_CONTEXT_MGR already set [ 1583.064061][T19972] binder: 19969:19972 ioctl 4018620d 20000000 returned -16 07:36:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1583.162364][T19972] binder: 19969:19972 ioctl c0306201 20001480 returned -14 07:36:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1583.293146][ T5033] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1583.362707][T11153] usb 6-1: new high-speed USB device number 68 using dummy_hcd 07:36:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xb00}], 0x0, 0x0, 0x0}) 07:36:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1583.435906][T19979] binder: 19977:19979 ioctl c0306201 20001480 returned -14 [ 1583.484223][ T5033] usb 4-1: device descriptor read/64, error 18 07:36:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1583.535457][T19982] binder: 19981:19982 ioctl c0306201 20001480 returned -14 [ 1583.543524][ T5037] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1583.602193][T11153] usb 6-1: Using ep0 maxpacket: 32 07:36:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xc00}], 0x0, 0x0, 0x0}) [ 1583.733580][T11153] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1583.742617][T11153] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1583.747062][T19986] binder: 19985:19986 ioctl c0306201 20001480 returned -14 [ 1583.751446][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1583.751567][T11153] usb 6-1: config 1 has no interface number 0 [ 1583.751685][T11153] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1583.761438][ T5033] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1583.767964][T11153] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1583.768169][T11153] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1583.815869][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.871931][T19989] binder: 19987:19989 ioctl c0306201 20001480 returned -14 [ 1583.908972][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1583.917420][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 1583.963056][ T5033] usb 4-1: device descriptor read/64, error 18 [ 1584.052457][ T5037] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1584.061259][ T5037] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1584.070241][ T5037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1584.079590][ T5037] usb 1-1: config 1 has no interface number 0 [ 1584.082997][ T5033] usb usb4-port1: attempt power cycle [ 1584.086018][ T5037] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1584.107099][ T5037] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1584.120366][ T5037] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1584.129819][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.141482][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1584.221041][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1584.511971][ T5033] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1584.682322][ T5033] usb 4-1: device descriptor read/8, error -61 [ 1584.946579][T16196] usb 6-1: USB disconnect, device number 68 [ 1584.953281][ T5033] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1584.963767][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1585.123075][ T5033] usb 4-1: device descriptor read/8, error -61 [ 1585.242841][ T5033] usb usb4-port1: unable to enumerate USB device 07:36:15 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0xb, 0xf1, {0xf1, 0x8, "75b57d64cad1d6ff9af74fbf9a90a003b01f457fa949cb7eb25db246bbdfa06deb2c92466bd9a389638714c7c7e2e31937908107ead5e7d9be2c200a01412e89f9d587782951de9f4e7b4792bf2625f63f4567d6c2901a05f50ed2cd912ae2ee91cc15ac4bf0e34f514a6cd680e1600a5c478a734a8a317f74ccb29df5c7e5c01f044671e581c1813bbbecbf4a832b9ff5d0f69dac612952e551266aca8c51a295a84f2f9a0273f9a10d8db0660fbfbbac719942bd34604a5cf8a596b55357059236e81948d88635f3f45ca448f95772de12b111624963c07e08c8c5320275d654d1c52fb002a3df263321cf161b8e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000200)={0x0, 0xf, 0x112, {0x5, 0xf, 0x112, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0xe, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x3, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x6, 0x7fff}, @generic={0xf8, 0x10, 0x3, "464d8b248ed194bd0bca7c22420456a352557ca79f5f5cfd28ff787720090f491e82a63f4c591809f26d0cb9afc08d087e6df65d0b49f1c49821ef4918e363cf145c3e5e9bdb4a399d0616f4bca981559b15b41e89d1bc5a3246a4f35cbaa1b81285c3803045fd62f1a6fd26f0fabd96034cd54a541cfb7737db5307d99e6bb7bf40388beeee63b49148de2b45aa350bc4765280d8bb0235d149e20f2b2dbc69ec82621e690059ea124b5ec116f993c545d2e79a225b6c3aa4dfbaecf601b4b624c388b7fdb31d9528f20714e63d8be7bea4f35879f17b5af0b8909fbf62a6db3eb7434c7987be0a5d059e6511144706f3e64020f2"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x18, 0x1, 0x4a, "9cd8398f", "980a7389"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x1, 0x6, 0x1, 0x5, 0xcf, 0x9}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x20, 0x12, 0x39, "28da1fffbd21fc3467409fca64440e247f40469a48d0d1e2a87444afc7fba0991c668377c097c7e45355ab12338f2e07524817d34a0ee16f23"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xc7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'r~'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x5fb8}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b4f3"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xf}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x40}}) 07:36:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xd00}], 0x0, 0x0, 0x0}) 07:36:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:15 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f0000000000)={0xfffffffffffffe36, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x6}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0xfffffffffffffe36, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x6}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:15 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0) (async) r0 = syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0xff}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3, 0x10, 0xb}]}, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect$uac1(0x5, 0xd7, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x3, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x400, 0x9, "67a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7fff, 0x8218, 0x0, "978a8fcf2536c3"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf7, 0x4, 0xe3, 0x40, "a3de"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x5, 0x7f, "4bde9004"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xadbe, 0x5, "8d28f3c6b943f7bc"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xd, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xca, 0x7, 0x5, {0x7, 0x25, 0x1, 0x3, 0x1, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0x40, 0xff, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfd, 0x9, 0x8, {0x7, 0x25, 0x1, 0x2, 0x7, 0x101}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0xd7, 0x40, 0x40, 0xc8}, 0x30, &(0x7f00000001c0)={0x5, 0xf, 0x30, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x7f}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x7ff, 0xf00, 0x6, [0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5449c839cff569c3e05f36ed134e625a"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}]}) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0x23, 0x54, {0x54, 0x21, "4ed14c3035a64e68e3be51a96dfdd8c151bbc7ccd319dc24cf838a2161fc5cac4f617c2ad8d399435edf9b90e66f2205548ea55aaf199f7b6b0e20ed7815527fae1b4aa6da8d4afd62aedc583c01d4cb6e69"}}, &(0x7f00000008c0)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "e51c84f9896bb527d3450f9423c1e86f6bc83199f620f2c3559a5712d715a7ee534418ed65367c2b3c00bd7ebccd54a4f62794e6d71099bceb8dc3dc0c9132bfa7e8e0cfbaea25a0016b93396f64a0621215764276ab06c448f2cd35c019da6081df5c1c2627c4fef65d9086af9a5c813114b3f7725769825cf8ea64472bbefb3752540f0e9a794c67189f28c52617baa6d67c72af064119ec496bf16a91a250c9453800c1bfbb0f2b382dc7a249458098c421ded4cb5861b238e7e87d984501cc0ad6ddbed6c1"}}, &(0x7f00000009c0)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "f7bc06e9e6c79eed075a462c7d2306b5"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0xee, 0x200}, @ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0xff, 0xf00f, 0x7, [0x180c0, 0x3f1e, 0xcf, 0xf, 0xf, 0x1f80]}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x0, 0xe5, "1b12e54c", "47ec734a"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2a, 0x0, 0xe1, 0x5, 0x82, 0x8, 0x180}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000ac0)={0x0, 0x6, 0x7c, "0113c464d30c0198ee378bf57983ec9e17f2afa281a51b52eeb4e0d8e145ccfbf436cd653d33cefb55d7998ffc12d5aa5c2adc6910aa41d1ae61b93381c66709e46fcfad9bea0760fb3e5200b4d1f5ac34569404c6ec2651003d3793163d60b6f3e536831d3b423fe55351f98915f7aee8a49756ef4b034bc84a1e44"}, &(0x7f0000000b80)={0x0, 0xa, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000d40)={0x40, 0xb, 0x2, 'Y8'}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @random="f6da25e2ae8f"}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "e911"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0xf9e}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x1}}) (rerun: 32) syz_usb_control_io$uac1(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000300)={0x0, 0xc, 0xa9, {0xa9, 0x4, "b670236aaecc63c1e5edbebb45b9296dd59ceb5fc8bc5a3cbe19e8c609b3ec7bd72d99cb5d89a740094578af04c9f51def57a1b9fc644c8df6875eac7971c31cead6160803535564bac0a007dcbdd6fdea05e732d9a0a8d501ffc116b07b03b150ed0fe172da9aab48a8bd6426ae941dff5bc322f2f053947d5cef8e4be68bab51be5c8a552aa5c05741508f087bf2235e1a9e8cab642f2fc489c1ecfa59e86f395998b514b9d9"}}, &(0x7f00000003c0)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "b344695da50add501868328e2e5d03b4d650ccfc4701a1b7aa267941cd7aa56364496c91aa612d53800acbae012cdc80175c92a66ace68e6bf0314adc65762648fd09760516bee8c833808a5652372ba9cf2ea1d3c9110f3bbb1478a45e9723a726d08872e43981730680f5b7da1f31e6c2d54cd7e26c3cc20cc31b8b3d2ed825ec566a2915b0be5b0524a321b8c0a1dd6bda5420569ea0cf44e880c667f607d6fa03dddade28269428c83f5009663b3d36bebb4d0670316bea066b69ac417ae0fe1d422c8b0cd4e2b58391967ec8c1d790415fcedeb5e4acd1284e4b0737306523694d80441a38638e542a20dd47c7e2bd7e1"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x20, 0x3, 0x4d, "b175825700b3b1e64dc422207435d0715da6563e93efe524545ad6e7285f1a50f080ea4261f367a3aee49ee54456cf95a7988d73244f612c028fe25f1fe3bf903d30c711fa845aaac624678fda"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000800)=ANY=[@ANYBLOB="e6a6064b364106208101000700d6"], &(0x7f0000000680)={0x20, 0x82, 0x3, "eece04"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "9a"}, &(0x7f0000000700)={0x20, 0x84, 0x2, "fcf0"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "c620f3"}}) [ 1586.088074][ T5037] snd_usb_pod 1-1:1.1: set_interface failed [ 1586.094699][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1586.103066][ T5037] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 1586.204053][ T5037] usb 1-1: USB disconnect, device number 90 07:36:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1586.267226][T19999] binder: 19991:19999 ioctl c0306201 20001480 returned -14 [ 1586.278962][T20000] binder: BINDER_SET_CONTEXT_MGR already set [ 1586.285412][T20000] binder: 19995:20000 ioctl 4018620d 20000000 returned -16 [ 1586.295674][T20001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.305545][T20001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.366774][T20006] binder: 19995:20006 ioctl c0306201 20001480 returned -14 [ 1586.393066][T20001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.402854][T20001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.489158][T20001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.502183][ T5033] usb 4-1: new high-speed USB device number 35 using dummy_hcd 07:36:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xe00}], 0x0, 0x0, 0x0}) 07:36:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1586.537076][T20009] binder: 20008:20009 ioctl c00c620f 20000100 returned -22 [ 1586.556187][ T21] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1586.559963][T20001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.597856][T20001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.608416][T20001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1586.646930][T20001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.656531][T20001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.692665][ T5033] usb 4-1: device descriptor read/64, error 18 [ 1586.752179][ T5037] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1586.789236][T20011] binder: 20010:20011 ioctl c0306201 20001480 returned -14 [ 1586.792614][T20015] binder: 20013:20015 ioctl c00c620f 20000100 returned -22 [ 1586.816217][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 1586.829838][T20014] binder: 20012:20014 ioctl c0306201 20001480 returned -14 07:36:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1586.948544][ T21] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1586.958058][ T21] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1586.962779][ T5033] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1586.967004][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1586.985072][ T21] usb 6-1: config 1 has no interface number 0 07:36:16 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x1100}], 0x0, 0x0, 0x0}) [ 1586.991616][ T21] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1587.003435][ T21] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1587.016804][ T21] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1587.026360][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.102553][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 1587.144245][T20019] binder: 20017:20019 ioctl c00c620f 20000100 returned -22 [ 1587.150394][T20020] binder: 20018:20020 ioctl c0306201 20001480 returned -14 [ 1587.166225][ T5033] usb 4-1: device descriptor read/64, error 18 [ 1587.180495][T20020] binder_alloc: 20018: binder_alloc_buf size 4480 failed, no address space [ 1587.189505][T20020] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1587.191364][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1587.243251][ T5037] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1587.252167][ T5037] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1587.261453][ T5037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1587.275702][ T5037] usb 1-1: config 1 has no interface number 0 [ 1587.282112][ T5037] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1587.293406][ T5037] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1587.294629][ T5033] usb usb4-port1: attempt power cycle [ 1587.306597][ T5037] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1587.306740][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.396021][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1587.451610][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1587.644189][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1587.752175][ T5033] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1587.922592][ T5033] usb 4-1: device descriptor read/8, error -61 [ 1588.193549][ T5033] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1588.207665][T20022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.217557][T20022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.372375][ T5033] usb 4-1: device descriptor read/8, error -61 [ 1588.416161][ T5037] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1588.457779][T16196] usb 1-1: USB disconnect, device number 91 [ 1588.476893][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1588.506292][ T5033] usb usb4-port1: unable to enumerate USB device 07:36:18 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0xb, 0xf1, {0xf1, 0x8, "75b57d64cad1d6ff9af74fbf9a90a003b01f457fa949cb7eb25db246bbdfa06deb2c92466bd9a389638714c7c7e2e31937908107ead5e7d9be2c200a01412e89f9d587782951de9f4e7b4792bf2625f63f4567d6c2901a05f50ed2cd912ae2ee91cc15ac4bf0e34f514a6cd680e1600a5c478a734a8a317f74ccb29df5c7e5c01f044671e581c1813bbbecbf4a832b9ff5d0f69dac612952e551266aca8c51a295a84f2f9a0273f9a10d8db0660fbfbbac719942bd34604a5cf8a596b55357059236e81948d88635f3f45ca448f95772de12b111624963c07e08c8c5320275d654d1c52fb002a3df263321cf161b8e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000200)={0x0, 0xf, 0x112, {0x5, 0xf, 0x112, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0xe, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x3, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x6, 0x7fff}, @generic={0xf8, 0x10, 0x3, "464d8b248ed194bd0bca7c22420456a352557ca79f5f5cfd28ff787720090f491e82a63f4c591809f26d0cb9afc08d087e6df65d0b49f1c49821ef4918e363cf145c3e5e9bdb4a399d0616f4bca981559b15b41e89d1bc5a3246a4f35cbaa1b81285c3803045fd62f1a6fd26f0fabd96034cd54a541cfb7737db5307d99e6bb7bf40388beeee63b49148de2b45aa350bc4765280d8bb0235d149e20f2b2dbc69ec82621e690059ea124b5ec116f993c545d2e79a225b6c3aa4dfbaecf601b4b624c388b7fdb31d9528f20714e63d8be7bea4f35879f17b5af0b8909fbf62a6db3eb7434c7987be0a5d059e6511144706f3e64020f2"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x18, 0x1, 0x4a, "9cd8398f", "980a7389"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x1, 0x6, 0x1, 0x5, 0xcf, 0x9}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x20, 0x12, 0x39, "28da1fffbd21fc3467409fca64440e247f40469a48d0d1e2a87444afc7fba0991c668377c097c7e45355ab12338f2e07524817d34a0ee16f23"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xc7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'r~'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x5fb8}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b4f3"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xf}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x40}}) 07:36:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x1200}], 0x0, 0x0, 0x0}) [ 1589.092966][T20026] binder: 20023:20026 ioctl c0306201 20001480 returned -14 [ 1589.134034][T20029] binder: 20024:20029 ioctl c00c620f 20000100 returned -22 [ 1589.153600][T20027] binder: 20025:20027 ioctl c0306201 20001480 returned -14 [ 1589.200976][T20027] binder_alloc: 20025: binder_alloc_buf size 4736 failed, no address space [ 1589.214812][T20027] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0xfffffffffffffe36, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x6}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:18 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect$uac1(0x1, 0xff, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x81, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x5, 0x5, [0x5, 0x8, 0x6, 0x2, 0x6]}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "9087bf"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x3, 0x5, 0x90}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x2, 0x6, 0x36}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x4, 0x6, "6c12c68d3371b884"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x80, "55002e371def"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x8, 0x3f, {0x7, 0x25, 0x1, 0x1, 0xff, 0x10c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe0, 0x1, 0x7, 0x3f, 'AmC', '&'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3f, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0xf4, 0x3f, "efc1"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x6, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x8, 0x4, "7c219a1f0c21c636ec"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x71, 0xff, {0x7, 0x25, 0x1, 0x1, 0x1, 0x800}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x2, 0x28, 0x61, 0x20, 0x9}, 0x3b, &(0x7f0000000940)={0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x0, 0x7c}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x92, 0x110f, 0x7ff, [0xc0c0, 0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xa, 0x50}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0x400}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x439}}, {0x7e, &(0x7f00000009c0)=@string={0x7e, 0x3, "22b0d34cf8fcde7bee1789392d34c056c6b16d5fc47d72cc1f0eb3a81a671f057e020b20540d754f9963f766254186bcfb4a537362e38cd49e1efe67050011f2ac70d4f3883a20eab3a0e1de1e623cb292ff3b91e6470530729b5dd98eec4fdc5a47436335d0847d541c5b397ea37d6621c0fb8677f0e3dae40bd209"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x423}}, {0xaf, &(0x7f0000000b00)=@string={0xaf, 0x3, "217adc77473fb221cabf73c8d1321e8126730f0d0f40adc5686dc90d9c12632562bfe23298cd4c82bfb9fa5b0ffc66cf685cdbcd3f187cbbbabc9879094e02e14bdda00081cd99762fec2ed3220a1bd4fccf699ac2e0191e7c8f5afff1071ee50862ffd584eb19a84e0b4a26d3b987df71f21f667db24aede95a81e6005236d968a76a926b3ad22905941da2b73e85849d4f857549c260f25bf0c4eaf9dd0141211181fdad91840defcf66dfed"}}, {0x8e, &(0x7f0000000c80)=@string={0x8e, 0x3, "a89309f5383e0a88cb37fd26131c23cc2774bced5c4757525fbbc6f71ca03bb67e78a31522e6ff029c8c769246711fa825b5b783eea16520b902e2159ed332d6284c56db23e59268da489641198ca0aaaec22d821e5fdce44e3266cdf0912710b1bf41f49f61991d1ed7b5c9cdcea111afdbebfe6666dbb2633349d93ea27ba518b207cd9a8818f61ebb7dff"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x4, {0x4, 0x6, "b6f6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "c2f721de0f95d6f78931f635cac3e328ba2bfafe354dd13ee6a2469178f2d21be8e3d656d245c9b1b21d3c5ca2b4f481982dba5a99cb0dcab36633c234"}}, &(0x7f0000000140)={0x0, 0xf, 0x57, {0x5, 0xf, 0x57, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x20, "78314d49efac33cf567d7cc737a020c3"}, @generic={0x2f, 0x10, 0x4, "f2fc5c377c04a13a8ab57d0d47c4d50e0abd36707a49de57f5d83d7f9298d8512999a1bdaa0bbec00ffcafdc"}, @ptm_cap={0x3}, @generic={0xc, 0x10, 0xa, "fb0d6d806b4b3b05b2"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x10, 0xd3, 0xc, "e7a3f289", "342af3ca"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x5e, 0x1, 0xfe, 0x8001, 0x3f}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x16, 0x96, "4a45c7f44c21dea31ac63edfa1dc942aa8d2dc2114f47964a27363a99c6bdacebd9dc2a92765f67424e886e23096f5ca68aea8d352aa07199d7a8ac05373d850dabee3e1a462bfbd01bd06e33578059ca066c6020181cb70f50340ff57730ef99af43a6dee17e242f88bc15b95898aff432f41858f92055b62d287eb2178f2b12e2c2938f7cf8f7c6a3398c412469dd474d1313dc38e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x8, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xf2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "548f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d868"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) 07:36:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x2500}], 0x0, 0x0, 0x0}) 07:36:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1589.393090][T16196] usb 6-1: USB disconnect, device number 69 [ 1589.466524][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1589.483744][ T5037] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1589.546232][T20036] binder: 20033:20036 ioctl c0306201 20001480 returned -14 [ 1589.581329][T20038] binder: 20035:20038 ioctl c00c620f 20000100 returned -22 [ 1589.611311][T20037] binder: 20034:20037 ioctl c0306201 20001480 returned -14 07:36:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1589.657609][T20037] binder_alloc: 20034: binder_alloc_buf size 9600 failed, no address space [ 1589.666931][T20037] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5000}], 0x0, 0x0, 0x0}) 07:36:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1589.749201][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 1589.819401][T20042] binder: 20041:20042 ioctl c0306201 20001480 returned -14 [ 1589.842773][ T21] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1589.860305][T20045] binder: 20044:20045 ioctl c00c620f 20000100 returned -22 [ 1589.891275][T20046] binder: 20043:20046 ioctl c0306201 20001480 returned -14 [ 1589.905505][ T5037] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1589.914432][ T5037] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1589.923401][ T5037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1589.936520][ T5037] usb 1-1: config 1 has no interface number 0 [ 1589.943424][ T5037] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1589.950899][T20046] binder_alloc: 20043: binder_alloc_buf size 20608 failed, no address space [ 1589.954542][ T5037] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1589.954739][ T5037] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1589.963632][T20046] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1589.976766][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.004905][T16196] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1590.113646][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1590.172038][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 1590.251995][T16196] usb 6-1: Using ep0 maxpacket: 32 [ 1590.302224][T20048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.311681][T20048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.322880][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1590.342274][ T21] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1590.350976][ T21] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1590.360401][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.370989][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1590.372883][T16196] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1590.380481][ T21] usb 4-1: config 1 has no interface number 0 [ 1590.388744][T16196] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1590.388857][T16196] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1590.388973][T16196] usb 6-1: config 1 has no interface number 0 [ 1590.395499][ T21] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1590.404178][T16196] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1590.413836][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.419316][T16196] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1590.466527][T16196] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1590.475913][T16196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:36:19 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0xb, 0xf1, {0xf1, 0x8, "75b57d64cad1d6ff9af74fbf9a90a003b01f457fa949cb7eb25db246bbdfa06deb2c92466bd9a389638714c7c7e2e31937908107ead5e7d9be2c200a01412e89f9d587782951de9f4e7b4792bf2625f63f4567d6c2901a05f50ed2cd912ae2ee91cc15ac4bf0e34f514a6cd680e1600a5c478a734a8a317f74ccb29df5c7e5c01f044671e581c1813bbbecbf4a832b9ff5d0f69dac612952e551266aca8c51a295a84f2f9a0273f9a10d8db0660fbfbbac719942bd34604a5cf8a596b55357059236e81948d88635f3f45ca448f95772de12b111624963c07e08c8c5320275d654d1c52fb002a3df263321cf161b8e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}, &(0x7f0000000200)={0x0, 0xf, 0x112, {0x5, 0xf, 0x112, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0xe, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x3, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x6, 0x7fff}, @generic={0xf8, 0x10, 0x3, "464d8b248ed194bd0bca7c22420456a352557ca79f5f5cfd28ff787720090f491e82a63f4c591809f26d0cb9afc08d087e6df65d0b49f1c49821ef4918e363cf145c3e5e9bdb4a399d0616f4bca981559b15b41e89d1bc5a3246a4f35cbaa1b81285c3803045fd62f1a6fd26f0fabd96034cd54a541cfb7737db5307d99e6bb7bf40388beeee63b49148de2b45aa350bc4765280d8bb0235d149e20f2b2dbc69ec82621e690059ea124b5ec116f993c545d2e79a225b6c3aa4dfbaecf601b4b624c388b7fdb31d9528f20714e63d8be7bea4f35879f17b5af0b8909fbf62a6db3eb7434c7987be0a5d059e6511144706f3e64020f2"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x18, 0x1, 0x4a, "9cd8398f", "980a7389"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4a, 0x1, 0x6, 0x1, 0x5, 0xcf, 0x9}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x20, 0x12, 0x39, "28da1fffbd21fc3467409fca64440e247f40469a48d0d1e2a87444afc7fba0991c668377c097c7e45355ab12338f2e07524817d34a0ee16f23"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xc7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'r~'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x5fb8}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b4f3"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xf}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x40}}) 07:36:19 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5800}], 0x0, 0x0, 0x0}) [ 1590.520882][ T21] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1590.534942][ T5033] usb 1-1: USB disconnect, device number 92 [ 1590.548022][ T5033] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1590.671409][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1590.703124][T20054] binder: 20050:20054 ioctl c00c620f 20000100 returned -22 [ 1590.721342][T20032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.725517][T20053] binder: 20051:20053 ioctl c0306201 20001480 returned -14 [ 1590.731162][T20032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.757211][T20056] binder: 20052:20056 ioctl 4018620d 0 returned -22 [ 1590.780016][T20058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.789823][T20058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.797281][T20056] binder: 20052:20056 ioctl c0306201 20001480 returned -14 [ 1590.844852][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1590.878246][T20058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.888022][T20058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.892399][ T21] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1590.896630][T20053] binder_alloc: 20051: binder_alloc_buf size 22656 failed, no address space [ 1590.904883][ T21] snd_usb_pod 4-1:1.1: invalid control EP [ 1590.913341][T20053] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1590.918784][ T21] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1590.935616][ T21] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1590.945068][ T21] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1591.152991][T16196] usb 4-1: USB disconnect, device number 39 [ 1591.183924][ T5033] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1591.432067][ T5033] usb 1-1: Using ep0 maxpacket: 8 [ 1591.552456][ T5033] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=b2.d9 [ 1591.562173][ T5033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.579877][ T5033] usb 1-1: config 0 descriptor?? [ 1591.618232][T11153] usb 6-1: USB disconnect, device number 70 [ 1591.632913][ T5033] usbtest 1-1:0.0: couldn't get endpoints, -22 [ 1591.639552][ T5033] usbtest: probe of 1-1:0.0 failed with error -22 [ 1591.640615][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 07:36:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1591.788563][T20063] binder: 20062:20063 ioctl c00c620f 20000100 returned -22 [ 1591.836379][ T5033] usb 1-1: USB disconnect, device number 93 07:36:21 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0xdd, {0xdd, 0x3, "263c44b979e9f5e27f8bc24b64f44fab52e891bda9827b30ff0695a2dd2d6f3602105bff5808f671ad3ccddc5d44ed00292a85f84c60d721940c663f5e513a4b5c62f267e5167fb5ea3f317abdf9a31e3abe238025c23c9a733b76a2cd1acdfb29b05779583e6efc698d96586700d0ae28a22204397a7febcbf799a98cb70320b92a4f291a52a34d2f414e8a453663037d8843771c18de6c249475f91df4d86e225e8090b2867bbee26586d1c387a573887c7d4873b3f7ee3bcff809776a547b9fccb32013b3eca73720a6233a6e3cfdacae93627a0889f0fbcb85"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000040)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x0, 0x8, 0x1f, 0xec}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0xb8, 0x46}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x80, 0x0, "8d38c2df", "eae4442c"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x2, 0x2, 0x80, 0xfb, 0x8, 0x2}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0xc, 0x8, "8842c0fbadbf508e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x40, 0x80, [0xff0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000480)={0x40, 0xb, 0x2, "1669"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "3499"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:21 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect$uac1(0x1, 0xff, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x81, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x5, 0x5, [0x5, 0x8, 0x6, 0x2, 0x6]}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "9087bf"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x3, 0x5, 0x90}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x2, 0x6, 0x36}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x4, 0x6, "6c12c68d3371b884"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x80, "55002e371def"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x8, 0x3f, {0x7, 0x25, 0x1, 0x1, 0xff, 0x10c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe0, 0x1, 0x7, 0x3f, 'AmC', '&'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3f, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0xf4, 0x3f, "efc1"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x6, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x8, 0x4, "7c219a1f0c21c636ec"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x71, 0xff, {0x7, 0x25, 0x1, 0x1, 0x1, 0x800}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x2, 0x28, 0x61, 0x20, 0x9}, 0x3b, &(0x7f0000000940)={0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x0, 0x7c}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x92, 0x110f, 0x7ff, [0xc0c0, 0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xa, 0x50}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0x400}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x439}}, {0x7e, &(0x7f00000009c0)=@string={0x7e, 0x3, "22b0d34cf8fcde7bee1789392d34c056c6b16d5fc47d72cc1f0eb3a81a671f057e020b20540d754f9963f766254186bcfb4a537362e38cd49e1efe67050011f2ac70d4f3883a20eab3a0e1de1e623cb292ff3b91e6470530729b5dd98eec4fdc5a47436335d0847d541c5b397ea37d6621c0fb8677f0e3dae40bd209"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x423}}, {0xaf, &(0x7f0000000b00)=@string={0xaf, 0x3, "217adc77473fb221cabf73c8d1321e8126730f0d0f40adc5686dc90d9c12632562bfe23298cd4c82bfb9fa5b0ffc66cf685cdbcd3f187cbbbabc9879094e02e14bdda00081cd99762fec2ed3220a1bd4fccf699ac2e0191e7c8f5afff1071ee50862ffd584eb19a84e0b4a26d3b987df71f21f667db24aede95a81e6005236d968a76a926b3ad22905941da2b73e85849d4f857549c260f25bf0c4eaf9dd0141211181fdad91840defcf66dfed"}}, {0x8e, &(0x7f0000000c80)=@string={0x8e, 0x3, "a89309f5383e0a88cb37fd26131c23cc2774bced5c4757525fbbc6f71ca03bb67e78a31522e6ff029c8c769246711fa825b5b783eea16520b902e2159ed332d6284c56db23e59268da489641198ca0aaaec22d821e5fdce44e3266cdf0912710b1bf41f49f61991d1ed7b5c9cdcea111afdbebfe6666dbb2633349d93ea27ba518b207cd9a8818f61ebb7dff"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x4, {0x4, 0x6, "b6f6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "c2f721de0f95d6f78931f635cac3e328ba2bfafe354dd13ee6a2469178f2d21be8e3d656d245c9b1b21d3c5ca2b4f481982dba5a99cb0dcab36633c234"}}, &(0x7f0000000140)={0x0, 0xf, 0x57, {0x5, 0xf, 0x57, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x20, "78314d49efac33cf567d7cc737a020c3"}, @generic={0x2f, 0x10, 0x4, "f2fc5c377c04a13a8ab57d0d47c4d50e0abd36707a49de57f5d83d7f9298d8512999a1bdaa0bbec00ffcafdc"}, @ptm_cap={0x3}, @generic={0xc, 0x10, 0xa, "fb0d6d806b4b3b05b2"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x10, 0xd3, 0xc, "e7a3f289", "342af3ca"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x5e, 0x1, 0xfe, 0x8001, 0x3f}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x16, 0x96, "4a45c7f44c21dea31ac63edfa1dc942aa8d2dc2114f47964a27363a99c6bdacebd9dc2a92765f67424e886e23096f5ca68aea8d352aa07199d7a8ac05373d850dabee3e1a462bfbd01bd06e33578059ca066c6020181cb70f50340ff57730ef99af43a6dee17e242f88bc15b95898aff432f41858f92055b62d287eb2178f2b12e2c2938f7cf8f7c6a3398c412469dd474d1313dc38e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x8, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xf2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "548f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d868"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) 07:36:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5c00}], 0x0, 0x0, 0x0}) 07:36:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1592.240029][T20068] binder: 20065:20068 ioctl c00c620f 20000100 returned -22 [ 1592.272676][T20071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.274672][T20070] binder: 20067:20070 ioctl 4018620d 0 returned -22 [ 1592.283211][T20071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1592.331893][T20071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1592.341472][T20071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:21 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x13, &(0x7f0000000040)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x3, 0x9, 0x401, 0xb1}]}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_read(r1, 0xe3, 0xdf, &(0x7f00000000c0)=""/223) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r2) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x11, 0xfb, {0xfb, 0x30, "ee058c7c63178c9b94456863edb162bcd2899968b49d047b6c663a66176a12505b40dd1b4e95e42f70e36e9563842b9e6f7d855c0385e25506c3d1ea75aec3a2c8d641a04fe08c48c6deff98b7fbc7b7ccfb028dae8d61d0a29fff7e4dffb87eba7c16612559b09f68b69f01148dca46c4869b89eeb81ebc4a9482ab71bd4bbadeac65b3701370fae3df28fb707368980dd3653dbc028a169d433ecfcb06f892ad2aa6b915cd3bbb0bb480f95a775ad83f7d42181c6d5435d6361247cfe002d27401f2eb94d4ffb94cbb2e9e04d5990d5fc76774d43f83d4d88df12452b889798720a3e0582956563161ecd22174ccd37399dada1f4ac20f0a"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x384c}}, &(0x7f0000000380)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf0, 0x66, 0x8a58}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x8, 0x2, 0x40, 'e*q/', "04b4e7d7"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0xf9, 0x6, 0x3, 0x0, 0xffff}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x17, 0x4, "e28d88aa"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xe2}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xe650e209e3254084, 0x20}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "8b86"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "65f5"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x72ed}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xa4}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x2}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1592.374403][T20072] binder: 20066:20072 ioctl c0306201 20001480 returned -14 [ 1592.398791][T20070] binder: 20067:20070 ioctl c0306201 20001480 returned -14 07:36:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1592.465882][T20072] binder_alloc: 20066: binder_alloc_buf size 23680 failed, no address space [ 1592.475250][T20072] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1592.522155][ T5033] usb 4-1: new high-speed USB device number 40 using dummy_hcd 07:36:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x60ff}], 0x0, 0x0, 0x0}) [ 1592.682200][T16196] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1592.733754][T20080] binder: 20078:20080 ioctl c00c620f 20000100 returned -22 [ 1592.762477][ T5033] usb 4-1: Using ep0 maxpacket: 32 [ 1592.829897][T20082] binder: 20081:20082 ioctl 4018620d 0 returned -22 [ 1592.857671][T20082] binder: 20081:20082 ioctl c0306201 20001480 returned -14 [ 1592.865014][T20084] binder: BINDER_SET_CONTEXT_MGR already set [ 1592.865185][T20084] binder: 20083:20084 ioctl 4018620d 20000000 returned -16 07:36:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1592.875127][T20084] binder: 20083:20084 ioctl c0306201 20001480 returned -14 [ 1592.890608][ T5033] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1592.903282][ T5033] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1592.913074][ T5033] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.923541][ T5033] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1592.932932][ T5033] usb 4-1: config 1 has no interface number 0 [ 1592.939312][ T5033] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1592.948788][ T5033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:36:22 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x6800}], 0x0, 0x0, 0x0}) [ 1593.012993][T16196] usb 6-1: Using ep0 maxpacket: 32 [ 1593.033693][T11046] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1593.053367][ T5033] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1593.133747][T16196] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1593.144091][T16196] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1593.153685][T16196] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1593.162994][T16196] usb 6-1: config 1 has no interface number 0 [ 1593.166720][T20086] binder: 20085:20086 ioctl c00c620f 20000100 returned -22 [ 1593.169227][T16196] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1593.187944][T16196] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1593.201667][T16196] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1593.215036][T16196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:36:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1593.244685][ T5033] snd_usb_pod 4-1:1.1: set_interface failed [ 1593.250954][ T5033] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1593.259473][ T5033] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1593.327948][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1593.337309][T20088] binder: 20087:20088 ioctl c0306201 20001480 returned -14 [ 1593.362303][T11046] usb 1-1: Using ep0 maxpacket: 32 [ 1593.394256][ T5033] usb 4-1: USB disconnect, device number 40 [ 1593.419441][T20088] binder_alloc: 20087: binder_alloc_buf size 26752 failed, no address space [ 1593.429357][T20088] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1593.478188][T20090] binder: 20089:20090 ioctl c0306201 20001480 returned -14 [ 1593.482924][T11046] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1593.487993][T20090] binder_alloc: 20089: binder_alloc_buf, no vma [ 1593.494706][T11046] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1593.510400][T11046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1593.523673][T11046] usb 1-1: config 1 has no interface number 0 [ 1593.529975][T11046] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1593.541643][T11046] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1593.555523][T11046] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1593.564995][T11046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.594872][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1593.690581][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1594.094387][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1594.296936][T20079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.306709][T20079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.642676][T11046] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1595.081518][T11153] usb 1-1: USB disconnect, device number 94 [ 1595.096834][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:36:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x1000000}], 0x0, 0x0, 0x0}) 07:36:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:24 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0xdd, {0xdd, 0x3, "263c44b979e9f5e27f8bc24b64f44fab52e891bda9827b30ff0695a2dd2d6f3602105bff5808f671ad3ccddc5d44ed00292a85f84c60d721940c663f5e513a4b5c62f267e5167fb5ea3f317abdf9a31e3abe238025c23c9a733b76a2cd1acdfb29b05779583e6efc698d96586700d0ae28a22204397a7febcbf799a98cb70320b92a4f291a52a34d2f414e8a453663037d8843771c18de6c249475f91df4d86e225e8090b2867bbee26586d1c387a573887c7d4873b3f7ee3bcff809776a547b9fccb32013b3eca73720a6233a6e3cfdacae93627a0889f0fbcb85"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000040)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x0, 0x8, 0x1f, 0xec}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0xb8, 0x46}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x80, 0x0, "8d38c2df", "eae4442c"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x2, 0x2, 0x80, 0xfb, 0x8, 0x2}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0xc, 0x8, "8842c0fbadbf508e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x40, 0x80, [0xff0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000480)={0x40, 0xb, 0x2, "1669"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "3499"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:24 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect$uac1(0x1, 0xff, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x81, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x5, 0x5, [0x5, 0x8, 0x6, 0x2, 0x6]}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "9087bf"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x3, 0x5, 0x90}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x2, 0x6, 0x36}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x4, 0x6, "6c12c68d3371b884"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x80, "55002e371def"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x8, 0x3f, {0x7, 0x25, 0x1, 0x1, 0xff, 0x10c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe0, 0x1, 0x7, 0x3f, 'AmC', '&'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3f, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0xf4, 0x3f, "efc1"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x6, 0x1002}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x8, 0x4, "7c219a1f0c21c636ec"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x71, 0xff, {0x7, 0x25, 0x1, 0x1, 0x1, 0x800}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x2, 0x28, 0x61, 0x20, 0x9}, 0x3b, &(0x7f0000000940)={0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x0, 0x7c}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x92, 0x110f, 0x7ff, [0xc0c0, 0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xa, 0x50}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xd, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0x400}]}, 0x7, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x439}}, {0x7e, &(0x7f00000009c0)=@string={0x7e, 0x3, "22b0d34cf8fcde7bee1789392d34c056c6b16d5fc47d72cc1f0eb3a81a671f057e020b20540d754f9963f766254186bcfb4a537362e38cd49e1efe67050011f2ac70d4f3883a20eab3a0e1de1e623cb292ff3b91e6470530729b5dd98eec4fdc5a47436335d0847d541c5b397ea37d6621c0fb8677f0e3dae40bd209"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x423}}, {0xaf, &(0x7f0000000b00)=@string={0xaf, 0x3, "217adc77473fb221cabf73c8d1321e8126730f0d0f40adc5686dc90d9c12632562bfe23298cd4c82bfb9fa5b0ffc66cf685cdbcd3f187cbbbabc9879094e02e14bdda00081cd99762fec2ed3220a1bd4fccf699ac2e0191e7c8f5afff1071ee50862ffd584eb19a84e0b4a26d3b987df71f21f667db24aede95a81e6005236d968a76a926b3ad22905941da2b73e85849d4f857549c260f25bf0c4eaf9dd0141211181fdad91840defcf66dfed"}}, {0x8e, &(0x7f0000000c80)=@string={0x8e, 0x3, "a89309f5383e0a88cb37fd26131c23cc2774bced5c4757525fbbc6f71ca03bb67e78a31522e6ff029c8c769246711fa825b5b783eea16520b902e2159ed332d6284c56db23e59268da489641198ca0aaaec22d821e5fdce44e3266cdf0912710b1bf41f49f61991d1ed7b5c9cdcea111afdbebfe6666dbb2633349d93ea27ba518b207cd9a8818f61ebb7dff"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x4, {0x4, 0x6, "b6f6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "c2f721de0f95d6f78931f635cac3e328ba2bfafe354dd13ee6a2469178f2d21be8e3d656d245c9b1b21d3c5ca2b4f481982dba5a99cb0dcab36633c234"}}, &(0x7f0000000140)={0x0, 0xf, 0x57, {0x5, 0xf, 0x57, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x20, "78314d49efac33cf567d7cc737a020c3"}, @generic={0x2f, 0x10, 0x4, "f2fc5c377c04a13a8ab57d0d47c4d50e0abd36707a49de57f5d83d7f9298d8512999a1bdaa0bbec00ffcafdc"}, @ptm_cap={0x3}, @generic={0xc, 0x10, 0xa, "fb0d6d806b4b3b05b2"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x10, 0xd3, 0xc, "e7a3f289", "342af3ca"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x5e, 0x1, 0xfe, 0x8001, 0x3f}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x16, 0x96, "4a45c7f44c21dea31ac63edfa1dc942aa8d2dc2114f47964a27363a99c6bdacebd9dc2a92765f67424e886e23096f5ca68aea8d352aa07199d7a8ac05373d850dabee3e1a462bfbd01bd06e33578059ca066c6020181cb70f50340ff57730ef99af43a6dee17e242f88bc15b95898aff432f41858f92055b62d287eb2178f2b12e2c2938f7cf8f7c6a3398c412469dd474d1313dc38e"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x8, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xf2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "548f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "d868"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) 07:36:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:24 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x13, &(0x7f0000000040)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x3, 0x9, 0x401, 0xb1}]}}) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_ep_read(r1, 0xe3, 0xdf, &(0x7f00000000c0)=""/223) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r2) (async) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x11, 0xfb, {0xfb, 0x30, "ee058c7c63178c9b94456863edb162bcd2899968b49d047b6c663a66176a12505b40dd1b4e95e42f70e36e9563842b9e6f7d855c0385e25506c3d1ea75aec3a2c8d641a04fe08c48c6deff98b7fbc7b7ccfb028dae8d61d0a29fff7e4dffb87eba7c16612559b09f68b69f01148dca46c4869b89eeb81ebc4a9482ab71bd4bbadeac65b3701370fae3df28fb707368980dd3653dbc028a169d433ecfcb06f892ad2aa6b915cd3bbb0bb480f95a775ad83f7d42181c6d5435d6361247cfe002d27401f2eb94d4ffb94cbb2e9e04d5990d5fc76774d43f83d4d88df12452b889798720a3e0582956563161ecd22174ccd37399dada1f4ac20f0a"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x384c}}, &(0x7f0000000380)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf0, 0x66, 0x8a58}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x8, 0x2, 0x40, 'e*q/', "04b4e7d7"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0xf9, 0x6, 0x3, 0x0, 0xffff}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x17, 0x4, "e28d88aa"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xe2}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xe650e209e3254084, 0x20}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "8b86"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "65f5"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x72ed}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xa4}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1595.740597][ T21] usb 6-1: USB disconnect, device number 71 [ 1595.772197][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1595.927005][T20096] binder: 20092:20096 ioctl c0306201 20001480 returned -14 [ 1595.933788][T20102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.944259][T20102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.963867][T20104] binder: 20100:20104 ioctl c00c620f 20000100 returned -22 [ 1595.988157][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.998505][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.004165][T20105] binder: BINDER_SET_CONTEXT_MGR already set [ 1596.012901][T20105] binder: 20094:20105 ioctl 4018620d 20000000 returned -16 07:36:25 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x13, &(0x7f0000000040)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x3, 0x9, 0x401, 0xb1}]}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_read(r1, 0xe3, 0xdf, &(0x7f00000000c0)=""/223) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r2) (async) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x11, 0xfb, {0xfb, 0x30, "ee058c7c63178c9b94456863edb162bcd2899968b49d047b6c663a66176a12505b40dd1b4e95e42f70e36e9563842b9e6f7d855c0385e25506c3d1ea75aec3a2c8d641a04fe08c48c6deff98b7fbc7b7ccfb028dae8d61d0a29fff7e4dffb87eba7c16612559b09f68b69f01148dca46c4869b89eeb81ebc4a9482ab71bd4bbadeac65b3701370fae3df28fb707368980dd3653dbc028a169d433ecfcb06f892ad2aa6b915cd3bbb0bb480f95a775ad83f7d42181c6d5435d6361247cfe002d27401f2eb94d4ffb94cbb2e9e04d5990d5fc76774d43f83d4d88df12452b889798720a3e0582956563161ecd22174ccd37399dada1f4ac20f0a"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x384c}}, &(0x7f0000000380)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf0, 0x66, 0x8a58}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x8, 0x2, 0x40, 'e*q/', "04b4e7d7"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0xf9, 0x6, 0x3, 0x0, 0xffff}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x17, 0x4, "e28d88aa"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xe2}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xe650e209e3254084, 0x20}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "8b86"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "65f5"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x72ed}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xa4}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1596.090826][T20108] binder: 20094:20108 ioctl c0306201 20001480 returned -14 [ 1596.118141][T20107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.128392][T20107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.173237][T11153] usb 1-1: new high-speed USB device number 95 using dummy_hcd 07:36:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1596.224315][T11046] usb 4-1: new high-speed USB device number 41 using dummy_hcd 07:36:25 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0xdd, {0xdd, 0x3, "263c44b979e9f5e27f8bc24b64f44fab52e891bda9827b30ff0695a2dd2d6f3602105bff5808f671ad3ccddc5d44ed00292a85f84c60d721940c663f5e513a4b5c62f267e5167fb5ea3f317abdf9a31e3abe238025c23c9a733b76a2cd1acdfb29b05779583e6efc698d96586700d0ae28a22204397a7febcbf799a98cb70320b92a4f291a52a34d2f414e8a453663037d8843771c18de6c249475f91df4d86e225e8090b2867bbee26586d1c387a573887c7d4873b3f7ee3bcff809776a547b9fccb32013b3eca73720a6233a6e3cfdacae93627a0889f0fbcb85"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000040)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x0, 0x8, 0x1f, 0xec}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0xb8, 0x46}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x80, 0x0, "8d38c2df", "eae4442c"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x2, 0x2, 0x80, 0xfb, 0x8, 0x2}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0xc, 0x8, "8842c0fbadbf508e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x40, 0x80, [0xff0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000480)={0x40, 0xb, 0x2, "1669"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "3499"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0xe}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x2000000}], 0x0, 0x0, 0x0}) 07:36:25 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1596.421195][T20116] binder: 20113:20116 ioctl c00c620f 20000100 returned -22 [ 1596.487330][T11046] usb 4-1: Using ep0 maxpacket: 32 [ 1596.527137][T20122] binder: 20119:20122 ioctl c0306201 20001480 returned -14 [ 1596.559495][T20122] binder_alloc: 20119: binder_alloc_buf, no vma [ 1596.568268][T20121] binder: BINDER_SET_CONTEXT_MGR already set 07:36:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1596.575621][T20121] binder: 20118:20121 ioctl 4018620d 20000000 returned -16 [ 1596.614499][T20121] binder: 20118:20121 ioctl c0306201 20001480 returned -14 [ 1596.633321][T11046] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1596.643214][T11046] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1596.652289][T11046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.662718][T11046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1596.672389][T11046] usb 4-1: config 1 has no interface number 0 07:36:25 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1596.679027][T11046] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1596.688448][T11046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:36:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x3000000}], 0x0, 0x0, 0x0}) [ 1596.751461][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found 07:36:25 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect$uac1(0x1b722d2c821f15b9, 0xe5, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0xe, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x1, 0x3, "dab8", "8e"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0xf8, "bc4d57"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x3, "7bee6584"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x7, 0x81, "c6e3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x5, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0xff, 0x7f, "e5", "62cdb6"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x80, 0x1, "afb8", "f8d158"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf9, 0x4, 0x8, 0xae}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x76, 0x2, 0x47, 0x3, "bdc1308b8d"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xa68, 0x401, 0x80, "e1"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x9, 0x7, "745bcada20bf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x20, 0x4, {0x7, 0x25, 0x1, 0x2, 0x60, 0x9}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xff, 0x20, 0x80, 0x20, 0x1}, 0x35, &(0x7f0000000040)={0x5, 0xf, 0x35, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x81, 0xc1, 0x7fff, 0x56}, @wireless={0xb, 0x10, 0x1, 0x4, 0x7b, 0xb0, 0x3, 0x0, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0xfff, 0xff00, 0xfffe, [0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0xd, 0xcd}, @ptm_cap={0x3}]}, 0x5, [{0xc9, &(0x7f0000000200)=@string={0xc9, 0x3, "0873a02a1216c624d864ec6f1eba890af9ed5620ac13eb2721628c3e7994170aa8096b0169ecfd1faede7e310b45950e82ecce9eb8c386a2e7fba1b7ba42eb662bc91605623e1c60b363783b5b79ed4d7b71b995c2f2b98ae5dbfd27ddcb1f5e7b68ba1a6b18f064984dffd7f450a2003371e2fbc1a1ce7716c5ebe33ca9d5a77f86f121f839fc602f168fa06cc3621f2e39046499e3e1fa9d0afd9c03bcbfd634fda181ae22bfe9e84938c971499d758eb5ee28b2f3122d68286c6be7c0245fedf3acd26b9732"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2801}}, {0x24, &(0x7f0000000340)=@string={0x24, 0x3, "ebc51992e582b7ab8fef0db820a8990386cd65cb3f54a49a845b8f638bc1e0e91d3b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x827}}, {0xde, &(0x7f00000003c0)=@string={0xde, 0x3, "e22b072e08f3835e5c379dff755d109e925be49b2a9ad3d8bb0d6610032ce0ea1597b9d7f5a9b100b036d7691cc6491e4bef2448822875d47700227f05764946d94aff3ab6a6922a859f5c566c91da0164d80b89db960f56e3a625c08443f6f74022e8e8a5745b08e648726938642fec324cee3afc4896ba8611103632d984cb114cf4c170f6a83c7202db362eb5f68c9345ae4673d852615b6995eac6f94a36fd2fc38007b89e8c94edc3deb31c944f66169c2b60544c879605ae663f3808494875d18563ab1c80b50fde89808cda39002cecf4a976b3e9fbb1ec10"}}]}) [ 1596.812091][ T21] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1596.870853][T20127] binder: 20126:20127 ioctl c00c620f 20000100 returned -22 [ 1596.883638][T11153] usb 1-1: device descriptor read/64, error -71 07:36:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1596.954384][T11046] snd_usb_pod 4-1:1.1: set_interface failed [ 1596.958006][T20129] binder: 20128:20129 ioctl c0306201 20001480 returned -14 [ 1596.960666][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1596.976474][T11046] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1597.047227][T20129] binder_alloc: 20128: binder_alloc_buf, no vma [ 1597.064378][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 1597.088626][T20134] binder: 20130:20134 ioctl c0306201 20001480 returned -14 [ 1597.129188][T20134] binder_alloc: 20130: binder_alloc_buf size 50331776 failed, no address space [ 1597.138727][T20134] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1597.153249][T11046] usb 4-1: USB disconnect, device number 41 [ 1597.213320][ T21] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1597.222779][ T21] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1597.231645][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1597.241151][ T21] usb 6-1: config 1 has no interface number 0 [ 1597.247564][ T21] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1597.259116][ T21] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1597.272745][ T21] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1597.282276][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.329317][T20136] binder: 20135:20136 ioctl c00c620f 20000100 returned -22 [ 1597.402969][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1597.409742][T11153] usb 1-1: new high-speed USB device number 96 using dummy_hcd 07:36:26 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x5) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x5, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000010902f98a5c0100000409040100"/30], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x40, 0x0}]}) 07:36:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x4000000}], 0x0, 0x0, 0x0}) 07:36:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1597.566857][T20141] binder: 20137:20141 ioctl c00c620f 20000100 returned -22 [ 1597.603145][T20140] binder: 20138:20140 ioctl c0306201 20001480 returned -14 [ 1597.604576][T20142] binder: 20139:20142 ioctl c0306201 20001480 returned -14 [ 1597.644349][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1597.672040][T11153] usb 1-1: Using ep0 maxpacket: 32 [ 1597.687465][T20142] binder_alloc: 20139: binder_alloc_buf, no vma [ 1597.702280][T20140] binder_alloc: 20138: binder_alloc_buf size 67108992 failed, no address space [ 1597.715522][T20140] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1597.823132][T11153] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1597.832756][T11153] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1597.841633][T11153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1597.851289][T11153] usb 1-1: config 1 has no interface number 0 [ 1597.857813][T11153] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1597.869431][T11153] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1597.883367][T11153] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1597.892936][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.980880][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1598.028873][T11046] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1598.193887][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1598.226699][T11046] usb 4-1: device descriptor read/64, error 18 [ 1598.502067][T11046] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1598.692170][T11046] usb 4-1: device descriptor read/64, error 18 [ 1598.722276][T11153] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1598.815642][T11046] usb usb4-port1: attempt power cycle [ 1598.998279][ T5033] usb 1-1: USB disconnect, device number 96 [ 1599.013913][ T5033] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1599.232141][T11046] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1599.322538][T11046] usb 4-1: Invalid ep0 maxpacket: 2 [ 1599.472315][T11046] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1599.511206][ T5033] usb 6-1: USB disconnect, device number 72 07:36:28 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000414361a0f3f7c5c2f7fb39000001090b03712a370b844c8b3adfce0582177f9400"/49], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5000000}], 0x0, 0x0, 0x0}) [ 1599.523581][ T5033] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 07:36:28 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect$uac1(0x1b722d2c821f15b9, 0xe5, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0xe, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x1, 0x3, "dab8", "8e"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0xf8, "bc4d57"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x3, "7bee6584"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x7, 0x81, "c6e3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x5, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0xff, 0x7f, "e5", "62cdb6"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x80, 0x1, "afb8", "f8d158"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf9, 0x4, 0x8, 0xae}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x76, 0x2, 0x47, 0x3, "bdc1308b8d"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xa68, 0x401, 0x80, "e1"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x9, 0x7, "745bcada20bf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x20, 0x4, {0x7, 0x25, 0x1, 0x2, 0x60, 0x9}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xff, 0x20, 0x80, 0x20, 0x1}, 0x35, &(0x7f0000000040)={0x5, 0xf, 0x35, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x81, 0xc1, 0x7fff, 0x56}, @wireless={0xb, 0x10, 0x1, 0x4, 0x7b, 0xb0, 0x3, 0x0, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0xfff, 0xff00, 0xfffe, [0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0xd, 0xcd}, @ptm_cap={0x3}]}, 0x5, [{0xc9, &(0x7f0000000200)=@string={0xc9, 0x3, "0873a02a1216c624d864ec6f1eba890af9ed5620ac13eb2721628c3e7994170aa8096b0169ecfd1faede7e310b45950e82ecce9eb8c386a2e7fba1b7ba42eb662bc91605623e1c60b363783b5b79ed4d7b71b995c2f2b98ae5dbfd27ddcb1f5e7b68ba1a6b18f064984dffd7f450a2003371e2fbc1a1ce7716c5ebe33ca9d5a77f86f121f839fc602f168fa06cc3621f2e39046499e3e1fa9d0afd9c03bcbfd634fda181ae22bfe9e84938c971499d758eb5ee28b2f3122d68286c6be7c0245fedf3acd26b9732"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2801}}, {0x24, &(0x7f0000000340)=@string={0x24, 0x3, "ebc51992e582b7ab8fef0db820a8990386cd65cb3f54a49a845b8f638bc1e0e91d3b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x827}}, {0xde, &(0x7f00000003c0)=@string={0xde, 0x3, "e22b072e08f3835e5c379dff755d109e925be49b2a9ad3d8bb0d6610032ce0ea1597b9d7f5a9b100b036d7691cc6491e4bef2448822875d47700227f05764946d94aff3ab6a6922a859f5c566c91da0164d80b89db960f56e3a625c08443f6f74022e8e8a5745b08e648726938642fec324cee3afc4896ba8611103632d984cb114cf4c170f6a83c7202db362eb5f68c9345ae4673d852615b6995eac6f94a36fd2fc38007b89e8c94edc3deb31c944f66169c2b60544c879605ae663f3808494875d18563ab1c80b50fde89808cda39002cecf4a976b3e9fbb1ec10"}}]}) [ 1599.572769][T11046] usb 4-1: Invalid ep0 maxpacket: 2 [ 1599.590695][T11046] usb usb4-port1: unable to enumerate USB device [ 1599.670037][T20153] binder: 20151:20153 ioctl c00c620f 20000100 returned -22 [ 1599.699320][T20152] binder: 20149:20152 ioctl c0306201 20001480 returned -14 [ 1599.712209][T20154] binder: 20150:20154 ioctl c0306201 20001480 returned -14 [ 1599.731144][T20154] binder_alloc: 20150: binder_alloc_buf, no vma [ 1599.791523][T20152] binder_alloc: 20149: binder_alloc_buf size 83886208 failed, no address space [ 1599.801667][T20152] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x48, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x6000000}], 0x0, 0x0, 0x0}) [ 1599.985343][T20161] binder: 20160:20161 ioctl c00c620f 20000100 returned -22 [ 1600.049178][T20163] binder: 20162:20163 ioctl c0306201 20001480 returned -14 [ 1600.077193][T20163] binder_alloc: 20162: binder_alloc_buf size 100663424 failed, no address space [ 1600.087112][T20163] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1600.090783][T20165] binder: 20164:20165 ioctl c0306201 20001480 returned -14 [ 1600.097460][T11046] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1600.130612][T20165] binder_alloc: 20164: binder_alloc_buf, no vma [ 1600.142874][T11153] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1600.352076][T11046] usb 1-1: Using ep0 maxpacket: 32 [ 1600.352145][T11153] usb 6-1: device descriptor read/64, error 18 [ 1600.486958][T11046] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1600.495683][T11046] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1600.504796][T11046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1600.514201][T11046] usb 1-1: config 1 has no interface number 0 [ 1600.520596][T11046] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1600.531980][T11046] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1600.545373][T11046] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1600.554867][T11046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.610832][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1600.642427][T11153] usb 6-1: new high-speed USB device number 74 using dummy_hcd 07:36:29 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x5) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x5, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000010902f98a5c0100000409040100"/30], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x40, 0x0}]}) 07:36:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x7000000}], 0x0, 0x0, 0x0}) [ 1600.769363][T20169] binder: 20168:20169 ioctl c00c620f 20000100 returned -22 [ 1600.799775][T20170] binder: 20166:20170 ioctl c0306201 20001480 returned -14 [ 1600.811515][T20171] binder: 20167:20171 ioctl c0306201 20001480 returned -14 [ 1600.832036][T11153] usb 6-1: device descriptor read/64, error 18 [ 1600.834427][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1600.868333][T20171] binder_alloc: 20167: binder_alloc_buf size 117440640 failed, no address space [ 1600.878178][T20171] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1600.902793][T20170] binder_alloc: 20166: binder_alloc_buf, no vma [ 1600.952867][T11153] usb usb6-port1: attempt power cycle [ 1601.222061][T11046] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1601.392130][T11153] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1601.412571][T11046] usb 4-1: device descriptor read/64, error 18 [ 1601.512418][T11153] usb 6-1: Invalid ep0 maxpacket: 160 [ 1601.609889][T16196] usb 1-1: USB disconnect, device number 97 [ 1601.621091][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1601.672459][T11153] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1601.684349][T11046] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1601.772257][T11153] usb 6-1: Invalid ep0 maxpacket: 160 [ 1601.778974][T11153] usb usb6-port1: unable to enumerate USB device [ 1601.881970][T11046] usb 4-1: device descriptor read/64, error 18 [ 1602.002782][T11046] usb usb4-port1: attempt power cycle [ 1602.412100][T11046] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1602.512311][T11046] usb 4-1: Invalid ep0 maxpacket: 2 [ 1602.661951][T11046] usb 4-1: new high-speed USB device number 49 using dummy_hcd 07:36:31 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000414361a0f3f7c5c2f7fb39000001090b03712a370b844c8b3adfce0582177f9400"/49], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x8000000}], 0x0, 0x0, 0x0}) 07:36:31 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect$uac1(0x1b722d2c821f15b9, 0xe5, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0xe, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x1, 0x3, "dab8", "8e"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0xf8, "bc4d57"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x3, "7bee6584"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x7, 0x81, "c6e3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x5, 0x2, {0x7, 0x25, 0x1, 0x81, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0xff, 0x7f, "e5", "62cdb6"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x80, 0x1, "afb8", "f8d158"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf9, 0x4, 0x8, 0xae}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x76, 0x2, 0x47, 0x3, "bdc1308b8d"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xa68, 0x401, 0x80, "e1"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x9, 0x7, "745bcada20bf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x20, 0x4, {0x7, 0x25, 0x1, 0x2, 0x60, 0x9}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xff, 0x20, 0x80, 0x20, 0x1}, 0x35, &(0x7f0000000040)={0x5, 0xf, 0x35, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x81, 0xc1, 0x7fff, 0x56}, @wireless={0xb, 0x10, 0x1, 0x4, 0x7b, 0xb0, 0x3, 0x0, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0xfff, 0xff00, 0xfffe, [0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0xd, 0xcd}, @ptm_cap={0x3}]}, 0x5, [{0xc9, &(0x7f0000000200)=@string={0xc9, 0x3, "0873a02a1216c624d864ec6f1eba890af9ed5620ac13eb2721628c3e7994170aa8096b0169ecfd1faede7e310b45950e82ecce9eb8c386a2e7fba1b7ba42eb662bc91605623e1c60b363783b5b79ed4d7b71b995c2f2b98ae5dbfd27ddcb1f5e7b68ba1a6b18f064984dffd7f450a2003371e2fbc1a1ce7716c5ebe33ca9d5a77f86f121f839fc602f168fa06cc3621f2e39046499e3e1fa9d0afd9c03bcbfd634fda181ae22bfe9e84938c971499d758eb5ee28b2f3122d68286c6be7c0245fedf3acd26b9732"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2801}}, {0x24, &(0x7f0000000340)=@string={0x24, 0x3, "ebc51992e582b7ab8fef0db820a8990386cd65cb3f54a49a845b8f638bc1e0e91d3b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x827}}, {0xde, &(0x7f00000003c0)=@string={0xde, 0x3, "e22b072e08f3835e5c379dff755d109e925be49b2a9ad3d8bb0d6610032ce0ea1597b9d7f5a9b100b036d7691cc6491e4bef2448822875d47700227f05764946d94aff3ab6a6922a859f5c566c91da0164d80b89db960f56e3a625c08443f6f74022e8e8a5745b08e648726938642fec324cee3afc4896ba8611103632d984cb114cf4c170f6a83c7202db362eb5f68c9345ae4673d852615b6995eac6f94a36fd2fc38007b89e8c94edc3deb31c944f66169c2b60544c879605ae663f3808494875d18563ab1c80b50fde89808cda39002cecf4a976b3e9fbb1ec10"}}]}) [ 1602.752381][T11046] usb 4-1: Invalid ep0 maxpacket: 2 [ 1602.758485][T11046] usb usb4-port1: unable to enumerate USB device [ 1602.867165][T20183] binder: 20177:20183 ioctl c0306201 20001480 returned -14 [ 1602.890044][T20183] binder_alloc: 20177: binder_alloc_buf size 134217856 failed, no address space [ 1602.900457][T20183] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1602.929775][T20181] binder: 20180:20181 ioctl c0306201 20001480 returned -14 [ 1602.959914][T20184] binder: 20182:20184 ioctl c00c620f 20000100 returned -22 [ 1602.974257][T20181] binder_alloc: 20180: binder_alloc_buf, no vma 07:36:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x9000000}], 0x0, 0x0, 0x0}) [ 1603.102258][T11046] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1603.203807][T20191] binder: 20189:20191 ioctl c0306201 20001480 returned -14 [ 1603.212162][T20192] binder: 20188:20192 ioctl c00c620f 20000100 returned -22 [ 1603.250080][T20191] binder_alloc: 20189: binder_alloc_buf size 150995072 failed, no address space [ 1603.259857][T20191] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1603.292092][T11153] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1603.355198][T11046] usb 1-1: Using ep0 maxpacket: 32 [ 1603.472887][T11046] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1603.481951][T11046] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1603.490782][T11046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1603.500143][T11046] usb 1-1: config 1 has no interface number 0 [ 1603.506557][T11046] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1603.512166][T11153] usb 6-1: device descriptor read/64, error 18 [ 1603.517749][T11046] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1603.538399][T11046] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1603.547763][T11046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.611108][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1603.792038][T11153] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1603.816069][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached 07:36:32 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x5) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x5, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000010902f98a5c0100000409040100"/30], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x40, 0x0}]}) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x5) (async) dup(r0) (async) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x5, 0x2000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000010902f98a5c0100000409040100"/30], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x40, 0x0}]}) (async) 07:36:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:32 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x68, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xa000000}], 0x0, 0x0, 0x0}) [ 1604.000748][T20200] binder: 20194:20200 ioctl c00c620f 20000100 returned -22 [ 1604.009252][T20198] binder: 20195:20198 ioctl c0306201 20001480 returned -14 [ 1604.012339][T11153] usb 6-1: device descriptor read/64, error 18 [ 1604.052684][T20198] binder_alloc: 20195: binder_alloc_buf size 167772288 failed, no address space [ 1604.066321][T20198] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1604.149993][T11153] usb usb6-port1: attempt power cycle [ 1604.352350][T11046] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1604.542251][T11046] usb 4-1: device descriptor read/64, error 18 [ 1604.582331][T11153] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1604.586910][T16196] usb 1-1: USB disconnect, device number 98 [ 1604.600112][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1604.682809][T11153] usb 6-1: Invalid ep0 maxpacket: 160 [ 1604.811990][T11046] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1604.832161][T11153] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1604.932256][T11153] usb 6-1: Invalid ep0 maxpacket: 160 [ 1604.938975][T11153] usb usb6-port1: unable to enumerate USB device [ 1605.002004][T11046] usb 4-1: device descriptor read/64, error 18 [ 1605.122653][T11046] usb usb4-port1: attempt power cycle [ 1605.542130][T11046] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1605.632408][T11046] usb 4-1: Invalid ep0 maxpacket: 2 [ 1605.781999][T11046] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1605.882336][T11046] usb 4-1: Invalid ep0 maxpacket: 2 [ 1605.891106][T11046] usb usb4-port1: unable to enumerate USB device 07:36:35 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000414361a0f3f7c5c2f7fb39000001090b03712a370b844c8b3adfce0582177f9400"/49], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000414361a0f3f7c5c2f7fb39000001090b03712a370b844c8b3adfce0582177f9400"/49], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xb000000}], 0x0, 0x0, 0x0}) 07:36:35 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x35, {0x35, 0x0, "cf95aa799375d92c439ba40e81bd2a10b17de27f64de4d4aa2dbca4d36fade199469fa5d3525c017b13526d1dd93aa5fdfb51d"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "3baf5ea1303139c1a6fc288105ce933e59be556f907573056040e4684e0fa40ad779369cf25c332e479295df3ecd01f12e790994b860832a48d5b0e3cc7c39953bb7efa4e845b669648f4242776f924dfd1b9279337d4a246da393f070a05cb85d5bb3a9b1f5b215bfe2d14640e798b16fe95942f971297270eaeabb7e3bf2caced0b6967945b11fe404865a90da097db958cc46057a93967afac2c62a6182b8861e0eece373141912418c7cde73f408cff8d688915c24"}}, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x8, 0x72, "8703e501", "98e8643b"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x4, 0x2, 0x5, 0x2, 0x8, 0x1}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17, 0xa3, "e74ffa6411ac9471e2aeea59eb6d303e7a67d2a400240549b1be4587c749f2efd2aba35fb54278eca200ee73a3d06fcb1841945896c2bf29e299aa056eb346b810b901b2f1762cebc829b98339181abcbdb78be494b88cbe48dc4d37d2380c5e03ea80c40f25ca710534c3e63749b807d8593b7f66143d3727ba9a578ecd9e015772e4d9224fea6a6e3eb809ccfe2d34cbc22f1b3760df5bec56717bc8c2ee41ec9571"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x100, 0x2, [0xf0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "1f59"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "90b0"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1606.059414][T20206] binder: 20205:20206 ioctl c00c620f 20000100 returned -22 [ 1606.122810][T20209] binder: BINDER_SET_CONTEXT_MGR already set [ 1606.129074][T20209] binder: 20202:20209 ioctl 4018620d 20000000 returned -16 [ 1606.159355][T20212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 07:36:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x74, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1606.170382][T20212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1606.221026][T20209] binder: 20202:20209 ioctl c0306201 20001480 returned -14 [ 1606.297036][T20215] binder: 20214:20215 ioctl c00c620f 20000100 returned -22 [ 1606.333947][T11153] usb 1-1: new high-speed USB device number 99 using dummy_hcd 07:36:35 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1606.412565][T11046] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1606.448237][T20218] binder: 20216:20218 ioctl c0306201 0 returned -14 [ 1606.449881][T20219] binder: 20217:20219 ioctl c00c620f 20000100 returned -22 [ 1606.602392][T11153] usb 1-1: Using ep0 maxpacket: 32 [ 1606.612751][T11046] usb 6-1: device descriptor read/64, error 18 [ 1606.742391][T11153] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1606.751189][T11153] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1606.760254][T11153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1606.769559][T11153] usb 1-1: config 1 has no interface number 0 [ 1606.776111][T11153] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1606.787440][T11153] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1606.800840][T11153] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1606.810619][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.892182][T11046] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1606.900554][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found 07:36:36 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000414321245c6120410e5150e8d5000000010902f98a5c01000000"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) 07:36:36 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xc000000}], 0x0, 0x0, 0x0}) [ 1607.082764][T11046] usb 6-1: device descriptor read/64, error 18 [ 1607.114779][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1607.139521][T20222] binder: 20220:20222 ioctl c0306201 20001480 returned -14 [ 1607.156949][T20224] binder: 20223:20224 ioctl c00c620f 20000100 returned -22 [ 1607.190744][T20222] binder_alloc: 20220: binder_alloc_buf size 201326720 failed, no address space [ 1607.200494][T20222] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1607.217199][T11046] usb usb6-port1: attempt power cycle [ 1607.224509][T20225] binder: 20221:20225 ioctl c0306201 0 returned -14 [ 1607.544428][ T21] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1607.646838][T11046] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1607.742070][ T21] usb 4-1: device descriptor read/64, error 18 [ 1607.742469][T11046] usb 6-1: Invalid ep0 maxpacket: 160 [ 1607.912089][T11046] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1608.003233][T11046] usb 6-1: Invalid ep0 maxpacket: 160 [ 1608.009633][T11046] usb usb6-port1: unable to enumerate USB device [ 1608.022284][ T21] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1608.169714][T11153] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1608.242108][ T21] usb 4-1: device descriptor read/64, error 18 [ 1608.365404][ T21] usb usb4-port1: attempt power cycle [ 1608.792017][ T21] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1608.882399][ T21] usb 4-1: Invalid ep0 maxpacket: 36 [ 1609.042214][ T21] usb 4-1: new high-speed USB device number 57 using dummy_hcd 07:36:38 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) r1 = syz_usb_connect$printer(0xc201df363c8520db, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf9, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x81, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x81, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x40, 0x7f, 0xff, 0x1}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xfe, 0x1, 0x7fffff8, 0x7800, 0x0, [0xff0030]}]}, 0x6, [{0xef, &(0x7f0000000200)=@string={0xef, 0x3, "77e65a4ffa4a852a5d6cdca41e11bfe437d5664e47ee7593565c87e60329c325b8b2058c67cc552e2495da7dfc18757605813420162579aad0f64658dffc12a5b9e24c13e06d654e6763f00ca915bf8f1eb56a6ed01088d1c138dcc1f842ff90749e51a0a3da5e25f45528b56c767065f8d19d98efaddfa05d0d0678f5b4374bb669f2f20479699fcb35224f0baf8e97408f9cc74668cb7aad9801606e7f98b263e3690519e77150e1a8056709a50b377e5e69146fdeb56817dbcdc133a468fde98f74bb2fb2663dc3ec93cc69c6db1672d15b7979b85183b6950d96d5284a0efe2293c3543afcf6c9e5626629"}}, {0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "39de6a1c5ef663a850eeef0a3a7b89fd2671dc2c8090d4efd4fc515a2b98947517b6f034cf2f8690a6eaa485cbcad64eeff2fe1f7bc3e8b0fb11f58e738bc01bbce79ef764bb93ea41b64ecdafa8eda480470c01e224061a40b0822563eb7d82c169e2a11c8f0131020b967713adc7424ce9a5f7bb2fc4b2840097481f4e03019f8c146ce104277a1130abe8b8252eabbede770622fef5e3d664c2fb3a9f8dba9cf50843a1ca98f4ec90b473d0c9935857c3effdf6326fe1ea1a4196815c6f82a158bed0107a413acd9faf4b078b75ba4b54e8b47f6f76f91ba222fbf8"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0xf8, &(0x7f0000000400)=@string={0xf8, 0x3, "e2751c866e0d9d3fb1258824af12bb807df392719b2239cae546f2f9b64240cd5ac663b8763d145c5ef906aeb95e2fd7c8cc30b79b30126347bc852cd9ea1f6dac4388965917bcbf02988fdf7f9198f52469983d1807d12ae795fec89d1c2b0b999be76a455537394f40ced0661c57f5b6f5d15bc5538cbe6a5d6c06f911822d44975a6263dc10642d2646ed6d0da629a737f8e49da99b30936c4e86203a6a04c00c4407b6062cf3e0c11028bc558f2cc35e2f2aafe0dff59d80cccfeb2a2f44be0ee0597006afd676a8ef32fce5f93ac93260e849c3c593ff86c8f4a7beac13849512d10ed441fc992f366e9663830b25bb6c844758"}}, {0xc, &(0x7f0000000180)=@string={0xc, 0x3, "1fcc83009397d633434d"}}]}) syz_usb_control_io(r1, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x40, 0x24, 0x8a, {0x8a, 0xf, "d4e3a77d9f36bdb1722aff15a5f554042752b15797d4a2bca94a7366fde217e051833b13621d8a8620637c31ca19460feb4116aef949186db68834875afb67b5903577531c45748d276e1d6e78975fabcb2565e48bc7adff82542b2a7d2ea424c0539845a47620540b622f317ece81362fb93ffa325bdbf563dc59dd2bd07a19cd45335cadd79357"}}, &(0x7f0000000680)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "46d48fa7bbac5754ff813130f9774ccc60c39da524579c55fa6a72a35cdc6c4cd3abf7ede0d7c287e70f9cac55a7a98b621adae951f205aa2034077c714d77faa3343268bd4e2f4a7b78a855f532d39814709ae8addd9d56b180c70e6cc34ae9184325d0e966948a03a3e8c28ed176c0fde959436d86744efc9cd6fe13f5f70464b3d9fad2dad9ec8020d8f309ac5b852896adc3f8632b98d1a2416bf451ffdbb82d6bc90502aa895b392ca91b5b132b1251273f37aafabd209931ec99fd500ec90805f4425a0078cc58300da561b0df14b99975b16c58de410aedcddd1a8fe3f46bb881"}}, &(0x7f0000000780)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x8, 0x8, "20e17385", "d0ddc23b"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x4, 0xfd, 0x0, 0x1}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x20, 0x1, 0x73, "3f2a3e177839f3172eda3123a8455c974cd062fc299db66bb5e3ac160176da4e1b9c8dc96eedc613060ff4d1caf37599f9231a6e6a3263762dd32c819db1cf31049930b91575a64be29510c74655df4e28796cfa58a2ce943fcdeb779ebe2c94fcd8a95c27999a2f34264d91b0be84231110af"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x57a0894dd41c4ba2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x8, 0x40, [0xf00]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "fad5"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "d5af"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x1d86}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x7}}) 07:36:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xd000000}], 0x0, 0x0, 0x0}) [ 1609.135126][ T21] usb 4-1: Invalid ep0 maxpacket: 36 [ 1609.145358][ T21] usb usb4-port1: unable to enumerate USB device [ 1609.236118][T20235] binder: 20232:20235 ioctl c00c620f 20000100 returned -22 [ 1609.254886][T20234] binder: 20230:20234 ioctl c0306201 0 returned -14 [ 1609.265596][T20233] binder: 20231:20233 ioctl c0306201 20001480 returned -14 07:36:38 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x35, {0x35, 0x0, "cf95aa799375d92c439ba40e81bd2a10b17de27f64de4d4aa2dbca4d36fade199469fa5d3525c017b13526d1dd93aa5fdfb51d"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "3baf5ea1303139c1a6fc288105ce933e59be556f907573056040e4684e0fa40ad779369cf25c332e479295df3ecd01f12e790994b860832a48d5b0e3cc7c39953bb7efa4e845b669648f4242776f924dfd1b9279337d4a246da393f070a05cb85d5bb3a9b1f5b215bfe2d14640e798b16fe95942f971297270eaeabb7e3bf2caced0b6967945b11fe404865a90da097db958cc46057a93967afac2c62a6182b8861e0eece373141912418c7cde73f408cff8d688915c24"}}, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x8, 0x72, "8703e501", "98e8643b"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x4, 0x2, 0x5, 0x2, 0x8, 0x1}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17, 0xa3, "e74ffa6411ac9471e2aeea59eb6d303e7a67d2a400240549b1be4587c749f2efd2aba35fb54278eca200ee73a3d06fcb1841945896c2bf29e299aa056eb346b810b901b2f1762cebc829b98339181abcbdb78be494b88cbe48dc4d37d2380c5e03ea80c40f25ca710534c3e63749b807d8593b7f66143d3727ba9a578ecd9e015772e4d9224fea6a6e3eb809ccfe2d34cbc22f1b3760df5bec56717bc8c2ee41ec9571"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x100, 0x2, [0xf0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "1f59"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "90b0"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1609.362804][ T21] usb 1-1: USB disconnect, device number 99 [ 1609.380201][T20233] binder_alloc: 20231: binder_alloc_buf size 218103936 failed, no address space [ 1609.393618][T20233] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1609.422638][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:36:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xe000000}], 0x0, 0x0, 0x0}) [ 1609.572186][T11046] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1609.583360][T20241] binder: 20239:20241 ioctl c00c620f 20000100 returned -22 [ 1609.781589][T20248] binder: 20247:20248 ioctl c0306201 20001480 returned -14 [ 1609.812165][T11046] usb 6-1: Using ep0 maxpacket: 32 [ 1609.822881][T20248] binder_alloc: 20247: binder_alloc_buf size 234881152 failed, no address space [ 1609.832602][T20248] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1609.942409][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1609.951390][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1609.960740][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1609.970128][T11046] usb 6-1: config 1 has no interface number 0 [ 1609.976705][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1609.988244][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1610.005390][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1610.015561][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.022072][ T21] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1610.080622][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found 07:36:39 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000414321245c6120410e5150e8d5000000010902f98a5c01000000"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) 07:36:39 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x10000000}], 0x0, 0x0, 0x0}) [ 1610.267763][T20250] binder: 20249:20250 ioctl c00c620f 20000100 returned -22 [ 1610.294294][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1610.312060][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 1610.384373][T20253] binder: 20251:20253 ioctl c0306201 20001480 returned -14 [ 1610.450639][T20253] binder_alloc: 20251: binder_alloc_buf size 268435584 failed, no address space [ 1610.460176][T20253] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1610.462891][ T21] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1610.479660][ T21] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1610.489015][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1610.498457][ T21] usb 1-1: config 1 has no interface number 0 [ 1610.504838][ T21] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1610.516037][ T21] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1610.529468][ T21] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1610.538830][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.641585][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1610.842413][ T21] snd_usb_pod 1-1:1.1: set_interface failed [ 1610.848699][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1610.857297][ T21] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 1610.868380][ T21] usb 1-1: USB disconnect, device number 100 [ 1610.885346][T11153] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1611.080684][T16196] usb 6-1: USB disconnect, device number 85 [ 1611.092166][T11153] usb 4-1: device descriptor read/64, error 18 [ 1611.101593][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1611.372490][T11153] usb 4-1: new high-speed USB device number 59 using dummy_hcd 07:36:40 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) r1 = syz_usb_connect$printer(0xc201df363c8520db, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf9, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x81, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x81, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x40, 0x7f, 0xff, 0x1}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xfe, 0x1, 0x7fffff8, 0x7800, 0x0, [0xff0030]}]}, 0x6, [{0xef, &(0x7f0000000200)=@string={0xef, 0x3, "77e65a4ffa4a852a5d6cdca41e11bfe437d5664e47ee7593565c87e60329c325b8b2058c67cc552e2495da7dfc18757605813420162579aad0f64658dffc12a5b9e24c13e06d654e6763f00ca915bf8f1eb56a6ed01088d1c138dcc1f842ff90749e51a0a3da5e25f45528b56c767065f8d19d98efaddfa05d0d0678f5b4374bb669f2f20479699fcb35224f0baf8e97408f9cc74668cb7aad9801606e7f98b263e3690519e77150e1a8056709a50b377e5e69146fdeb56817dbcdc133a468fde98f74bb2fb2663dc3ec93cc69c6db1672d15b7979b85183b6950d96d5284a0efe2293c3543afcf6c9e5626629"}}, {0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "39de6a1c5ef663a850eeef0a3a7b89fd2671dc2c8090d4efd4fc515a2b98947517b6f034cf2f8690a6eaa485cbcad64eeff2fe1f7bc3e8b0fb11f58e738bc01bbce79ef764bb93ea41b64ecdafa8eda480470c01e224061a40b0822563eb7d82c169e2a11c8f0131020b967713adc7424ce9a5f7bb2fc4b2840097481f4e03019f8c146ce104277a1130abe8b8252eabbede770622fef5e3d664c2fb3a9f8dba9cf50843a1ca98f4ec90b473d0c9935857c3effdf6326fe1ea1a4196815c6f82a158bed0107a413acd9faf4b078b75ba4b54e8b47f6f76f91ba222fbf8"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0xf8, &(0x7f0000000400)=@string={0xf8, 0x3, "e2751c866e0d9d3fb1258824af12bb807df392719b2239cae546f2f9b64240cd5ac663b8763d145c5ef906aeb95e2fd7c8cc30b79b30126347bc852cd9ea1f6dac4388965917bcbf02988fdf7f9198f52469983d1807d12ae795fec89d1c2b0b999be76a455537394f40ced0661c57f5b6f5d15bc5538cbe6a5d6c06f911822d44975a6263dc10642d2646ed6d0da629a737f8e49da99b30936c4e86203a6a04c00c4407b6062cf3e0c11028bc558f2cc35e2f2aafe0dff59d80cccfeb2a2f44be0ee0597006afd676a8ef32fce5f93ac93260e849c3c593ff86c8f4a7beac13849512d10ed441fc992f366e9663830b25bb6c844758"}}, {0xc, &(0x7f0000000180)=@string={0xc, 0x3, "1fcc83009397d633434d"}}]}) syz_usb_control_io(r1, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x40, 0x24, 0x8a, {0x8a, 0xf, "d4e3a77d9f36bdb1722aff15a5f554042752b15797d4a2bca94a7366fde217e051833b13621d8a8620637c31ca19460feb4116aef949186db68834875afb67b5903577531c45748d276e1d6e78975fabcb2565e48bc7adff82542b2a7d2ea424c0539845a47620540b622f317ece81362fb93ffa325bdbf563dc59dd2bd07a19cd45335cadd79357"}}, &(0x7f0000000680)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "46d48fa7bbac5754ff813130f9774ccc60c39da524579c55fa6a72a35cdc6c4cd3abf7ede0d7c287e70f9cac55a7a98b621adae951f205aa2034077c714d77faa3343268bd4e2f4a7b78a855f532d39814709ae8addd9d56b180c70e6cc34ae9184325d0e966948a03a3e8c28ed176c0fde959436d86744efc9cd6fe13f5f70464b3d9fad2dad9ec8020d8f309ac5b852896adc3f8632b98d1a2416bf451ffdbb82d6bc90502aa895b392ca91b5b132b1251273f37aafabd209931ec99fd500ec90805f4425a0078cc58300da561b0df14b99975b16c58de410aedcddd1a8fe3f46bb881"}}, &(0x7f0000000780)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x8, 0x8, "20e17385", "d0ddc23b"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x4, 0xfd, 0x0, 0x1}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x20, 0x1, 0x73, "3f2a3e177839f3172eda3123a8455c974cd062fc299db66bb5e3ac160176da4e1b9c8dc96eedc613060ff4d1caf37599f9231a6e6a3263762dd32c819db1cf31049930b91575a64be29510c74655df4e28796cfa58a2ce943fcdeb779ebe2c94fcd8a95c27999a2f34264d91b0be84231110af"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x57a0894dd41c4ba2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x8, 0x40, [0xf00]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "fad5"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "d5af"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x1d86}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x7}}) 07:36:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x900, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1611.561942][T11153] usb 4-1: device descriptor read/64, error 18 07:36:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x11000000}], 0x0, 0x0, 0x0}) 07:36:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:40 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x35, {0x35, 0x0, "cf95aa799375d92c439ba40e81bd2a10b17de27f64de4d4aa2dbca4d36fade199469fa5d3525c017b13526d1dd93aa5fdfb51d"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "3baf5ea1303139c1a6fc288105ce933e59be556f907573056040e4684e0fa40ad779369cf25c332e479295df3ecd01f12e790994b860832a48d5b0e3cc7c39953bb7efa4e845b669648f4242776f924dfd1b9279337d4a246da393f070a05cb85d5bb3a9b1f5b215bfe2d14640e798b16fe95942f971297270eaeabb7e3bf2caced0b6967945b11fe404865a90da097db958cc46057a93967afac2c62a6182b8861e0eece373141912418c7cde73f408cff8d688915c24"}}, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x8, 0x72, "8703e501", "98e8643b"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x4, 0x2, 0x5, 0x2, 0x8, 0x1}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17, 0xa3, "e74ffa6411ac9471e2aeea59eb6d303e7a67d2a400240549b1be4587c749f2efd2aba35fb54278eca200ee73a3d06fcb1841945896c2bf29e299aa056eb346b810b901b2f1762cebc829b98339181abcbdb78be494b88cbe48dc4d37d2380c5e03ea80c40f25ca710534c3e63749b807d8593b7f66143d3727ba9a578ecd9e015772e4d9224fea6a6e3eb809ccfe2d34cbc22f1b3760df5bec56717bc8c2ee41ec9571"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x100, 0x2, [0xf0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "1f59"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "90b0"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x35, {0x35, 0x0, "cf95aa799375d92c439ba40e81bd2a10b17de27f64de4d4aa2dbca4d36fade199469fa5d3525c017b13526d1dd93aa5fdfb51d"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "3baf5ea1303139c1a6fc288105ce933e59be556f907573056040e4684e0fa40ad779369cf25c332e479295df3ecd01f12e790994b860832a48d5b0e3cc7c39953bb7efa4e845b669648f4242776f924dfd1b9279337d4a246da393f070a05cb85d5bb3a9b1f5b215bfe2d14640e798b16fe95942f971297270eaeabb7e3bf2caced0b6967945b11fe404865a90da097db958cc46057a93967afac2c62a6182b8861e0eece373141912418c7cde73f408cff8d688915c24"}}, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x8, 0x72, "8703e501", "98e8643b"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x4, 0x2, 0x5, 0x2, 0x8, 0x1}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x17, 0xa3, "e74ffa6411ac9471e2aeea59eb6d303e7a67d2a400240549b1be4587c749f2efd2aba35fb54278eca200ee73a3d06fcb1841945896c2bf29e299aa056eb346b810b901b2f1762cebc829b98339181abcbdb78be494b88cbe48dc4d37d2380c5e03ea80c40f25ca710534c3e63749b807d8593b7f66143d3727ba9a578ecd9e015772e4d9224fea6a6e3eb809ccfe2d34cbc22f1b3760df5bec56717bc8c2ee41ec9571"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x100, 0x2, [0xf0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "1f59"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "90b0"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) [ 1611.683840][T11153] usb usb4-port1: attempt power cycle [ 1611.724161][T20267] binder: 20264:20267 ioctl c00c620f 20000100 returned -22 [ 1611.753344][T20265] binder: BINDER_SET_CONTEXT_MGR already set [ 1611.759601][T20265] binder: 20263:20265 ioctl 4018620d 20000000 returned -16 07:36:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1611.857343][T20265] binder: 20263:20265 ioctl c0306201 20001480 returned -14 07:36:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x12000000}], 0x0, 0x0, 0x0}) [ 1612.002308][T20276] binder: 20275:20276 ioctl c00c620f 20000100 returned -22 [ 1612.012841][T16196] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1612.122891][ T21] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1612.131341][T11153] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1612.185112][T20280] binder: 20279:20280 ioctl c0306201 20001480 returned -14 [ 1612.211197][T20280] binder_alloc: 20279: binder_alloc_buf size 301990016 failed, no address space [ 1612.220667][T20280] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1612.256641][T11153] usb 4-1: Invalid ep0 maxpacket: 36 [ 1612.259528][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1612.382238][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1612.390992][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1612.400085][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1612.409394][T16196] usb 1-1: config 1 has no interface number 0 [ 1612.415762][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1612.422625][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 1612.429522][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1612.435635][T11153] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1612.447937][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1612.469555][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.551071][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1612.564167][ T21] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1612.573166][ T21] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1612.582212][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1612.591612][ T21] usb 6-1: config 1 has no interface number 0 [ 1612.598068][ T21] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1612.609544][ T21] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1612.622920][ T21] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1612.632324][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.641953][T11153] usb 4-1: Invalid ep0 maxpacket: 36 [ 1612.668137][T11153] usb usb4-port1: unable to enumerate USB device [ 1612.740894][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1612.764324][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1612.942425][ T21] snd_usb_pod 6-1:1.1: set_interface failed [ 1612.948744][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1612.957107][ T21] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 1612.975478][ T21] usb 6-1: USB disconnect, device number 86 07:36:42 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000414321245c6120410e5150e8d5000000010902f98a5c01000000"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000414321245c6120410e5150e8d5000000010902f98a5c01000000"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) 07:36:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xb00, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x25000000}], 0x0, 0x0, 0x0}) 07:36:42 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) r1 = syz_usb_connect$printer(0xc201df363c8520db, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf9, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x81, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x81, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x40, 0x7f, 0xff, 0x1}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xfe, 0x1, 0x7fffff8, 0x7800, 0x0, [0xff0030]}]}, 0x6, [{0xef, &(0x7f0000000200)=@string={0xef, 0x3, "77e65a4ffa4a852a5d6cdca41e11bfe437d5664e47ee7593565c87e60329c325b8b2058c67cc552e2495da7dfc18757605813420162579aad0f64658dffc12a5b9e24c13e06d654e6763f00ca915bf8f1eb56a6ed01088d1c138dcc1f842ff90749e51a0a3da5e25f45528b56c767065f8d19d98efaddfa05d0d0678f5b4374bb669f2f20479699fcb35224f0baf8e97408f9cc74668cb7aad9801606e7f98b263e3690519e77150e1a8056709a50b377e5e69146fdeb56817dbcdc133a468fde98f74bb2fb2663dc3ec93cc69c6db1672d15b7979b85183b6950d96d5284a0efe2293c3543afcf6c9e5626629"}}, {0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "39de6a1c5ef663a850eeef0a3a7b89fd2671dc2c8090d4efd4fc515a2b98947517b6f034cf2f8690a6eaa485cbcad64eeff2fe1f7bc3e8b0fb11f58e738bc01bbce79ef764bb93ea41b64ecdafa8eda480470c01e224061a40b0822563eb7d82c169e2a11c8f0131020b967713adc7424ce9a5f7bb2fc4b2840097481f4e03019f8c146ce104277a1130abe8b8252eabbede770622fef5e3d664c2fb3a9f8dba9cf50843a1ca98f4ec90b473d0c9935857c3effdf6326fe1ea1a4196815c6f82a158bed0107a413acd9faf4b078b75ba4b54e8b47f6f76f91ba222fbf8"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}, {0xf8, &(0x7f0000000400)=@string={0xf8, 0x3, "e2751c866e0d9d3fb1258824af12bb807df392719b2239cae546f2f9b64240cd5ac663b8763d145c5ef906aeb95e2fd7c8cc30b79b30126347bc852cd9ea1f6dac4388965917bcbf02988fdf7f9198f52469983d1807d12ae795fec89d1c2b0b999be76a455537394f40ced0661c57f5b6f5d15bc5538cbe6a5d6c06f911822d44975a6263dc10642d2646ed6d0da629a737f8e49da99b30936c4e86203a6a04c00c4407b6062cf3e0c11028bc558f2cc35e2f2aafe0dff59d80cccfeb2a2f44be0ee0597006afd676a8ef32fce5f93ac93260e849c3c593ff86c8f4a7beac13849512d10ed441fc992f366e9663830b25bb6c844758"}}, {0xc, &(0x7f0000000180)=@string={0xc, 0x3, "1fcc83009397d633434d"}}]}) syz_usb_control_io(r1, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x40, 0x24, 0x8a, {0x8a, 0xf, "d4e3a77d9f36bdb1722aff15a5f554042752b15797d4a2bca94a7366fde217e051833b13621d8a8620637c31ca19460feb4116aef949186db68834875afb67b5903577531c45748d276e1d6e78975fabcb2565e48bc7adff82542b2a7d2ea424c0539845a47620540b622f317ece81362fb93ffa325bdbf563dc59dd2bd07a19cd45335cadd79357"}}, &(0x7f0000000680)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "46d48fa7bbac5754ff813130f9774ccc60c39da524579c55fa6a72a35cdc6c4cd3abf7ede0d7c287e70f9cac55a7a98b621adae951f205aa2034077c714d77faa3343268bd4e2f4a7b78a855f532d39814709ae8addd9d56b180c70e6cc34ae9184325d0e966948a03a3e8c28ed176c0fde959436d86744efc9cd6fe13f5f70464b3d9fad2dad9ec8020d8f309ac5b852896adc3f8632b98d1a2416bf451ffdbb82d6bc90502aa895b392ca91b5b132b1251273f37aafabd209931ec99fd500ec90805f4425a0078cc58300da561b0df14b99975b16c58de410aedcddd1a8fe3f46bb881"}}, &(0x7f0000000780)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x8, 0x8, "20e17385", "d0ddc23b"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x4, 0xfd, 0x0, 0x1}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000940)={0x20, 0x1, 0x73, "3f2a3e177839f3172eda3123a8455c974cd062fc299db66bb5e3ac160176da4e1b9c8dc96eedc613060ff4d1caf37599f9231a6e6a3263762dd32c819db1cf31049930b91575a64be29510c74655df4e28796cfa58a2ce943fcdeb779ebe2c94fcd8a95c27999a2f34264d91b0be84231110af"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x57a0894dd41c4ba2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x8, 0x40, [0xf00]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "fad5"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "d5af"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x1d86}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x7}}) [ 1613.567775][T20286] binder: 20282:20286 ioctl c0306201 20001480 returned -14 [ 1613.586000][T20287] binder: 20285:20287 ioctl c00c620f 20000100 returned -22 [ 1613.637158][T20286] binder_alloc: 20282: binder_alloc_buf size 620757120 failed, no address space [ 1613.646778][T20286] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1613.698252][T20292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.708177][T20292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1613.786349][T20296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.796055][T20296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x50000000}], 0x0, 0x0, 0x0}) [ 1613.842526][T11046] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) 07:36:43 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xdfc, 0xe100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xfe, [{{0x9, 0x4, 0x0, 0xce, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x101, 0x5, 0x1, {0x22, 0x6c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x39, 0x7, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3f, 0x3b, 0x5}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x3, 0x45, 0x0, 0x40, 0xff}, 0x193, &(0x7f0000000600)={0x5, 0xf, 0x193, 0x6, [@generic={0x7b, 0x10, 0x1, "949b3a83bb107b5f4c3718cc11b8718fa2d09d0293b5dd7d94e0f0ef120025fcaa888f307a837469fa7b1c42edc7c1b11fdc25833bdbf0fa7132796c2678ffa557cc622c83cc17aa5a1c8b9cf4eb57a742cfd6416d04b7e464e8e8ace34d8863fa6badc56b2ef2f1f13549f2494df8ae7bc8474b4fb9fb8a"}, @generic={0xdd, 0x10, 0x1, "e45f2e55494614e2eaf098686713139f4616e03cd3377847b1f431874e9016be966c1adb8ed7daa46e33d943703510b33e397cb2c17b6e854fb8ac2a11f8ae6076183deb096198325d2a73d90c039b6c71faad34fa9579b18f1c4674b6627cdae77194313a86e7f3c8602287503fc3e9bf2aeace31d9676b72c595e6693dfe65c17f24a5cbe7ae7f65bbd00200feb161b6ab3efd30d995649aebe2861919eef3dc5be9fcd0d5425a469850499991ade3ca585b0cfefec791f079b7287dfa606d27c6b5cd194b6326255d7b56720ef651426463693a8e0cc3ad63"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "0f924d292fbd1520d8a3f97c1b4c6f02"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x4, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x5ba8, 0xff00, 0x2, [0xc000, 0x899cd126f6b38e5c, 0xf]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x424}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0x23, 0xcb, {0xcb, 0x21, "1dff832985df1920c63744dbb9c0d9ca4ee4acaa8eb5cce8804194ced0d74b46f018f06f1ee2d797f9eb03d81825694a537e63b4b4659a861ffca19ba3a763ae8063632a652c5d346e7cddadfa822aa6eb3620ebd15ea5e13e285533a4ec472d212c9f4894bdefcb24ffa9f5a8adb444e49e3052725dafd071a9ea7204f4fc4039655a3905a09817197052231a7642dcf15a8d5f8043486c5fc7e00d2592f900518f61fc423a4422b0f12053d1333fc33babe45daa928a5583644d7725cf4e27bf39e8a288b4e7efef"}}, &(0x7f0000000000)={0x0, 0x3, 0x47, @string={0x47, 0x3, "7d57d7a9c27f326bec882ac94d803201cb7a336b52a48f1617700bde3bf72be82016499e7623096d540b8b14c4be8955aa4b7198df85fe0f574b6ea595e5c8f93dfd94d7de"}}, &(0x7f0000000200)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0x9, "a0f447e4"}, @local=@item_012={0x2, 0x2, 0x7, "cdd1"}, @global=@item_4={0x3, 0x1, 0x3, "764879a8"}, @local=@item_4={0x3, 0x2, 0x2, "08b4d86b"}, @local=@item_4={0x3, 0x2, 0x5, "802b07c3"}, @global=@item_4={0x3, 0x1, 0x7, "caf2f5be"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x6b0}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x3b, "e62aea6d184ef722443c015a4323e51f492a6b0a1c4e34395b632f4ab54a960dc695817f931a61379cf230fb57c3733b1f9225af90eeaa2920d060"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3f}, &(0x7f00000003c0)={0x20, 0x1, 0xcd, "54ab98caff719fe5b6920db0a83fc2265558c087b73201f94e959d80c028e86b45c3d16976d43ec28ff9d8bea873ac16a2c2ad1d84e83a9faa6e4d0836814db9195ecd428c7cc9046f59aa7facbdcdaed27dcd84431d867e3b0b3a0c99ab76a6d8a8950f88352aec48dc06e87e519c0d97070e0b40ac0308522f1ce5565e05230db7ce2548724a592c382bbfacf4b75204558da3f9c76c811b4a24102a9540da6bd7592f4e7c9e0f58a6a332ee9e22192e4b4c3411a2e3c69626d152990b1bef6450de7980b0096abaea9ac9a7"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r1, &(0x7f0000000d00)={0x2c, &(0x7f0000000940)={0x20, 0xf, 0xeb, {0xeb, 0x8, "b184b9fd8158d954951f48924e739ea5d1dde023e174eafe7ed898fc33d432471bdbde9fa735a98bfd3b9ef1a199b8bfde394d66acd8954704949eb4cd0cfc1d110fa63e6a71816fd039d9041936714c3363fda5e451ffbdc53bdcde64438eb17840c9acbb376f93d840447366b9d2744d09bf3305c4725c672e85bc5e61188aec7ce81f7ab6ee58fbc63080732a69e38649687044ed0fe10a1fac2721fea0a305aa7de986c77923357ab53e5ad80b976b14da6ffa957979aba3b6bbb61d1c36c7db2a1145b928b2d3504c7baa9160efed9177e835d2311c1139c89269aa7a336cee1a7f9719cc6f6e"}}, &(0x7f0000000a40)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "db37e315095e6b16b72222dc73e6ea8e8bc12ee2f4599008e35be61574cb6b3f831ec692c08d35f99f8b49c7a6962364323511ebb96ffabb185832571b083144877081978ea01b15baf944a966b0e94ff92ed71c2556c8450af271776daab869786e18be43a1d4e323108b16ad8f66951058bec894382ccb45c81ee8c22d1d272d4edb620ffa8623a2e1586e27aeb1641e93f472af8a1ab344d818383086bb0fc3ce362b7a19f80f1b8944dd4c4a9a621d463f70463846864756795a6845b9cfe16afc60b67be84d5969"}}, &(0x7f0000000b40)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x80, 0x2, 0x5, 0x8f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x1f, 0x19c0}, @generic={0x75, 0x10, 0x4, "9af8ca8d1735afdd738ee16cb71b915cca8a04bfbc5b95d6e8bfa90c6dd4ae85185d3e5441c3dbd9ed22f0a7f8e3c9ae5b65738a2654e04978f4974d5f2c8d35ed5e552f9049a9cd02fcfff1e5a396e5c51eadcde76619583a3b87ffd6cf998f901929f2d2bcc4f9ae38b82fd3a9fb03053b"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x3, 0x400}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x4, 0xe6, 0x5, "8a797feb", "66800bae"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x1, 0x1, 0x4, 0x84, 0x4, 0x7fff}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d40)={0x20, 0xa, 0x1c, "2fbed0cd56bd3c64738b640680864e7b9ed6072c3ffdc5773508e308"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x8, 0x0, [0xff0]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xa0b3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "8525"}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001000)={0x40, 0x19, 0x2, "9c73"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x99}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1613.935465][ T21] usb 1-1: USB disconnect, device number 101 [ 1613.944917][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1613.972207][T16196] usb 6-1: new high-speed USB device number 87 using dummy_hcd 07:36:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1614.017047][T20300] binder: 20299:20300 ioctl c00c620f 20000100 returned -22 [ 1614.052051][ T5037] usb 4-1: new high-speed USB device number 62 using dummy_hcd 07:36:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1614.184136][T20302] binder: 20301:20302 ioctl c0306201 20001480 returned -14 [ 1614.212627][T16196] usb 6-1: Using ep0 maxpacket: 32 [ 1614.236224][T20302] binder_alloc: 20301: binder_alloc_buf size 1342177408 failed, no address space [ 1614.246316][T20302] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1614.263055][ T5037] usb 4-1: device descriptor read/64, error 18 [ 1614.290403][T20307] binder: BINDER_SET_CONTEXT_MGR already set [ 1614.297110][T20307] binder: 20305:20307 ioctl 4018620d 20000000 returned -16 [ 1614.310208][T20308] binder: 20306:20308 ioctl c00c620f 20000100 returned -22 [ 1614.327354][T20307] binder: 20305:20307 ioctl c0306201 20001480 returned -14 07:36:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x58000000}], 0x0, 0x0, 0x0}) [ 1614.343451][T16196] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1614.352295][T16196] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1614.361227][T16196] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1614.370595][T16196] usb 6-1: config 1 has no interface number 0 [ 1614.377010][T16196] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1614.388255][T16196] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1614.401540][T16196] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1614.410943][T16196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.529523][T20310] binder: 20309:20310 ioctl c0306201 20001480 returned -14 [ 1614.542058][ T5037] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1614.564380][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1614.600961][T20310] binder_alloc: 20309: binder_alloc_buf size 1476395136 failed, no address space [ 1614.615049][T20310] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1614.632557][ T21] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1614.742072][ T5037] usb 4-1: device descriptor read/64, error 18 [ 1614.764386][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1614.873117][ T5037] usb usb4-port1: attempt power cycle [ 1614.902104][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 1615.032291][ T21] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1615.041035][ T21] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1615.050061][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1615.059334][ T21] usb 1-1: config 1 has no interface number 0 [ 1615.065833][ T21] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1615.077288][ T21] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1615.090967][ T21] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1615.100452][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.170622][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1615.292254][ T5037] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1615.350951][T11153] usb 6-1: USB disconnect, device number 87 [ 1615.368050][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1615.368582][T20304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.385283][T20304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.403651][ T5037] usb 4-1: Invalid ep0 maxpacket: 36 [ 1615.424152][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1615.572139][ T5037] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1615.672487][ T5037] usb 4-1: Invalid ep0 maxpacket: 36 [ 1615.678698][ T5037] usb usb4-port1: unable to enumerate USB device [ 1616.482485][ T5037] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) 07:36:45 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000001240)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xe2, {0xe2, 0x3, "97206bd9d417a0526217a17e885f74cb6308abfe7f2293adfaa01f66546983b9d9046b9599c4cd7d573aef27b0ebeeb8276160664e85f1ebd643967317dd9aca85757344c1e925641c83020feb7a3c2b30cefcc83f9662d9a89adab560aa645183db417bb2e49ef5e59de0174d0ddcd1fd744794b2a85e286998029e0846a98be3358476622bb26419cc3a08d73f67c083b831ec2030fb0432f390249edcbc58082c8001106386cea6ac2513a696aaeca5b571d45e37aab4f128699db5b752208f7e99d8d9c389ba5ec6115f431122bf954a6048dd11eaf7c454b9a50f0a548c"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f00000001c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "441063c6285067e760d67ef473f16ceb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x7, 0x7, 0x6, 0x81}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x20, 0x49, 0x4, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x1, 0xf000}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x0, 0xd0, 0x1, "8dacfefe", "6a69bb07"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x5, 0x2, 0x2, 0x7df8, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x7, 0x88, "e0ae35f886894826a932efa2358cc0397d5210c1a265e76bfafa14784e10fc25e61c14ddd9080bb339ca15e62c8f621031b409dd60e89d63bd4b99c37c37aa7d78f601ca6dbeb132d3e03b6330c49538ff0b317a7c999cff0da658c7471a86aa80d5b80a5bd9050c5d134ccf5163a9b99285eb9e15347a24bd0e3ec0f715ea9e2a61789c9fb977f8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x20, [0x0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "c038"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8447"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4b58}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x2, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0xb, 0x24, 0x6, 0x0, 0x0, "b2bfca7ebe7c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x46, 0x3, 0x7, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x4, 0x9, [0xfc01, 0x5f77, 0x200]}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x7f, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x20, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x60, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x9, 0x0, 0x2, 0x8, 0x8}, 0xf, &(0x7f0000000940)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xfa, 0x6, 0x9}]}, 0xa, [{0x102, &(0x7f0000000980)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x42f}}, {0xb0, &(0x7f0000000c80)=@string={0xb0, 0x3, "c46775ce7421e7fa340d16881aa272d560ec58d2c30b500beb885f90530c9759ae6e97ef4c3c7ca655fb8f336c8bb1d0bbeb647c57ae672cb4c9b2efba3096214f39a1819336e016f34225bb4e78632af5eccaad6321752e93168ccbedb6dee62d4c589a9ecf77ab788ae35eb88ca1762f4aab254e8fe4670a11b595f08fc5c4f2eeb5b2aeb5dfe455d65d5ab7fc2a18e73379a5f04804e623c58392ccb7c4234dbd88763d5d35256edbdaaa4e23"}}, {0xf2, &(0x7f0000000d40)=@string={0xf2, 0x3, "2fc86b168f2aaab117c8644f3144b24229df21e5de97b18a24f87209e4da266397911531840e7909f067566894fc010e66f85ab698b7ed18a2b278290b6687e334a2e4d38eb3571ddbd3334fbf8c569ed9cda174677cb853fe842a746bf81825d375b7c1fe58fad4dca330a72ecab26f0ab0bed57dd069f8c0c02c59eb6d77b5915c395813a83a18e20050b2be87436a5b85d084128e52e9d404126b40a737db35277a7a661fee4b9c37cbfcab879bf10b0dd7ef5b53d987627caa58c89373db1e814de239cbd22ba611f45a7a722f1a38ed811ca867243cabac9d5f1f35e7b50563fac2e886eb595927d6759518f32e"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44f}}, {0xc6, &(0x7f0000000e40)=@string={0xc6, 0x3, "5db3aac18679de4bde3cf7b06513b445883cafcd44ec80efb9a262fe030d1e4f2bfcdf8613ff56a6c1fd2bc6943cc1379111119288d2ab7f08c0c7bfc23463ee9f3490e275618672ac61c2a39f1b05114bec39bba00b82fdba86742429606ddbac2d1737a22973ca29c4e578eded2aac6a6322492d423797b57b97660c37bf5343f367dd50e3c7d4f1bc803cbd0fc1e489ddb1d8c78ef7f61aa5c98e100da64ce5306b972c697cd66498985a0bc6245582cce9b9040facaaaa4962749a2d04d3b7d93ed1"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000010c0)={0x14, &(0x7f0000001000)={0x20, 0x0, 0x73, {0x73, 0xd, "0bca6bbec9898fc6615e129da62b355d9397909ce9495d31d72b66dd34816e6f8836989adbd9dbc91115a79f3aa08a05bddcc480f93e4cb424bce4149190efd2d278eaaeb3a228f0f713fe15de26fc8f98a63d4887c90814c2b43fbbc2a47802b5095576dc0f1c6b9a1cef8d3c2a7abc4b"}}, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x1c, &(0x7f0000001100)={0x40, 0x7, 0x47, "33eafcb00996e7117bf6b05f6eed5278143b4a68d1159ecfda77353ffb5f5ceae55352ec0fa37d297711221f7348fd7090d9c8ace700a5e0162727a9ac8763df5e4abf2fa75538"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x9a}}) 07:36:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5c000000}], 0x0, 0x0, 0x0}) 07:36:45 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x8, 0xb2, 0x1, {0x22, 0xe32}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x20, 0x62, 0xff}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7f, 0xad, 0x80, 0x10, 0x9}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x8, 0x1}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x41, &(0x7f0000000200)=@string={0x41, 0x3, "c5519cc760e1c834fb1a2422dea847cb3778531d7cbabf7b1bf9d806fa13b7949c0e2d6771dd3df652f774e97bdde1cd66ba787ce69ed86c8e05429dbabde1"}}, {0x13, &(0x7f0000000180)=@string={0x13, 0x3, "5378b3bcb59cb445dddad6e284dbb97270"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xd4, &(0x7f0000000300)=@string={0xd4, 0x3, "d27ffff1ee03bc7e0628ed59463d4336fa721205dccb15d6371654144906635bb2d8c4b58382b0a39bd846e4e38c6059e00fd32ae9abc3942686ee39bcaef474c0925129eb145d045134cfeb63506547579a52ed229ff947c540a2e31a4afe09048791dbe93193a1f25d97d96ac90866433fb924f9e972c695d42a148b3900e9edd009f510fa5947c442e2b015fd5d60ddc966c36d0e5ead1cc1594564520f3253e6fae0c67fa08a94c918c2c9c979bf88d2442c3cd5ef02c0583bbf946fd43ba4d41b30f200be336bd2dbb74f73c64cccab"}}, {0x7b, &(0x7f0000000400)=@string={0x7b, 0x3, "fc4b70a31266b391f2d5c7b7f4e321700309e21dd833293201483d600e084d27f9abda55aff5a102f8b72c3f6256e544a58413741602e833ee2ea860902215868e8cfb4f70434a3c8eb3d79ee86f73ff9a2ea9be1f6183bb7a8a6c3847a4bcaa17672fccff3a70f2e0dff518acb9070e0e916bc473aff9a214"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r1, &(0x7f00000007c0)={0x24, &(0x7f0000000680)={0x40, 0x22, 0xf1, {0xf1, 0x11, "af4b90ce3d09bea0dfd9efe24770d49a06dd271026f3ac848a7c4ee61734aa9931030f9b12327e3408c74c8721d6f31e8c8ac4ab2af08186f7bf841f03046e4b66acea2ef7b14be299bf632d1291aff9f4c7e7728d3e2439e0e0b600443d3030fc3a1798e4c2750f749784d97b40dd040a387a7a8ed98157c255d976a0a22d573afa7b88343bd5656e285979a157a84dc7fe06edef849d0f9e41d63d49421dcdb8fdf7c0d97a4cd4a8f921d1013d7d8a0d88cd9685421c96193ecd19677e0275772d5111b1f60630bd3dc0db0204dccb637c013fd1f029dee5ec045a595f5d440aa2e1bf4bac5350adfd8769799327"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000540)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0xa, "b7cb"}, @global=@item_4={0x3, 0x1, 0x5, "f82bcd01"}, @main=@item_012={0x1, 0x0, 0x8, 'e'}, @global=@item_4={0x3, 0x1, 0x0, "c0b4717f"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x781}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x20, 0x6, 0x98, "ee141071471cd9e4e124194acaaeed49c6352d01b5d27374a995c1b3830c90ce32b07bf38264f304d99f730bd2045b11c65098cdb0461969a87f32c3041fe6ba4d77d7efb64bbe86c3e7d54ebeefb1805ece97668ebb5f4fefd8192ceb72668ac7d067ae0c6f54ca7eac2d4b02760978926695141f21f0d9eb219034a94f66c5d8415cd20ec7e17fcfb315b3eea587dde1e30386bdbe24a0"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x6e, "540439b2f3ff44e4b803d892b204e3cc0efda69b87fa466a524e5647c87ef78e8cdd36a80dfb164882e66419b1e34389925976c05712475111bc05f4de09520789fa1bd8ac1b5bb3955075eb6811bc74083b171ea3376461d248e4e32980c66fb25aef9aeda467449567d312c906"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000000b00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x7f, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0xf2, {{0xa, 0x24, 0x6, 0x0, 0x0, "af567fe349"}, {0x5, 0x24, 0x0, 0xbe}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x81, 0xbda8, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x8000, 0x4, 0x5, 0x200, 0x9}, @dmm={0x7, 0x24, 0x14, 0x0, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x1}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x8, 0x9, 0xfa, 0x7fff, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x310, 0x0, 0x8, 0x7b, 0x8, 0x3f}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x5, [{0xa, &(0x7f0000000c00)=@string={0xa, 0x3, "9dfb82062b09d5ea"}}, {0xd1, &(0x7f0000000d00)=@string={0xd1, 0x3, "ab6c50d877e2cfc2463c969c2e4e2e70c7293c61772888ebc1c6d6ee7d4ed10999bf75e9b0754e93eb67bf10b6f2866e62d2dc5735b5bc9d23593eb5eed6b5ae6cfe774891f0dbf12aa93ecfbd61d7117872a944da513dfc61f4e42b668d1e6ed6581755d229e857dfa3cbbe1432bca9ffd2fd7cad944b7cd557342d74fabe38bf7aeb43c44d7d97497058cd70e8db6a435156317d26c85a76f66618b3dcef78fc97ed9ebb36c6f0564aad12fa34da8ab742104ffc473bc2b6a39e507468c971e28d923270c487d91a0fb8b0a19932"}}, {0x29, &(0x7f0000000e00)=@string={0x29, 0x3, "387a5427ccbc8933aecb340ac345eed266024ac0bdbf0bf5e0b304a37d421a80362ae12b24dc91"}}, {0x83, &(0x7f0000000e40)=@string={0x83, 0x3, "84e12605a3f061107e115fe5f7eaee4ad15e01a14d624be07ebb45d1b44df265d428fc85465a5209b2317930de173b7570de55ddbcc23f548ec456f9b730ec04856611c8f9cb6120f5145ed30378c06d8ec4a29fc09ed11edd1b7d5b74c16942be52f6c1469360a3ee2a4a0a0ef837c9d44dc170ca80332cfea68f0e5739cd5958"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1616.850077][T20320] binder: 20317:20320 ioctl c0306201 20001480 returned -14 [ 1616.850590][T20321] binder: 20318:20321 ioctl c0306201 20001480 returned -14 [ 1616.874183][T20323] binder: 20319:20323 ioctl c00c620f 20000100 returned -22 [ 1616.874769][T20321] binder_alloc: 20318: binder_alloc_buf, no vma 07:36:46 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1616.927849][T20320] binder_alloc: 20317: binder_alloc_buf size 1543504000 failed, no address space [ 1616.937538][T20320] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x68000000}], 0x0, 0x0, 0x0}) [ 1617.082229][ T5037] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1617.112700][T11153] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1617.148149][T20327] binder: 20325:20327 ioctl c0306201 20001480 returned -14 [ 1617.157021][T20328] binder: 20326:20328 ioctl c00c620f 20000100 returned -22 [ 1617.181317][T20327] binder_alloc: 20325: binder_alloc_buf, no vma [ 1617.201596][T20330] binder: BINDER_SET_CONTEXT_MGR already set [ 1617.208026][T20330] binder: 20329:20330 ioctl 4018620d 20000000 returned -16 [ 1617.223052][T20330] binder: 20329:20330 ioctl c0306201 20001480 returned -14 [ 1617.332835][ T5037] usb 6-1: Using ep0 maxpacket: 32 [ 1617.375890][T11153] usb 4-1: Using ep0 maxpacket: 32 [ 1617.477332][ T5037] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1617.486083][ T5037] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1617.495081][ T5037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1617.504464][ T5037] usb 6-1: config 1 has no interface number 0 [ 1617.510747][ T5037] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1617.522078][ T5037] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1617.535355][ T5037] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1617.545010][ T5037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.602492][T11153] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1617.611196][T11153] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1617.620234][T11153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.631196][T11153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1617.640466][T11153] usb 4-1: config 1 has no interface number 0 07:36:46 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xdfc, 0xe100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xfe, [{{0x9, 0x4, 0x0, 0xce, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x101, 0x5, 0x1, {0x22, 0x6c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x39, 0x7, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3f, 0x3b, 0x5}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x3, 0x45, 0x0, 0x40, 0xff}, 0x193, &(0x7f0000000600)={0x5, 0xf, 0x193, 0x6, [@generic={0x7b, 0x10, 0x1, "949b3a83bb107b5f4c3718cc11b8718fa2d09d0293b5dd7d94e0f0ef120025fcaa888f307a837469fa7b1c42edc7c1b11fdc25833bdbf0fa7132796c2678ffa557cc622c83cc17aa5a1c8b9cf4eb57a742cfd6416d04b7e464e8e8ace34d8863fa6badc56b2ef2f1f13549f2494df8ae7bc8474b4fb9fb8a"}, @generic={0xdd, 0x10, 0x1, "e45f2e55494614e2eaf098686713139f4616e03cd3377847b1f431874e9016be966c1adb8ed7daa46e33d943703510b33e397cb2c17b6e854fb8ac2a11f8ae6076183deb096198325d2a73d90c039b6c71faad34fa9579b18f1c4674b6627cdae77194313a86e7f3c8602287503fc3e9bf2aeace31d9676b72c595e6693dfe65c17f24a5cbe7ae7f65bbd00200feb161b6ab3efd30d995649aebe2861919eef3dc5be9fcd0d5425a469850499991ade3ca585b0cfefec791f079b7287dfa606d27c6b5cd194b6326255d7b56720ef651426463693a8e0cc3ad63"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "0f924d292fbd1520d8a3f97c1b4c6f02"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x4, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x5ba8, 0xff00, 0x2, [0xc000, 0x899cd126f6b38e5c, 0xf]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x424}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0x23, 0xcb, {0xcb, 0x21, "1dff832985df1920c63744dbb9c0d9ca4ee4acaa8eb5cce8804194ced0d74b46f018f06f1ee2d797f9eb03d81825694a537e63b4b4659a861ffca19ba3a763ae8063632a652c5d346e7cddadfa822aa6eb3620ebd15ea5e13e285533a4ec472d212c9f4894bdefcb24ffa9f5a8adb444e49e3052725dafd071a9ea7204f4fc4039655a3905a09817197052231a7642dcf15a8d5f8043486c5fc7e00d2592f900518f61fc423a4422b0f12053d1333fc33babe45daa928a5583644d7725cf4e27bf39e8a288b4e7efef"}}, &(0x7f0000000000)={0x0, 0x3, 0x47, @string={0x47, 0x3, "7d57d7a9c27f326bec882ac94d803201cb7a336b52a48f1617700bde3bf72be82016499e7623096d540b8b14c4be8955aa4b7198df85fe0f574b6ea595e5c8f93dfd94d7de"}}, &(0x7f0000000200)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0x9, "a0f447e4"}, @local=@item_012={0x2, 0x2, 0x7, "cdd1"}, @global=@item_4={0x3, 0x1, 0x3, "764879a8"}, @local=@item_4={0x3, 0x2, 0x2, "08b4d86b"}, @local=@item_4={0x3, 0x2, 0x5, "802b07c3"}, @global=@item_4={0x3, 0x1, 0x7, "caf2f5be"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x6b0}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x3b, "e62aea6d184ef722443c015a4323e51f492a6b0a1c4e34395b632f4ab54a960dc695817f931a61379cf230fb57c3733b1f9225af90eeaa2920d060"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3f}, &(0x7f00000003c0)={0x20, 0x1, 0xcd, "54ab98caff719fe5b6920db0a83fc2265558c087b73201f94e959d80c028e86b45c3d16976d43ec28ff9d8bea873ac16a2c2ad1d84e83a9faa6e4d0836814db9195ecd428c7cc9046f59aa7facbdcdaed27dcd84431d867e3b0b3a0c99ab76a6d8a8950f88352aec48dc06e87e519c0d97070e0b40ac0308522f1ce5565e05230db7ce2548724a592c382bbfacf4b75204558da3f9c76c811b4a24102a9540da6bd7592f4e7c9e0f58a6a332ee9e22192e4b4c3411a2e3c69626d152990b1bef6450de7980b0096abaea9ac9a7"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0x23, 0xcb, {0xcb, 0x21, "1dff832985df1920c63744dbb9c0d9ca4ee4acaa8eb5cce8804194ced0d74b46f018f06f1ee2d797f9eb03d81825694a537e63b4b4659a861ffca19ba3a763ae8063632a652c5d346e7cddadfa822aa6eb3620ebd15ea5e13e285533a4ec472d212c9f4894bdefcb24ffa9f5a8adb444e49e3052725dafd071a9ea7204f4fc4039655a3905a09817197052231a7642dcf15a8d5f8043486c5fc7e00d2592f900518f61fc423a4422b0f12053d1333fc33babe45daa928a5583644d7725cf4e27bf39e8a288b4e7efef"}}, &(0x7f0000000000)={0x0, 0x3, 0x47, @string={0x47, 0x3, "7d57d7a9c27f326bec882ac94d803201cb7a336b52a48f1617700bde3bf72be82016499e7623096d540b8b14c4be8955aa4b7198df85fe0f574b6ea595e5c8f93dfd94d7de"}}, &(0x7f0000000200)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0x9, "a0f447e4"}, @local=@item_012={0x2, 0x2, 0x7, "cdd1"}, @global=@item_4={0x3, 0x1, 0x3, "764879a8"}, @local=@item_4={0x3, 0x2, 0x2, "08b4d86b"}, @local=@item_4={0x3, 0x2, 0x5, "802b07c3"}, @global=@item_4={0x3, 0x1, 0x7, "caf2f5be"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x6b0}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x3b, "e62aea6d184ef722443c015a4323e51f492a6b0a1c4e34395b632f4ab54a960dc695817f931a61379cf230fb57c3733b1f9225af90eeaa2920d060"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3f}, &(0x7f00000003c0)={0x20, 0x1, 0xcd, "54ab98caff719fe5b6920db0a83fc2265558c087b73201f94e959d80c028e86b45c3d16976d43ec28ff9d8bea873ac16a2c2ad1d84e83a9faa6e4d0836814db9195ecd428c7cc9046f59aa7facbdcdaed27dcd84431d867e3b0b3a0c99ab76a6d8a8950f88352aec48dc06e87e519c0d97070e0b40ac0308522f1ce5565e05230db7ce2548724a592c382bbfacf4b75204558da3f9c76c811b4a24102a9540da6bd7592f4e7c9e0f58a6a332ee9e22192e4b4c3411a2e3c69626d152990b1bef6450de7980b0096abaea9ac9a7"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io(r1, &(0x7f0000000d00)={0x2c, &(0x7f0000000940)={0x20, 0xf, 0xeb, {0xeb, 0x8, "b184b9fd8158d954951f48924e739ea5d1dde023e174eafe7ed898fc33d432471bdbde9fa735a98bfd3b9ef1a199b8bfde394d66acd8954704949eb4cd0cfc1d110fa63e6a71816fd039d9041936714c3363fda5e451ffbdc53bdcde64438eb17840c9acbb376f93d840447366b9d2744d09bf3305c4725c672e85bc5e61188aec7ce81f7ab6ee58fbc63080732a69e38649687044ed0fe10a1fac2721fea0a305aa7de986c77923357ab53e5ad80b976b14da6ffa957979aba3b6bbb61d1c36c7db2a1145b928b2d3504c7baa9160efed9177e835d2311c1139c89269aa7a336cee1a7f9719cc6f6e"}}, &(0x7f0000000a40)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "db37e315095e6b16b72222dc73e6ea8e8bc12ee2f4599008e35be61574cb6b3f831ec692c08d35f99f8b49c7a6962364323511ebb96ffabb185832571b083144877081978ea01b15baf944a966b0e94ff92ed71c2556c8450af271776daab869786e18be43a1d4e323108b16ad8f66951058bec894382ccb45c81ee8c22d1d272d4edb620ffa8623a2e1586e27aeb1641e93f472af8a1ab344d818383086bb0fc3ce362b7a19f80f1b8944dd4c4a9a621d463f70463846864756795a6845b9cfe16afc60b67be84d5969"}}, &(0x7f0000000b40)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x80, 0x2, 0x5, 0x8f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x1f, 0x19c0}, @generic={0x75, 0x10, 0x4, "9af8ca8d1735afdd738ee16cb71b915cca8a04bfbc5b95d6e8bfa90c6dd4ae85185d3e5441c3dbd9ed22f0a7f8e3c9ae5b65738a2654e04978f4974d5f2c8d35ed5e552f9049a9cd02fcfff1e5a396e5c51eadcde76619583a3b87ffd6cf998f901929f2d2bcc4f9ae38b82fd3a9fb03053b"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x3, 0x400}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x4, 0xe6, 0x5, "8a797feb", "66800bae"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x1, 0x1, 0x4, 0x84, 0x4, 0x7fff}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d40)={0x20, 0xa, 0x1c, "2fbed0cd56bd3c64738b640680864e7b9ed6072c3ffdc5773508e308"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x8, 0x0, [0xff0]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xa0b3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "8525"}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001000)={0x40, 0x19, 0x2, "9c73"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x99}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_control_io(r1, &(0x7f0000000d00)={0x2c, &(0x7f0000000940)={0x20, 0xf, 0xeb, {0xeb, 0x8, "b184b9fd8158d954951f48924e739ea5d1dde023e174eafe7ed898fc33d432471bdbde9fa735a98bfd3b9ef1a199b8bfde394d66acd8954704949eb4cd0cfc1d110fa63e6a71816fd039d9041936714c3363fda5e451ffbdc53bdcde64438eb17840c9acbb376f93d840447366b9d2744d09bf3305c4725c672e85bc5e61188aec7ce81f7ab6ee58fbc63080732a69e38649687044ed0fe10a1fac2721fea0a305aa7de986c77923357ab53e5ad80b976b14da6ffa957979aba3b6bbb61d1c36c7db2a1145b928b2d3504c7baa9160efed9177e835d2311c1139c89269aa7a336cee1a7f9719cc6f6e"}}, &(0x7f0000000a40)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "db37e315095e6b16b72222dc73e6ea8e8bc12ee2f4599008e35be61574cb6b3f831ec692c08d35f99f8b49c7a6962364323511ebb96ffabb185832571b083144877081978ea01b15baf944a966b0e94ff92ed71c2556c8450af271776daab869786e18be43a1d4e323108b16ad8f66951058bec894382ccb45c81ee8c22d1d272d4edb620ffa8623a2e1586e27aeb1641e93f472af8a1ab344d818383086bb0fc3ce362b7a19f80f1b8944dd4c4a9a621d463f70463846864756795a6845b9cfe16afc60b67be84d5969"}}, &(0x7f0000000b40)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x80, 0x2, 0x5, 0x8f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x1f, 0x19c0}, @generic={0x75, 0x10, 0x4, "9af8ca8d1735afdd738ee16cb71b915cca8a04bfbc5b95d6e8bfa90c6dd4ae85185d3e5441c3dbd9ed22f0a7f8e3c9ae5b65738a2654e04978f4974d5f2c8d35ed5e552f9049a9cd02fcfff1e5a396e5c51eadcde76619583a3b87ffd6cf998f901929f2d2bcc4f9ae38b82fd3a9fb03053b"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x3, 0x400}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x4, 0xe6, 0x5, "8a797feb", "66800bae"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x1, 0x1, 0x4, 0x84, 0x4, 0x7fff}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d40)={0x20, 0xa, 0x1c, "2fbed0cd56bd3c64738b640680864e7b9ed6072c3ffdc5773508e308"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x8, 0x0, [0xff0]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xa0b3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "8525"}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001000)={0x40, 0x19, 0x2, "9c73"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x99}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xfcffffff}], 0x0, 0x0, 0x0}) 07:36:46 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1617.646910][T11153] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1617.656258][T11153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.673653][T16196] usb 1-1: USB disconnect, device number 102 [ 1617.687140][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1617.693335][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found 07:36:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1617.770917][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1617.802582][T20334] binder: 20332:20334 ioctl c00c620f 20000100 returned -22 [ 1617.838002][T20315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.848003][T20315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.893425][T20335] binder: 20333:20335 ioctl c0306201 20001480 returned -14 [ 1617.900949][T20337] binder: 20331:20337 ioctl c0306201 20001480 returned -14 [ 1617.950029][T20335] binder_alloc: 20333: binder_alloc_buf size 4244635776 failed, no address space [ 1617.960038][T20335] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1617.967107][T20322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.980018][T20322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.054692][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1618.313056][T20322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.323058][T20322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.332738][T16196] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1618.352980][T11153] snd_usb_pod 4-1:1.1: set_interface failed [ 1618.359480][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1618.368008][T11153] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1618.387412][T11153] usb 4-1: USB disconnect, device number 66 [ 1618.572156][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1618.692430][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1618.701071][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1618.713963][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1618.725229][T16196] usb 1-1: config 1 has no interface number 0 [ 1618.731558][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1618.742984][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1618.756265][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1618.765701][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.829089][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found 07:36:47 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r0) (async) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000001240)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xe2, {0xe2, 0x3, "97206bd9d417a0526217a17e885f74cb6308abfe7f2293adfaa01f66546983b9d9046b9599c4cd7d573aef27b0ebeeb8276160664e85f1ebd643967317dd9aca85757344c1e925641c83020feb7a3c2b30cefcc83f9662d9a89adab560aa645183db417bb2e49ef5e59de0174d0ddcd1fd744794b2a85e286998029e0846a98be3358476622bb26419cc3a08d73f67c083b831ec2030fb0432f390249edcbc58082c8001106386cea6ac2513a696aaeca5b571d45e37aab4f128699db5b752208f7e99d8d9c389ba5ec6115f431122bf954a6048dd11eaf7c454b9a50f0a548c"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f00000001c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "441063c6285067e760d67ef473f16ceb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x7, 0x7, 0x6, 0x81}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x20, 0x49, 0x4, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x1, 0xf000}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x0, 0xd0, 0x1, "8dacfefe", "6a69bb07"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x5, 0x2, 0x2, 0x7df8, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x7, 0x88, "e0ae35f886894826a932efa2358cc0397d5210c1a265e76bfafa14784e10fc25e61c14ddd9080bb339ca15e62c8f621031b409dd60e89d63bd4b99c37c37aa7d78f601ca6dbeb132d3e03b6330c49538ff0b317a7c999cff0da658c7471a86aa80d5b80a5bd9050c5d134ccf5163a9b99285eb9e15347a24bd0e3ec0f715ea9e2a61789c9fb977f8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x20, [0x0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "c038"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8447"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4b58}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x2, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0xb, 0x24, 0x6, 0x0, 0x0, "b2bfca7ebe7c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x46, 0x3, 0x7, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x4, 0x9, [0xfc01, 0x5f77, 0x200]}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x7f, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x20, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x60, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x9, 0x0, 0x2, 0x8, 0x8}, 0xf, &(0x7f0000000940)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xfa, 0x6, 0x9}]}, 0xa, [{0x102, &(0x7f0000000980)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x42f}}, {0xb0, &(0x7f0000000c80)=@string={0xb0, 0x3, "c46775ce7421e7fa340d16881aa272d560ec58d2c30b500beb885f90530c9759ae6e97ef4c3c7ca655fb8f336c8bb1d0bbeb647c57ae672cb4c9b2efba3096214f39a1819336e016f34225bb4e78632af5eccaad6321752e93168ccbedb6dee62d4c589a9ecf77ab788ae35eb88ca1762f4aab254e8fe4670a11b595f08fc5c4f2eeb5b2aeb5dfe455d65d5ab7fc2a18e73379a5f04804e623c58392ccb7c4234dbd88763d5d35256edbdaaa4e23"}}, {0xf2, &(0x7f0000000d40)=@string={0xf2, 0x3, "2fc86b168f2aaab117c8644f3144b24229df21e5de97b18a24f87209e4da266397911531840e7909f067566894fc010e66f85ab698b7ed18a2b278290b6687e334a2e4d38eb3571ddbd3334fbf8c569ed9cda174677cb853fe842a746bf81825d375b7c1fe58fad4dca330a72ecab26f0ab0bed57dd069f8c0c02c59eb6d77b5915c395813a83a18e20050b2be87436a5b85d084128e52e9d404126b40a737db35277a7a661fee4b9c37cbfcab879bf10b0dd7ef5b53d987627caa58c89373db1e814de239cbd22ba611f45a7a722f1a38ed811ca867243cabac9d5f1f35e7b50563fac2e886eb595927d6759518f32e"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44f}}, {0xc6, &(0x7f0000000e40)=@string={0xc6, 0x3, "5db3aac18679de4bde3cf7b06513b445883cafcd44ec80efb9a262fe030d1e4f2bfcdf8613ff56a6c1fd2bc6943cc1379111119288d2ab7f08c0c7bfc23463ee9f3490e275618672ac61c2a39f1b05114bec39bba00b82fdba86742429606ddbac2d1737a22973ca29c4e578eded2aac6a6322492d423797b57b97660c37bf5343f367dd50e3c7d4f1bc803cbd0fc1e489ddb1d8c78ef7f61aa5c98e100da64ce5306b972c697cd66498985a0bc6245582cce9b9040facaaaa4962749a2d04d3b7d93ed1"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000010c0)={0x14, &(0x7f0000001000)={0x20, 0x0, 0x73, {0x73, 0xd, "0bca6bbec9898fc6615e129da62b355d9397909ce9495d31d72b66dd34816e6f8836989adbd9dbc91115a79f3aa08a05bddcc480f93e4cb424bce4149190efd2d278eaaeb3a228f0f713fe15de26fc8f98a63d4887c90814c2b43fbbc2a47802b5095576dc0f1c6b9a1cef8d3c2a7abc4b"}}, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x1c, &(0x7f0000001100)={0x40, 0x7, 0x47, "33eafcb00996e7117bf6b05f6eed5278143b4a68d1159ecfda77353ffb5f5ceae55352ec0fa37d297711221f7348fd7090d9c8ace700a5e0162727a9ac8763df5e4abf2fa75538"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x9a}}) 07:36:47 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2500, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:47 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xfdfdffff}], 0x0, 0x0, 0x0}) [ 1618.880091][T11153] usb 6-1: USB disconnect, device number 88 [ 1618.889015][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1618.962138][T20342] binder: 20341:20342 ioctl c00c620f 20000100 returned -22 [ 1619.020959][T20338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.030755][T20338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.058964][T20344] binder: 20343:20344 ioctl c0306201 20001480 returned -14 [ 1619.087543][T20345] binder: 20340:20345 ioctl c0306201 20001480 returned -14 [ 1619.134241][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1619.175544][T20349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.185335][T20349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.198744][T20345] binder_alloc: 20340: binder_alloc_buf size 4261281920 failed, no address space [ 1619.209069][T20345] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1619.273014][T20349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.282779][T20349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:48 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x8, 0xb2, 0x1, {0x22, 0xe32}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x20, 0x62, 0xff}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7f, 0xad, 0x80, 0x10, 0x9}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x8, 0x1}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x41, &(0x7f0000000200)=@string={0x41, 0x3, "c5519cc760e1c834fb1a2422dea847cb3778531d7cbabf7b1bf9d806fa13b7949c0e2d6771dd3df652f774e97bdde1cd66ba787ce69ed86c8e05429dbabde1"}}, {0x13, &(0x7f0000000180)=@string={0x13, 0x3, "5378b3bcb59cb445dddad6e284dbb97270"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xd4, &(0x7f0000000300)=@string={0xd4, 0x3, "d27ffff1ee03bc7e0628ed59463d4336fa721205dccb15d6371654144906635bb2d8c4b58382b0a39bd846e4e38c6059e00fd32ae9abc3942686ee39bcaef474c0925129eb145d045134cfeb63506547579a52ed229ff947c540a2e31a4afe09048791dbe93193a1f25d97d96ac90866433fb924f9e972c695d42a148b3900e9edd009f510fa5947c442e2b015fd5d60ddc966c36d0e5ead1cc1594564520f3253e6fae0c67fa08a94c918c2c9c979bf88d2442c3cd5ef02c0583bbf946fd43ba4d41b30f200be336bd2dbb74f73c64cccab"}}, {0x7b, &(0x7f0000000400)=@string={0x7b, 0x3, "fc4b70a31266b391f2d5c7b7f4e321700309e21dd833293201483d600e084d27f9abda55aff5a102f8b72c3f6256e544a58413741602e833ee2ea860902215868e8cfb4f70434a3c8eb3d79ee86f73ff9a2ea9be1f6183bb7a8a6c3847a4bcaa17672fccff3a70f2e0dff518acb9070e0e916bc473aff9a214"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r1, &(0x7f00000007c0)={0x24, &(0x7f0000000680)={0x40, 0x22, 0xf1, {0xf1, 0x11, "af4b90ce3d09bea0dfd9efe24770d49a06dd271026f3ac848a7c4ee61734aa9931030f9b12327e3408c74c8721d6f31e8c8ac4ab2af08186f7bf841f03046e4b66acea2ef7b14be299bf632d1291aff9f4c7e7728d3e2439e0e0b600443d3030fc3a1798e4c2750f749784d97b40dd040a387a7a8ed98157c255d976a0a22d573afa7b88343bd5656e285979a157a84dc7fe06edef849d0f9e41d63d49421dcdb8fdf7c0d97a4cd4a8f921d1013d7d8a0d88cd9685421c96193ecd19677e0275772d5111b1f60630bd3dc0db0204dccb637c013fd1f029dee5ec045a595f5d440aa2e1bf4bac5350adfd8769799327"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000540)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0xa, "b7cb"}, @global=@item_4={0x3, 0x1, 0x5, "f82bcd01"}, @main=@item_012={0x1, 0x0, 0x8, 'e'}, @global=@item_4={0x3, 0x1, 0x0, "c0b4717f"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x781}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x20, 0x6, 0x98, "ee141071471cd9e4e124194acaaeed49c6352d01b5d27374a995c1b3830c90ce32b07bf38264f304d99f730bd2045b11c65098cdb0461969a87f32c3041fe6ba4d77d7efb64bbe86c3e7d54ebeefb1805ece97668ebb5f4fefd8192ceb72668ac7d067ae0c6f54ca7eac2d4b02760978926695141f21f0d9eb219034a94f66c5d8415cd20ec7e17fcfb315b3eea587dde1e30386bdbe24a0"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x6e, "540439b2f3ff44e4b803d892b204e3cc0efda69b87fa466a524e5647c87ef78e8cdd36a80dfb164882e66419b1e34389925976c05712475111bc05f4de09520789fa1bd8ac1b5bb3955075eb6811bc74083b171ea3376461d248e4e32980c66fb25aef9aeda467449567d312c906"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000000b00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x7f, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0xf2, {{0xa, 0x24, 0x6, 0x0, 0x0, "af567fe349"}, {0x5, 0x24, 0x0, 0xbe}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x81, 0xbda8, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x8000, 0x4, 0x5, 0x200, 0x9}, @dmm={0x7, 0x24, 0x14, 0x0, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x1}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x8, 0x9, 0xfa, 0x7fff, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x310, 0x0, 0x8, 0x7b, 0x8, 0x3f}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x5, [{0xa, &(0x7f0000000c00)=@string={0xa, 0x3, "9dfb82062b09d5ea"}}, {0xd1, &(0x7f0000000d00)=@string={0xd1, 0x3, "ab6c50d877e2cfc2463c969c2e4e2e70c7293c61772888ebc1c6d6ee7d4ed10999bf75e9b0754e93eb67bf10b6f2866e62d2dc5735b5bc9d23593eb5eed6b5ae6cfe774891f0dbf12aa93ecfbd61d7117872a944da513dfc61f4e42b668d1e6ed6581755d229e857dfa3cbbe1432bca9ffd2fd7cad944b7cd557342d74fabe38bf7aeb43c44d7d97497058cd70e8db6a435156317d26c85a76f66618b3dcef78fc97ed9ebb36c6f0564aad12fa34da8ab742104ffc473bc2b6a39e507468c971e28d923270c487d91a0fb8b0a19932"}}, {0x29, &(0x7f0000000e00)=@string={0x29, 0x3, "387a5427ccbc8933aecb340ac345eed266024ac0bdbf0bf5e0b304a37d421a80362ae12b24dc91"}}, {0x83, &(0x7f0000000e40)=@string={0x83, 0x3, "84e12605a3f061107e115fe5f7eaee4ad15e01a14d624be07ebb45d1b44df265d428fc85465a5209b2317930de173b7570de55ddbcc23f548ec456f9b730ec04856611c8f9cb6120f5145ed30378c06d8ec4a29fc09ed11edd1b7d5b74c16942be52f6c1469360a3ee2a4a0a0ef837c9d44dc170ca80332cfea68f0e5739cd5958"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2a4c, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:48 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:36:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xff600000}], 0x0, 0x0, 0x0}) [ 1619.472605][ T5037] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1619.495677][T20355] binder: 20353:20355 ioctl c00c620f 20000100 returned -22 [ 1619.513563][T20356] binder: 20352:20356 ioctl c0306201 20001480 returned -14 [ 1619.528482][T20349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.538937][T20349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.549292][T20357] binder: 20354:20357 ioctl c0306201 20001480 returned -14 [ 1619.608736][T20356] binder_alloc: 20352: binder_alloc_buf size 4284481664 failed, no address space [ 1619.618418][T20356] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1619.714820][T20361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.724439][T20361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.782121][ T5037] usb 4-1: Using ep0 maxpacket: 8 07:36:48 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xdfc, 0xe100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xfe, [{{0x9, 0x4, 0x0, 0xce, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x101, 0x5, 0x1, {0x22, 0x6c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x39, 0x7, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3f, 0x3b, 0x5}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x3, 0x45, 0x0, 0x40, 0xff}, 0x193, &(0x7f0000000600)={0x5, 0xf, 0x193, 0x6, [@generic={0x7b, 0x10, 0x1, "949b3a83bb107b5f4c3718cc11b8718fa2d09d0293b5dd7d94e0f0ef120025fcaa888f307a837469fa7b1c42edc7c1b11fdc25833bdbf0fa7132796c2678ffa557cc622c83cc17aa5a1c8b9cf4eb57a742cfd6416d04b7e464e8e8ace34d8863fa6badc56b2ef2f1f13549f2494df8ae7bc8474b4fb9fb8a"}, @generic={0xdd, 0x10, 0x1, "e45f2e55494614e2eaf098686713139f4616e03cd3377847b1f431874e9016be966c1adb8ed7daa46e33d943703510b33e397cb2c17b6e854fb8ac2a11f8ae6076183deb096198325d2a73d90c039b6c71faad34fa9579b18f1c4674b6627cdae77194313a86e7f3c8602287503fc3e9bf2aeace31d9676b72c595e6693dfe65c17f24a5cbe7ae7f65bbd00200feb161b6ab3efd30d995649aebe2861919eef3dc5be9fcd0d5425a469850499991ade3ca585b0cfefec791f079b7287dfa606d27c6b5cd194b6326255d7b56720ef651426463693a8e0cc3ad63"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "0f924d292fbd1520d8a3f97c1b4c6f02"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x4, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x5ba8, 0xff00, 0x2, [0xc000, 0x899cd126f6b38e5c, 0xf]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x424}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x0, 0x23, 0xcb, {0xcb, 0x21, "1dff832985df1920c63744dbb9c0d9ca4ee4acaa8eb5cce8804194ced0d74b46f018f06f1ee2d797f9eb03d81825694a537e63b4b4659a861ffca19ba3a763ae8063632a652c5d346e7cddadfa822aa6eb3620ebd15ea5e13e285533a4ec472d212c9f4894bdefcb24ffa9f5a8adb444e49e3052725dafd071a9ea7204f4fc4039655a3905a09817197052231a7642dcf15a8d5f8043486c5fc7e00d2592f900518f61fc423a4422b0f12053d1333fc33babe45daa928a5583644d7725cf4e27bf39e8a288b4e7efef"}}, &(0x7f0000000000)={0x0, 0x3, 0x47, @string={0x47, 0x3, "7d57d7a9c27f326bec882ac94d803201cb7a336b52a48f1617700bde3bf72be82016499e7623096d540b8b14c4be8955aa4b7198df85fe0f574b6ea595e5c8f93dfd94d7de"}}, &(0x7f0000000200)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0x9, "a0f447e4"}, @local=@item_012={0x2, 0x2, 0x7, "cdd1"}, @global=@item_4={0x3, 0x1, 0x3, "764879a8"}, @local=@item_4={0x3, 0x2, 0x2, "08b4d86b"}, @local=@item_4={0x3, 0x2, 0x5, "802b07c3"}, @global=@item_4={0x3, 0x1, 0x7, "caf2f5be"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x6b0}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x3b, "e62aea6d184ef722443c015a4323e51f492a6b0a1c4e34395b632f4ab54a960dc695817f931a61379cf230fb57c3733b1f9225af90eeaa2920d060"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3f}, &(0x7f00000003c0)={0x20, 0x1, 0xcd, "54ab98caff719fe5b6920db0a83fc2265558c087b73201f94e959d80c028e86b45c3d16976d43ec28ff9d8bea873ac16a2c2ad1d84e83a9faa6e4d0836814db9195ecd428c7cc9046f59aa7facbdcdaed27dcd84431d867e3b0b3a0c99ab76a6d8a8950f88352aec48dc06e87e519c0d97070e0b40ac0308522f1ce5565e05230db7ce2548724a592c382bbfacf4b75204558da3f9c76c811b4a24102a9540da6bd7592f4e7c9e0f58a6a332ee9e22192e4b4c3411a2e3c69626d152990b1bef6450de7980b0096abaea9ac9a7"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x1f}}) (async) syz_usb_control_io(r1, &(0x7f0000000d00)={0x2c, &(0x7f0000000940)={0x20, 0xf, 0xeb, {0xeb, 0x8, "b184b9fd8158d954951f48924e739ea5d1dde023e174eafe7ed898fc33d432471bdbde9fa735a98bfd3b9ef1a199b8bfde394d66acd8954704949eb4cd0cfc1d110fa63e6a71816fd039d9041936714c3363fda5e451ffbdc53bdcde64438eb17840c9acbb376f93d840447366b9d2744d09bf3305c4725c672e85bc5e61188aec7ce81f7ab6ee58fbc63080732a69e38649687044ed0fe10a1fac2721fea0a305aa7de986c77923357ab53e5ad80b976b14da6ffa957979aba3b6bbb61d1c36c7db2a1145b928b2d3504c7baa9160efed9177e835d2311c1139c89269aa7a336cee1a7f9719cc6f6e"}}, &(0x7f0000000a40)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "db37e315095e6b16b72222dc73e6ea8e8bc12ee2f4599008e35be61574cb6b3f831ec692c08d35f99f8b49c7a6962364323511ebb96ffabb185832571b083144877081978ea01b15baf944a966b0e94ff92ed71c2556c8450af271776daab869786e18be43a1d4e323108b16ad8f66951058bec894382ccb45c81ee8c22d1d272d4edb620ffa8623a2e1586e27aeb1641e93f472af8a1ab344d818383086bb0fc3ce362b7a19f80f1b8944dd4c4a9a621d463f70463846864756795a6845b9cfe16afc60b67be84d5969"}}, &(0x7f0000000b40)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x80, 0x2, 0x5, 0x8f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x1f, 0x19c0}, @generic={0x75, 0x10, 0x4, "9af8ca8d1735afdd738ee16cb71b915cca8a04bfbc5b95d6e8bfa90c6dd4ae85185d3e5441c3dbd9ed22f0a7f8e3c9ae5b65738a2654e04978f4974d5f2c8d35ed5e552f9049a9cd02fcfff1e5a396e5c51eadcde76619583a3b87ffd6cf998f901929f2d2bcc4f9ae38b82fd3a9fb03053b"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x3, 0x400}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x4, 0xe6, 0x5, "8a797feb", "66800bae"}}, &(0x7f0000000c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x1, 0x1, 0x4, 0x84, 0x4, 0x7fff}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d40)={0x20, 0xa, 0x1c, "2fbed0cd56bd3c64738b640680864e7b9ed6072c3ffdc5773508e308"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x8, 0x0, [0xff0]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xa0b3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "8525"}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001000)={0x40, 0x19, 0x2, "9c73"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x99}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2c4c, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:48 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 07:36:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xfffffdfd}], 0x0, 0x0, 0x0}) [ 1619.803090][T16196] usb 1-1: USB disconnect, device number 103 [ 1619.835631][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1619.912857][ T5037] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=b2.d9 [ 1619.923697][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.933349][T11153] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1619.989966][ T5037] usb 4-1: config 0 descriptor?? [ 1619.996884][T20368] binder: 20365:20368 ioctl c00c620f 20000100 returned -22 [ 1620.023814][T20369] binder: 20366:20369 ioctl c0306201 20001480 returned -14 [ 1620.048129][T20370] binder: 20367:20370 ioctl c0306201 20001480 returned -14 [ 1620.066151][ T5037] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 1620.072083][T20369] binder_alloc: 20366: binder_alloc_buf size 4294966912 failed, no address space [ 1620.072943][ T5037] usbtest: probe of 4-1:0.0 failed with error -22 [ 1620.082289][T20369] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1620.179201][T20374] binder: 20367:20374 ioctl c0306201 0 returned -14 [ 1620.203841][T20373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.213723][T20373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.224063][T11153] usb 6-1: Using ep0 maxpacket: 32 [ 1620.294104][ T5037] usb 4-1: USB disconnect, device number 67 [ 1620.344815][T11153] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1620.353490][T11153] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1620.362700][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1620.371964][T11153] usb 6-1: config 1 has no interface number 0 [ 1620.378397][T11153] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1620.389656][T11153] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1620.402914][T11153] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1620.412319][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.412568][T16196] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1620.577052][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1620.782315][T11153] snd_usb_pod 6-1:1.1: set_interface failed [ 1620.788712][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1620.797160][T11153] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 1620.822247][T11153] usb 6-1: USB disconnect, device number 89 07:36:49 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000001240)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0xe2, {0xe2, 0x3, "97206bd9d417a0526217a17e885f74cb6308abfe7f2293adfaa01f66546983b9d9046b9599c4cd7d573aef27b0ebeeb8276160664e85f1ebd643967317dd9aca85757344c1e925641c83020feb7a3c2b30cefcc83f9662d9a89adab560aa645183db417bb2e49ef5e59de0174d0ddcd1fd744794b2a85e286998029e0846a98be3358476622bb26419cc3a08d73f67c083b831ec2030fb0432f390249edcbc58082c8001106386cea6ac2513a696aaeca5b571d45e37aab4f128699db5b752208f7e99d8d9c389ba5ec6115f431122bf954a6048dd11eaf7c454b9a50f0a548c"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f00000001c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "441063c6285067e760d67ef473f16ceb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x7, 0x7, 0x6, 0x81}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x20, 0x49, 0x4, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x1, 0xf000}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x0, 0xd0, 0x1, "8dacfefe", "6a69bb07"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x5, 0x2, 0x2, 0x7df8, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x7, 0x88, "e0ae35f886894826a932efa2358cc0397d5210c1a265e76bfafa14784e10fc25e61c14ddd9080bb339ca15e62c8f621031b409dd60e89d63bd4b99c37c37aa7d78f601ca6dbeb132d3e03b6330c49538ff0b317a7c999cff0da658c7471a86aa80d5b80a5bd9050c5d134ccf5163a9b99285eb9e15347a24bd0e3ec0f715ea9e2a61789c9fb977f8"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x20, [0x0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "c038"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8447"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4b58}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x2, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0xb, 0x24, 0x6, 0x0, 0x0, "b2bfca7ebe7c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x46, 0x3, 0x7, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x4, 0x9, [0xfc01, 0x5f77, 0x200]}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x7f, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x20, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x60, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x9, 0x0, 0x2, 0x8, 0x8}, 0xf, &(0x7f0000000940)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xfa, 0x6, 0x9}]}, 0xa, [{0x102, &(0x7f0000000980)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x42f}}, {0xb0, &(0x7f0000000c80)=@string={0xb0, 0x3, "c46775ce7421e7fa340d16881aa272d560ec58d2c30b500beb885f90530c9759ae6e97ef4c3c7ca655fb8f336c8bb1d0bbeb647c57ae672cb4c9b2efba3096214f39a1819336e016f34225bb4e78632af5eccaad6321752e93168ccbedb6dee62d4c589a9ecf77ab788ae35eb88ca1762f4aab254e8fe4670a11b595f08fc5c4f2eeb5b2aeb5dfe455d65d5ab7fc2a18e73379a5f04804e623c58392ccb7c4234dbd88763d5d35256edbdaaa4e23"}}, {0xf2, &(0x7f0000000d40)=@string={0xf2, 0x3, "2fc86b168f2aaab117c8644f3144b24229df21e5de97b18a24f87209e4da266397911531840e7909f067566894fc010e66f85ab698b7ed18a2b278290b6687e334a2e4d38eb3571ddbd3334fbf8c569ed9cda174677cb853fe842a746bf81825d375b7c1fe58fad4dca330a72ecab26f0ab0bed57dd069f8c0c02c59eb6d77b5915c395813a83a18e20050b2be87436a5b85d084128e52e9d404126b40a737db35277a7a661fee4b9c37cbfcab879bf10b0dd7ef5b53d987627caa58c89373db1e814de239cbd22ba611f45a7a722f1a38ed811ca867243cabac9d5f1f35e7b50563fac2e886eb595927d6759518f32e"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44f}}, {0xc6, &(0x7f0000000e40)=@string={0xc6, 0x3, "5db3aac18679de4bde3cf7b06513b445883cafcd44ec80efb9a262fe030d1e4f2bfcdf8613ff56a6c1fd2bc6943cc1379111119288d2ab7f08c0c7bfc23463ee9f3490e275618672ac61c2a39f1b05114bec39bba00b82fdba86742429606ddbac2d1737a22973ca29c4e578eded2aac6a6322492d423797b57b97660c37bf5343f367dd50e3c7d4f1bc803cbd0fc1e489ddb1d8c78ef7f61aa5c98e100da64ce5306b972c697cd66498985a0bc6245582cce9b9040facaaaa4962749a2d04d3b7d93ed1"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000010c0)={0x14, &(0x7f0000001000)={0x20, 0x0, 0x73, {0x73, 0xd, "0bca6bbec9898fc6615e129da62b355d9397909ce9495d31d72b66dd34816e6f8836989adbd9dbc91115a79f3aa08a05bddcc480f93e4cb424bce4149190efd2d278eaaeb3a228f0f713fe15de26fc8f98a63d4887c90814c2b43fbbc2a47802b5095576dc0f1c6b9a1cef8d3c2a7abc4b"}}, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x1c, &(0x7f0000001100)={0x40, 0x7, 0x47, "33eafcb00996e7117bf6b05f6eed5278143b4a68d1159ecfda77353ffb5f5ceae55352ec0fa37d297711221f7348fd7090d9c8ace700a5e0162727a9ac8763df5e4abf2fa75538"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x9a}}) 07:36:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4800, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:49 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 07:36:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xffffff7f}], 0x0, 0x0, 0x0}) [ 1620.972196][T20383] binder: 20379:20383 ioctl c0306201 20001480 returned -14 [ 1620.986130][T20382] binder: 20380:20382 ioctl c00c620f 20000100 returned -22 [ 1620.996377][T20383] binder: 20379:20383 ioctl c0306201 0 returned -14 [ 1621.027212][T20384] binder: BINDER_SET_CONTEXT_MGR already set [ 1621.033645][T20384] binder: 20378:20384 ioctl 4018620d 20000000 returned -16 [ 1621.035452][T20386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.048904][T20384] binder: 20378:20384 ioctl c0306201 20001480 returned -14 [ 1621.050787][T20386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:50 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x8, 0xb2, 0x1, {0x22, 0xe32}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x20, 0x62, 0xff}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7f, 0xad, 0x80, 0x10, 0x9}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x8, 0x1}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x41, &(0x7f0000000200)=@string={0x41, 0x3, "c5519cc760e1c834fb1a2422dea847cb3778531d7cbabf7b1bf9d806fa13b7949c0e2d6771dd3df652f774e97bdde1cd66ba787ce69ed86c8e05429dbabde1"}}, {0x13, &(0x7f0000000180)=@string={0x13, 0x3, "5378b3bcb59cb445dddad6e284dbb97270"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}, {0xd4, &(0x7f0000000300)=@string={0xd4, 0x3, "d27ffff1ee03bc7e0628ed59463d4336fa721205dccb15d6371654144906635bb2d8c4b58382b0a39bd846e4e38c6059e00fd32ae9abc3942686ee39bcaef474c0925129eb145d045134cfeb63506547579a52ed229ff947c540a2e31a4afe09048791dbe93193a1f25d97d96ac90866433fb924f9e972c695d42a148b3900e9edd009f510fa5947c442e2b015fd5d60ddc966c36d0e5ead1cc1594564520f3253e6fae0c67fa08a94c918c2c9c979bf88d2442c3cd5ef02c0583bbf946fd43ba4d41b30f200be336bd2dbb74f73c64cccab"}}, {0x7b, &(0x7f0000000400)=@string={0x7b, 0x3, "fc4b70a31266b391f2d5c7b7f4e321700309e21dd833293201483d600e084d27f9abda55aff5a102f8b72c3f6256e544a58413741602e833ee2ea860902215868e8cfb4f70434a3c8eb3d79ee86f73ff9a2ea9be1f6183bb7a8a6c3847a4bcaa17672fccff3a70f2e0dff518acb9070e0e916bc473aff9a214"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r1, &(0x7f00000007c0)={0x24, &(0x7f0000000680)={0x40, 0x22, 0xf1, {0xf1, 0x11, "af4b90ce3d09bea0dfd9efe24770d49a06dd271026f3ac848a7c4ee61734aa9931030f9b12327e3408c74c8721d6f31e8c8ac4ab2af08186f7bf841f03046e4b66acea2ef7b14be299bf632d1291aff9f4c7e7728d3e2439e0e0b600443d3030fc3a1798e4c2750f749784d97b40dd040a387a7a8ed98157c255d976a0a22d573afa7b88343bd5656e285979a157a84dc7fe06edef849d0f9e41d63d49421dcdb8fdf7c0d97a4cd4a8f921d1013d7d8a0d88cd9685421c96193ecd19677e0275772d5111b1f60630bd3dc0db0204dccb637c013fd1f029dee5ec045a595f5d440aa2e1bf4bac5350adfd8769799327"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000540)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0xa, "b7cb"}, @global=@item_4={0x3, 0x1, 0x5, "f82bcd01"}, @main=@item_012={0x1, 0x0, 0x8, 'e'}, @global=@item_4={0x3, 0x1, 0x0, "c0b4717f"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x781}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x20, 0x6, 0x98, "ee141071471cd9e4e124194acaaeed49c6352d01b5d27374a995c1b3830c90ce32b07bf38264f304d99f730bd2045b11c65098cdb0461969a87f32c3041fe6ba4d77d7efb64bbe86c3e7d54ebeefb1805ece97668ebb5f4fefd8192ceb72668ac7d067ae0c6f54ca7eac2d4b02760978926695141f21f0d9eb219034a94f66c5d8415cd20ec7e17fcfb315b3eea587dde1e30386bdbe24a0"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x1, 0x6e, "540439b2f3ff44e4b803d892b204e3cc0efda69b87fa466a524e5647c87ef78e8cdd36a80dfb164882e66419b1e34389925976c05712475111bc05f4de09520789fa1bd8ac1b5bb3955075eb6811bc74083b171ea3376461d248e4e32980c66fb25aef9aeda467449567d312c906"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000000b00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x7f, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0xf2, {{0xa, 0x24, 0x6, 0x0, 0x0, "af567fe349"}, {0x5, 0x24, 0x0, 0xbe}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x81, 0xbda8, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x8000, 0x4, 0x5, 0x200, 0x9}, @dmm={0x7, 0x24, 0x14, 0x0, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x1}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x8, 0x9, 0xfa, 0x7fff, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x310, 0x0, 0x8, 0x7b, 0x8, 0x3f}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x5, [{0xa, &(0x7f0000000c00)=@string={0xa, 0x3, "9dfb82062b09d5ea"}}, {0xd1, &(0x7f0000000d00)=@string={0xd1, 0x3, "ab6c50d877e2cfc2463c969c2e4e2e70c7293c61772888ebc1c6d6ee7d4ed10999bf75e9b0754e93eb67bf10b6f2866e62d2dc5735b5bc9d23593eb5eed6b5ae6cfe774891f0dbf12aa93ecfbd61d7117872a944da513dfc61f4e42b668d1e6ed6581755d229e857dfa3cbbe1432bca9ffd2fd7cad944b7cd557342d74fabe38bf7aeb43c44d7d97497058cd70e8db6a435156317d26c85a76f66618b3dcef78fc97ed9ebb36c6f0564aad12fa34da8ab742104ffc473bc2b6a39e507468c971e28d923270c487d91a0fb8b0a19932"}}, {0x29, &(0x7f0000000e00)=@string={0x29, 0x3, "387a5427ccbc8933aecb340ac345eed266024ac0bdbf0bf5e0b304a37d421a80362ae12b24dc91"}}, {0x83, &(0x7f0000000e40)=@string={0x83, 0x3, "84e12605a3f061107e115fe5f7eaee4ad15e01a14d624be07ebb45d1b44df265d428fc85465a5209b2317930de173b7570de55ddbcc23f548ec456f9b730ec04856611c8f9cb6120f5145ed30378c06d8ec4a29fc09ed11edd1b7d5b74c16942be52f6c1469360a3ee2a4a0a0ef837c9d44dc170ca80332cfea68f0e5739cd5958"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:50 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x41, 0x0, 0x0, 0x0, 0x40, 0x93a, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x0, 0xab, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x7, 0x5, {0x9, 0x21, 0x3f, 0x0, 0x1, {0x22, 0x2c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x4, 0xfa}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x80, 0xbf, 0x0, 0xd7, 0x7f}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x7, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0x7d, &(0x7f0000000100)=ANY=[@ANYRES8=r1]}, {0xef, &(0x7f0000000200)=@string={0xef, 0x3, "5895238e4af03a27bc4f23da0d394e1069909dae4c54c880c82fc874339ab6554fcbd9ebc89a682c04a5c01c615651b742a2b04faed9a812714925c21f44d6d71eb779b320c8e46cfba0455355c630e0b1ec6aa800af97b7c8fe0c73c9483d90d5e561217008871d54b919dfd12d231686ebb548c8a6a259015430d68da6177974dffb78ee620d5a8222d04c783d44e815b35104b01441b7980a6b180ec86e458abbf03396420428db4a2970de20ae44e6c680a57c3efd96837d2524772e2b72fd9115e5c94d03e562f0cd7640a4112583e5904979cbe589843f891be9e6e7c6bcac6b00"/237}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "54df7970d93cdbec3841d8d849b117138d225ffe80e878c004034debee637f7edab6afc82f03d4475a264aba824aa1cdfdb5ecc195be4fd691bec9b6f1aa0ce62795a5892dfe823ddf60edf068bfc2e1c6b53b5648440e781c81bf01e33e26cf250009bd0bb4a413909c5986f767da014993e70ed6418112be13d536b04b2fd7ba55f485208ed7af10ca2e2c59e22599add97a75225f2e18d9e669028548c479f67e7980438172ec2a4ae55ab659eaffb6991323f1f4e8b1cc6f3862c560b0ffc6465d7e4ebb95ae0fad7622dc8033dfda34ec123d086e15d6bcbd77ced5ed72dc8c697c3d56"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x9, 0x22, {0x22, 0x23, "2ff16558e8057771a36cee5cc46d614792c2db24e5b498f10595401b043a0139"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "14670ab9a0e3ee7ee185aa98153b990e0ca73d52157af0437992106087c6e351ca4d2d94836166db52eba6cabb753bd3495e70f143e4c804c8ee9ed5a89660f777af96e7af8e9e70"}}, &(0x7f0000000540)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x4, 0x1, "e36ae8b3", "d0ec69e9"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x40, 0x0, 0x3, 0x8, 0x9}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200a6c000000f62254cf85f01005f19a1a770677bad0e79af4079a4f5802f845a3592999ba0f7021e18d96ff724b00000000fc388346e7fb463eeb8c87b7ab3063ee6b839d961a48a5656846395141872092824c81505a0654f025a386cab43a8ef082899b49020000000000000059f5a320"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x6a}, &(0x7f0000000940)={0x40, 0xb, 0x2, "3698"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x40}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "4b8b"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0xfe00}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x3}}) r2 = syz_usb_connect$uac1(0x0, 0xc3, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x8, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1f}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x1, 0x1, "39f3fb4625"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x7}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x6, 'z;'}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xb5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x95, 0x5b5, 0x7f, 'UoJR'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0xa7, 0x73, {0x7, 0x25, 0x1, 0x81, 0x80, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0xfffd, 0x40, "c463fe8bf4c8e3b11d"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7fff, 0x8, 0x7, "135d"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xd0, 0x3f, "9cd7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x5, 0x2, {0x7, 0x25, 0x1, 0x81, 0x29, 0x2}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x81, 0xff, 0x20, 0x20, 0x40}, 0x72, &(0x7f0000000e00)={0x5, 0xf, 0x72, 0x3, [@generic={0x57, 0x10, 0x4, "4d50b9084bdccc7dd314a31a0e7014827ba187258ac30520254feb2e2c002e3ba890ae271cceddea1a675f0c027a0764715e77a43514ee88223f30fe597565050049e0ce50c0722c764b7aa98154766abf6700cb"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x5, 0xa9, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x4, 0xd4a5, 0x70}]}, 0x4, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x180c}}, {0x81, &(0x7f0000000f00)=@string={0x81, 0x3, "2d389ffee0d47add65ff5bd2693901f160103dcd6f1e39358b5fd9dfb24163c35b50bbff2a67ad709d6b51220a146e843dc417c8d195ea937503cb61e978ebf26bcb15aa87ba855526ba1c6060254148ad90be9e7fd91a657b20b19bb9c5587e67fefc83f42c7857d1be7456145777d1917dabbd6596e184a96e4225f8cfa9"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r2, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0x6, 0xda, {0xda, 0x7, "a04e84488c0c673d0d0d696da9c9c300be4f3c07a4390cd1c8626e143379373e50dadcebe64bec571f87ff584e13980a11d0b26e73e071cffa384259607ab1758891c7ca25ca69789bcbb7fec9dc50892e52744bb0baead0ca25b373b5db59509af7e65704bbd62aa0ad272eff7435709c29954949c607b0f6417095666d20f711307ce1e3f4200854b431b3801b91d21dc52a53428afcf54c868227752c6dcc5ad78e9d54c8432d2282e1fd50c07a1b8331754be8d9c0451898c387c1c4b72492de3863e25c927b19963cf6e5ae382a87b763d82d1ef4f5"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000011c0)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x2, [@generic={0x43, 0x10, 0x8, "76d476615fa1fba668a13befe5480cf42953dfa99b46f3e8387d119f6e36b71cc86012a99a601509df7be1271cd9812c456488e3d9000cc55e5cbcf78f6e426e"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "b62b8a7a5fb385f782b506c65cfc03b1"}]}}, &(0x7f0000001240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0xf4, 0xf, "8bc19886", "f920e706"}}, &(0x7f0000001280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x3, 0xdd, 0x7, 0x0, 0x5, 0x5}}}, &(0x7f0000001740)={0x84, &(0x7f0000001300)={0x40, 0x31, 0x76, "a5d72967fb13c98758cfc6abc572c536ce70a861a6dc613d799b9a12cfbe080cdab58f7adaaf749045dffa0c46d06286a1993201f8dd93364b96936d79a679c454cd715f13163cb7e05f57b9c2309b6fb0ab6dde2df1cf5e4200efa63ed9f6f76fdd6167eb652a02e41e5393a7bafaf293afafa80663"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001440)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf00]}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001500)={0x40, 0xb, 0x2, "1b49"}, &(0x7f0000001540)={0x40, 0xf, 0x2, 0x7be}, &(0x7f0000001580)={0x40, 0x13, 0x6, @local}, &(0x7f00000015c0)={0x40, 0x17, 0x6, @random="c60130faa558"}, &(0x7f0000001600)={0x40, 0x19, 0x2, 'T`'}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 07:36:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xfffffffc}], 0x0, 0x0, 0x0}) [ 1621.312174][ T5037] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1621.398636][T20393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.408708][T20393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.443304][T20390] binder: 20388:20390 ioctl c0306201 20001480 returned -14 [ 1621.470338][T20396] binder: 20391:20396 ioctl c00c620f 20000100 returned -22 [ 1621.477445][T20390] binder: 20388:20390 ioctl c0306201 0 returned -14 [ 1621.505714][T20395] binder: 20389:20395 ioctl c0306201 20001480 returned -14 07:36:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4c2a, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1621.561215][T20395] binder_alloc: 20389: binder_alloc_buf size 4294967424 failed, no address space [ 1621.562406][ T5037] usb 4-1: Using ep0 maxpacket: 8 [ 1621.575105][T20395] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1621.693067][ T5037] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=b2.d9 [ 1621.702924][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:36:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x60ffffffffff}], 0x0, 0x0, 0x0}) [ 1621.743932][ T5037] usb 4-1: config 0 descriptor?? [ 1621.750351][T20401] binder: 20398:20401 ioctl c00c620f 20000100 returned -22 [ 1621.762160][T16196] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1621.772640][T11046] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1621.822398][T20400] binder: 20399:20400 ioctl c0306201 20001480 returned -14 [ 1621.842813][ T5037] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 1621.849390][ T5037] usbtest: probe of 4-1:0.0 failed with error -22 [ 1621.977349][T20403] binder: 20402:20403 ioctl c0306201 20001480 returned -14 [ 1622.002379][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1622.023235][T11046] usb 6-1: Using ep0 maxpacket: 32 [ 1622.030431][ T21] usb 4-1: USB disconnect, device number 68 [ 1622.030580][T20403] binder_alloc: 20402: binder_alloc_buf size 106652627894400 failed, no address space [ 1622.047277][T20403] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1622.132792][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1622.141421][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1622.151445][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1622.161149][T16196] usb 1-1: config 1 has no interface number 0 [ 1622.167538][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1622.178993][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1622.193014][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1622.202402][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.212097][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1622.220768][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1622.229848][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1622.239061][T11046] usb 6-1: config 1 has no interface number 0 [ 1622.245468][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1622.256793][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1622.270235][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1622.279560][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.340976][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1622.356936][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1622.544209][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1622.565724][T20397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.575408][T20397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x21f4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100), 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES32=r1], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f054000"], 0x1, [{0x0, 0x0}]}) 07:36:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4c2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:51 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x1000000000000}], 0x0, 0x0, 0x0}) [ 1622.634357][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1622.746989][T20408] binder: BINDER_SET_CONTEXT_MGR already set [ 1622.753382][T20408] binder: 20407:20408 ioctl 4018620d 20000000 returned -16 [ 1622.779649][T20411] binder: 20405:20411 ioctl c00c620f 20000100 returned -22 [ 1622.794068][T20408] binder: 20407:20408 ioctl c0306201 20001480 returned -14 [ 1622.837464][T20409] binder: 20406:20409 ioctl c0306201 20001480 returned -14 [ 1623.125255][T20417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.135325][T20417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.302086][ T5037] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1623.400440][ T21] usb 6-1: USB disconnect, device number 90 [ 1623.428675][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1623.522671][ T5037] usb 4-1: device descriptor read/64, error 18 [ 1623.602221][T11046] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1623.791997][ T5037] usb 4-1: new high-speed USB device number 70 using dummy_hcd 07:36:53 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x7f, {0x7f, 0x24, "660631e3c7001afcb9a71534a6b54fcf22ebc5ebe21d9c82fea5628f3488351bed2004edd81d852ca26b0ff42c6caa1efc086691327204bea81e597fd2c412ad3fe6d9a9ddd09b127b6742188f28ebe6b48f7733b96fd8f389c269efc31f03dc882a172f0b7aaae766dd5eabd9624ae5a413571079ab1a2d754441acad"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000200)={0x0, 0xf, 0xf7, {0x5, 0xf, 0xf7, 0x3, [@generic={0xd4, 0x10, 0xb, "6b0b49c46bd76306d13e21df6022082c772cf5fbf1c3a0325524efd0d943bf06eb62d5394fda705c5ea21a95919d38712559aeabfc4e4670b780e06dc29dd7fc0a4aa4cd0240697758819835606abecfb6da968ba6490a54f7895b8ff7b536f2bc14e6425d73591562aff700732dcdb3c685ee761a117d9b7d72c59521c11696bc5d3bbc40578d740d0465fe7362f58d0b478f480937d71fa00d20e4df0bc9476890b1b61f730f21b9bd166ba5193827ae42fd82879d25a8bd6c43b765e2e6a41b6642be56a4d3bf2e1929bbea4a2f33fc"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a61fc3ed7bac61836c2e06a47af4d583"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x40, 0xd71}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x506ecb7c9d39c031, 0x6, 0x7, "c8a02394", "fc41e918"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x1, 0x88, 0x4, 0x6, 0x800}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0xb, 0x46, "8a4bd86a3931cd1e68c18a8e9bfb24bfae77ea8bbb358eebbf7797660c679e612ccdad3c1b7bb604f4bb658b89ba791acc1602f81322d6e381dd46570430e78f256bf5bf93c4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xa}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1ef0"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="267daf34969f"}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5312"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1624.002741][ T5037] usb 4-1: device descriptor read/64, error 18 [ 1624.122686][ T5037] usb usb4-port1: attempt power cycle [ 1624.252018][T11046] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1624.492113][T11046] usb 6-1: Using ep0 maxpacket: 32 [ 1624.582102][ T5037] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1624.612755][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1624.621347][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1624.630482][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1624.639789][T11046] usb 6-1: config 1 has no interface number 0 [ 1624.649714][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1624.661800][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1624.675068][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1624.684449][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.738295][T16196] usb 1-1: USB disconnect, device number 105 [ 1624.764041][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found 07:36:53 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x41, 0x0, 0x0, 0x0, 0x40, 0x93a, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x0, 0xab, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x7, 0x5, {0x9, 0x21, 0x3f, 0x0, 0x1, {0x22, 0x2c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x4, 0xfa}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x80, 0xbf, 0x0, 0xd7, 0x7f}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x7, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0x7d, &(0x7f0000000100)=ANY=[@ANYRES8=r1]}, {0xef, &(0x7f0000000200)=@string={0xef, 0x3, "5895238e4af03a27bc4f23da0d394e1069909dae4c54c880c82fc874339ab6554fcbd9ebc89a682c04a5c01c615651b742a2b04faed9a812714925c21f44d6d71eb779b320c8e46cfba0455355c630e0b1ec6aa800af97b7c8fe0c73c9483d90d5e561217008871d54b919dfd12d231686ebb548c8a6a259015430d68da6177974dffb78ee620d5a8222d04c783d44e815b35104b01441b7980a6b180ec86e458abbf03396420428db4a2970de20ae44e6c680a57c3efd96837d2524772e2b72fd9115e5c94d03e562f0cd7640a4112583e5904979cbe589843f891be9e6e7c6bcac6b00"/237}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "54df7970d93cdbec3841d8d849b117138d225ffe80e878c004034debee637f7edab6afc82f03d4475a264aba824aa1cdfdb5ecc195be4fd691bec9b6f1aa0ce62795a5892dfe823ddf60edf068bfc2e1c6b53b5648440e781c81bf01e33e26cf250009bd0bb4a413909c5986f767da014993e70ed6418112be13d536b04b2fd7ba55f485208ed7af10ca2e2c59e22599add97a75225f2e18d9e669028548c479f67e7980438172ec2a4ae55ab659eaffb6991323f1f4e8b1cc6f3862c560b0ffc6465d7e4ebb95ae0fad7622dc8033dfda34ec123d086e15d6bcbd77ced5ed72dc8c697c3d56"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x408}}]}) (async) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x9, 0x22, {0x22, 0x23, "2ff16558e8057771a36cee5cc46d614792c2db24e5b498f10595401b043a0139"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "14670ab9a0e3ee7ee185aa98153b990e0ca73d52157af0437992106087c6e351ca4d2d94836166db52eba6cabb753bd3495e70f143e4c804c8ee9ed5a89660f777af96e7af8e9e70"}}, &(0x7f0000000540)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x4, 0x1, "e36ae8b3", "d0ec69e9"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x40, 0x0, 0x3, 0x8, 0x9}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200a6c000000f62254cf85f01005f19a1a770677bad0e79af4079a4f5802f845a3592999ba0f7021e18d96ff724b00000000fc388346e7fb463eeb8c87b7ab3063ee6b839d961a48a5656846395141872092824c81505a0654f025a386cab43a8ef082899b49020000000000000059f5a320"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x6a}, &(0x7f0000000940)={0x40, 0xb, 0x2, "3698"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x40}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "4b8b"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0xfe00}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x3}}) r2 = syz_usb_connect$uac1(0x0, 0xc3, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x8, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1f}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x1, 0x1, "39f3fb4625"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x7}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x6, 'z;'}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xb5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x95, 0x5b5, 0x7f, 'UoJR'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0xa7, 0x73, {0x7, 0x25, 0x1, 0x81, 0x80, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0xfffd, 0x40, "c463fe8bf4c8e3b11d"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7fff, 0x8, 0x7, "135d"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xd0, 0x3f, "9cd7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x5, 0x2, {0x7, 0x25, 0x1, 0x81, 0x29, 0x2}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x81, 0xff, 0x20, 0x20, 0x40}, 0x72, &(0x7f0000000e00)={0x5, 0xf, 0x72, 0x3, [@generic={0x57, 0x10, 0x4, "4d50b9084bdccc7dd314a31a0e7014827ba187258ac30520254feb2e2c002e3ba890ae271cceddea1a675f0c027a0764715e77a43514ee88223f30fe597565050049e0ce50c0722c764b7aa98154766abf6700cb"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x5, 0xa9, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x4, 0xd4a5, 0x70}]}, 0x4, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x180c}}, {0x81, &(0x7f0000000f00)=@string={0x81, 0x3, "2d389ffee0d47add65ff5bd2693901f160103dcd6f1e39358b5fd9dfb24163c35b50bbff2a67ad709d6b51220a146e843dc417c8d195ea937503cb61e978ebf26bcb15aa87ba855526ba1c6060254148ad90be9e7fd91a657b20b19bb9c5587e67fefc83f42c7857d1be7456145777d1917dabbd6596e184a96e4225f8cfa9"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r2, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0x6, 0xda, {0xda, 0x7, "a04e84488c0c673d0d0d696da9c9c300be4f3c07a4390cd1c8626e143379373e50dadcebe64bec571f87ff584e13980a11d0b26e73e071cffa384259607ab1758891c7ca25ca69789bcbb7fec9dc50892e52744bb0baead0ca25b373b5db59509af7e65704bbd62aa0ad272eff7435709c29954949c607b0f6417095666d20f711307ce1e3f4200854b431b3801b91d21dc52a53428afcf54c868227752c6dcc5ad78e9d54c8432d2282e1fd50c07a1b8331754be8d9c0451898c387c1c4b72492de3863e25c927b19963cf6e5ae382a87b763d82d1ef4f5"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000011c0)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x2, [@generic={0x43, 0x10, 0x8, "76d476615fa1fba668a13befe5480cf42953dfa99b46f3e8387d119f6e36b71cc86012a99a601509df7be1271cd9812c456488e3d9000cc55e5cbcf78f6e426e"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "b62b8a7a5fb385f782b506c65cfc03b1"}]}}, &(0x7f0000001240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0xf4, 0xf, "8bc19886", "f920e706"}}, &(0x7f0000001280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x3, 0xdd, 0x7, 0x0, 0x5, 0x5}}}, &(0x7f0000001740)={0x84, &(0x7f0000001300)={0x40, 0x31, 0x76, "a5d72967fb13c98758cfc6abc572c536ce70a861a6dc613d799b9a12cfbe080cdab58f7adaaf749045dffa0c46d06286a1993201f8dd93364b96936d79a679c454cd715f13163cb7e05f57b9c2309b6fb0ab6dde2df1cf5e4200efa63ed9f6f76fdd6167eb652a02e41e5393a7bafaf293afafa80663"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001440)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf00]}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001500)={0x40, 0xb, 0x2, "1b49"}, &(0x7f0000001540)={0x40, 0xf, 0x2, 0x7be}, &(0x7f0000001580)={0x40, 0x13, 0x6, @local}, &(0x7f00000015c0)={0x40, 0x17, 0x6, @random="c60130faa558"}, &(0x7f0000001600)={0x40, 0x19, 0x2, 'T`'}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:53 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x100000000000000}], 0x0, 0x0, 0x0}) [ 1624.782910][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1624.803342][ T5037] usb 4-1: device descriptor read/8, error -61 [ 1624.924337][T20426] binder: 20422:20426 ioctl c00c620f 20000100 returned -22 [ 1624.945586][T20424] binder: 20421:20424 ioctl c0306201 20001480 returned -14 [ 1624.986251][T20419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.996103][T20419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.005425][T20428] binder: 20420:20428 ioctl c0306201 20001480 returned -14 [ 1625.040359][T20425] binder_alloc: 20420: binder_alloc_buf size 72057594037928064 failed, no address space [ 1625.055339][T20425] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1625.082375][ T5037] usb 4-1: new high-speed USB device number 72 using dummy_hcd 07:36:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 07:36:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x200000000000000}], 0x0, 0x0, 0x0}) [ 1625.193175][T20430] binder: 20429:20430 ioctl c00c620f 20000100 returned -22 [ 1625.270203][T20432] binder: 20431:20432 ioctl c0306201 20001480 returned -14 [ 1625.284223][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1625.286068][ T5037] usb 4-1: device descriptor read/8, error -61 [ 1625.312159][T16196] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1625.391522][T20435] binder: 20433:20435 ioctl c0306201 20001480 returned -14 [ 1625.407110][T20435] binder_alloc: 20433: binder_alloc_buf size 144115188075856000 failed, no address space [ 1625.417736][T20435] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1625.427131][ T5037] usb usb4-port1: unable to enumerate USB device [ 1625.552275][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1625.672207][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1625.681188][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1625.690621][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1625.699964][T16196] usb 1-1: config 1 has no interface number 0 [ 1625.706716][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1625.717971][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1625.731476][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1625.741161][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:36:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x21f4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100), 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES32=r1], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f054000"], 0x1, [{0x0, 0x0}]}) 07:36:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 07:36:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x300000000000000}], 0x0, 0x0, 0x0}) [ 1625.821622][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1625.930902][T20439] binder: 20438:20439 ioctl c0306201 20001480 returned -14 [ 1625.939120][T20441] binder: 20437:20441 ioctl c00c620f 20000100 returned -22 [ 1625.960320][T20442] binder: 20436:20442 ioctl c0306201 20001480 returned -14 [ 1625.989057][T20439] binder_alloc: 20438: binder_alloc_buf size 216172782113783936 failed, no address space [ 1625.999938][T20439] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1626.022428][ T1202] ieee802154 phy0 wpan0: encryption failed: -22 [ 1626.029042][ T1202] ieee802154 phy1 wpan1: encryption failed: -22 [ 1626.034357][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1626.100152][ T5037] usb 6-1: USB disconnect, device number 91 [ 1626.135134][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 07:36:55 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x7f, {0x7f, 0x24, "660631e3c7001afcb9a71534a6b54fcf22ebc5ebe21d9c82fea5628f3488351bed2004edd81d852ca26b0ff42c6caa1efc086691327204bea81e597fd2c412ad3fe6d9a9ddd09b127b6742188f28ebe6b48f7733b96fd8f389c269efc31f03dc882a172f0b7aaae766dd5eabd9624ae5a413571079ab1a2d754441acad"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000200)={0x0, 0xf, 0xf7, {0x5, 0xf, 0xf7, 0x3, [@generic={0xd4, 0x10, 0xb, "6b0b49c46bd76306d13e21df6022082c772cf5fbf1c3a0325524efd0d943bf06eb62d5394fda705c5ea21a95919d38712559aeabfc4e4670b780e06dc29dd7fc0a4aa4cd0240697758819835606abecfb6da968ba6490a54f7895b8ff7b536f2bc14e6425d73591562aff700732dcdb3c685ee761a117d9b7d72c59521c11696bc5d3bbc40578d740d0465fe7362f58d0b478f480937d71fa00d20e4df0bc9476890b1b61f730f21b9bd166ba5193827ae42fd82879d25a8bd6c43b765e2e6a41b6642be56a4d3bf2e1929bbea4a2f33fc"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a61fc3ed7bac61836c2e06a47af4d583"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x40, 0xd71}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x506ecb7c9d39c031, 0x6, 0x7, "c8a02394", "fc41e918"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x1, 0x88, 0x4, 0x6, 0x800}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0xb, 0x46, "8a4bd86a3931cd1e68c18a8e9bfb24bfae77ea8bbb358eebbf7797660c679e612ccdad3c1b7bb604f4bb658b89ba791acc1602f81322d6e381dd46570430e78f256bf5bf93c4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xa}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1ef0"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="267daf34969f"}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5312"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1626.600961][T20427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.610653][T20427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.699468][T20452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.709375][T20452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.944526][T16196] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1627.043238][T11046] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) 07:36:57 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x41, 0x0, 0x0, 0x0, 0x40, 0x93a, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x0, 0xab, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x7, 0x5, {0x9, 0x21, 0x3f, 0x0, 0x1, {0x22, 0x2c5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x4, 0xfa}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x80, 0xbf, 0x0, 0xd7, 0x7f}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x7, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0x7d, &(0x7f0000000100)=ANY=[@ANYRES8=r1]}, {0xef, &(0x7f0000000200)=@string={0xef, 0x3, "5895238e4af03a27bc4f23da0d394e1069909dae4c54c880c82fc874339ab6554fcbd9ebc89a682c04a5c01c615651b742a2b04faed9a812714925c21f44d6d71eb779b320c8e46cfba0455355c630e0b1ec6aa800af97b7c8fe0c73c9483d90d5e561217008871d54b919dfd12d231686ebb548c8a6a259015430d68da6177974dffb78ee620d5a8222d04c783d44e815b35104b01441b7980a6b180ec86e458abbf03396420428db4a2970de20ae44e6c680a57c3efd96837d2524772e2b72fd9115e5c94d03e562f0cd7640a4112583e5904979cbe589843f891be9e6e7c6bcac6b00"/237}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "54df7970d93cdbec3841d8d849b117138d225ffe80e878c004034debee637f7edab6afc82f03d4475a264aba824aa1cdfdb5ecc195be4fd691bec9b6f1aa0ce62795a5892dfe823ddf60edf068bfc2e1c6b53b5648440e781c81bf01e33e26cf250009bd0bb4a413909c5986f767da014993e70ed6418112be13d536b04b2fd7ba55f485208ed7af10ca2e2c59e22599add97a75225f2e18d9e669028548c479f67e7980438172ec2a4ae55ab659eaffb6991323f1f4e8b1cc6f3862c560b0ffc6465d7e4ebb95ae0fad7622dc8033dfda34ec123d086e15d6bcbd77ced5ed72dc8c697c3d56"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x408}}]}) (async) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x9, 0x22, {0x22, 0x23, "2ff16558e8057771a36cee5cc46d614792c2db24e5b498f10595401b043a0139"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "14670ab9a0e3ee7ee185aa98153b990e0ca73d52157af0437992106087c6e351ca4d2d94836166db52eba6cabb753bd3495e70f143e4c804c8ee9ed5a89660f777af96e7af8e9e70"}}, &(0x7f0000000540)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x4, 0x1, "e36ae8b3", "d0ec69e9"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x40, 0x0, 0x3, 0x8, 0x9}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200a6c000000f62254cf85f01005f19a1a770677bad0e79af4079a4f5802f845a3592999ba0f7021e18d96ff724b00000000fc388346e7fb463eeb8c87b7ab3063ee6b839d961a48a5656846395141872092824c81505a0654f025a386cab43a8ef082899b49020000000000000059f5a320"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x6a}, &(0x7f0000000940)={0x40, 0xb, 0x2, "3698"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x40}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "4b8b"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0xfe00}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x3}}) r2 = syz_usb_connect$uac1(0x0, 0xc3, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x8, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1f}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x1, 0x1, "39f3fb4625"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x7}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x6, 'z;'}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xb5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x95, 0x5b5, 0x7f, 'UoJR'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xff, 0xa7, 0x73, {0x7, 0x25, 0x1, 0x81, 0x80, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0xfffd, 0x40, "c463fe8bf4c8e3b11d"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7fff, 0x8, 0x7, "135d"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0xd0, 0x3f, "9cd7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x5, 0x2, {0x7, 0x25, 0x1, 0x81, 0x29, 0x2}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x81, 0xff, 0x20, 0x20, 0x40}, 0x72, &(0x7f0000000e00)={0x5, 0xf, 0x72, 0x3, [@generic={0x57, 0x10, 0x4, "4d50b9084bdccc7dd314a31a0e7014827ba187258ac30520254feb2e2c002e3ba890ae271cceddea1a675f0c027a0764715e77a43514ee88223f30fe597565050049e0ce50c0722c764b7aa98154766abf6700cb"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x5, 0xa9, 0x2, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x4, 0xd4a5, 0x70}]}, 0x4, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x180c}}, {0x81, &(0x7f0000000f00)=@string={0x81, 0x3, "2d389ffee0d47add65ff5bd2693901f160103dcd6f1e39358b5fd9dfb24163c35b50bbff2a67ad709d6b51220a146e843dc417c8d195ea937503cb61e978ebf26bcb15aa87ba855526ba1c6060254148ad90be9e7fd91a657b20b19bb9c5587e67fefc83f42c7857d1be7456145777d1917dabbd6596e184a96e4225f8cfa9"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io(r2, &(0x7f00000012c0)={0x2c, &(0x7f0000001080)={0x20, 0x6, 0xda, {0xda, 0x7, "a04e84488c0c673d0d0d696da9c9c300be4f3c07a4390cd1c8626e143379373e50dadcebe64bec571f87ff584e13980a11d0b26e73e071cffa384259607ab1758891c7ca25ca69789bcbb7fec9dc50892e52744bb0baead0ca25b373b5db59509af7e65704bbd62aa0ad272eff7435709c29954949c607b0f6417095666d20f711307ce1e3f4200854b431b3801b91d21dc52a53428afcf54c868227752c6dcc5ad78e9d54c8432d2282e1fd50c07a1b8331754be8d9c0451898c387c1c4b72492de3863e25c927b19963cf6e5ae382a87b763d82d1ef4f5"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000011c0)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x2, [@generic={0x43, 0x10, 0x8, "76d476615fa1fba668a13befe5480cf42953dfa99b46f3e8387d119f6e36b71cc86012a99a601509df7be1271cd9812c456488e3d9000cc55e5cbcf78f6e426e"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "b62b8a7a5fb385f782b506c65cfc03b1"}]}}, &(0x7f0000001240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0xf4, 0xf, "8bc19886", "f920e706"}}, &(0x7f0000001280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x3, 0xdd, 0x7, 0x0, 0x5, 0x5}}}, &(0x7f0000001740)={0x84, &(0x7f0000001300)={0x40, 0x31, 0x76, "a5d72967fb13c98758cfc6abc572c536ce70a861a6dc613d799b9a12cfbe080cdab58f7adaaf749045dffa0c46d06286a1993201f8dd93364b96936d79a679c454cd715f13163cb7e05f57b9c2309b6fb0ab6dde2df1cf5e4200efa63ed9f6f76fdd6167eb652a02e41e5393a7bafaf293afafa80663"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001440)={0x20, 0x0, 0x8, {0x4, 0x2, [0xf00]}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0x401}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001500)={0x40, 0xb, 0x2, "1b49"}, &(0x7f0000001540)={0x40, 0xf, 0x2, 0x7be}, &(0x7f0000001580)={0x40, 0x13, 0x6, @local}, &(0x7f00000015c0)={0x40, 0x17, 0x6, @random="c60130faa558"}, &(0x7f0000001600)={0x40, 0x19, 0x2, 'T`'}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0x1}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:36:57 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 07:36:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x400000000000000}], 0x0, 0x0, 0x0}) 07:36:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6800, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x21f4) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES32=r1], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f054000"], 0x1, [{0x0, 0x0}]}) 07:36:57 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x7f, {0x7f, 0x24, "660631e3c7001afcb9a71534a6b54fcf22ebc5ebe21d9c82fea5628f3488351bed2004edd81d852ca26b0ff42c6caa1efc086691327204bea81e597fd2c412ad3fe6d9a9ddd09b127b6742188f28ebe6b48f7733b96fd8f389c269efc31f03dc882a172f0b7aaae766dd5eabd9624ae5a413571079ab1a2d754441acad"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000200)={0x0, 0xf, 0xf7, {0x5, 0xf, 0xf7, 0x3, [@generic={0xd4, 0x10, 0xb, "6b0b49c46bd76306d13e21df6022082c772cf5fbf1c3a0325524efd0d943bf06eb62d5394fda705c5ea21a95919d38712559aeabfc4e4670b780e06dc29dd7fc0a4aa4cd0240697758819835606abecfb6da968ba6490a54f7895b8ff7b536f2bc14e6425d73591562aff700732dcdb3c685ee761a117d9b7d72c59521c11696bc5d3bbc40578d740d0465fe7362f58d0b478f480937d71fa00d20e4df0bc9476890b1b61f730f21b9bd166ba5193827ae42fd82879d25a8bd6c43b765e2e6a41b6642be56a4d3bf2e1929bbea4a2f33fc"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a61fc3ed7bac61836c2e06a47af4d583"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x40, 0xd71}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x506ecb7c9d39c031, 0x6, 0x7, "c8a02394", "fc41e918"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x1, 0x88, 0x4, 0x6, 0x800}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0xb, 0x46, "8a4bd86a3931cd1e68c18a8e9bfb24bfae77ea8bbb358eebbf7797660c679e612ccdad3c1b7bb604f4bb658b89ba791acc1602f81322d6e381dd46570430e78f256bf5bf93c4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xa}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1ef0"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="267daf34969f"}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5312"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x7f, {0x7f, 0x24, "660631e3c7001afcb9a71534a6b54fcf22ebc5ebe21d9c82fea5628f3488351bed2004edd81d852ca26b0ff42c6caa1efc086691327204bea81e597fd2c412ad3fe6d9a9ddd09b127b6742188f28ebe6b48f7733b96fd8f389c269efc31f03dc882a172f0b7aaae766dd5eabd9624ae5a413571079ab1a2d754441acad"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000200)={0x0, 0xf, 0xf7, {0x5, 0xf, 0xf7, 0x3, [@generic={0xd4, 0x10, 0xb, "6b0b49c46bd76306d13e21df6022082c772cf5fbf1c3a0325524efd0d943bf06eb62d5394fda705c5ea21a95919d38712559aeabfc4e4670b780e06dc29dd7fc0a4aa4cd0240697758819835606abecfb6da968ba6490a54f7895b8ff7b536f2bc14e6425d73591562aff700732dcdb3c685ee761a117d9b7d72c59521c11696bc5d3bbc40578d740d0465fe7362f58d0b478f480937d71fa00d20e4df0bc9476890b1b61f730f21b9bd166ba5193827ae42fd82879d25a8bd6c43b765e2e6a41b6642be56a4d3bf2e1929bbea4a2f33fc"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a61fc3ed7bac61836c2e06a47af4d583"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x40, 0xd71}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x506ecb7c9d39c031, 0x6, 0x7, "c8a02394", "fc41e918"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x1, 0x88, 0x4, 0x6, 0x800}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0xb, 0x46, "8a4bd86a3931cd1e68c18a8e9bfb24bfae77ea8bbb358eebbf7797660c679e612ccdad3c1b7bb604f4bb658b89ba791acc1602f81322d6e381dd46570430e78f256bf5bf93c4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xa}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1ef0"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="267daf34969f"}, &(0x7f0000000680)={0x40, 0x19, 0x2, "5312"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) [ 1628.199300][T16196] usb 1-1: USB disconnect, device number 106 [ 1628.275480][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1628.353995][T20465] binder: 20457:20465 ioctl c00c620f 20000100 returned -22 [ 1628.354059][T20464] binder: BINDER_SET_CONTEXT_MGR already set [ 1628.354099][T20464] binder: 20460:20464 ioctl 4018620d 20000000 returned -16 [ 1628.384220][T20459] binder: BINDER_SET_CONTEXT_MGR already set [ 1628.390475][T20459] binder: 20458:20459 ioctl 4018620d 20000000 returned -16 07:36:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:57 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r0 = syz_usb_connect$cdc_ecm(0x5, 0x11a, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x1, 0x40, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0x43, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "3e88de"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3f, 0x3, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x7, 0x8, 0x5f}, @mdlm_detail={0x35, 0x24, 0x13, 0x2a, "48c72da2f73a324bd5cef11a4ed6697dd5177f6c1c6245f459fac22a1aa83b9ac00294657c62c6c9cc2b8247a364a93cbc"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm_detail={0x7c, 0x24, 0x13, 0x8, "f8ccb4f337a041b66611e40e9b065a1dd868b757e8eee5721e1a098f88a764b5dc6ad9b1583bb195a0f1176b8c705916e4d2481c0bf29819164a79a889c2c0f387bf34870e5d6cb3668b63fbc0e2742b29427c14d9717d5a557d793ad6caf834159fc4d955c725df0669ce422084d73db8db70e1803fe11f"}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x7, 0xfffd}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6a, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x19, 0x7f, 0x4d, 0xff, 0x5}, 0x24, &(0x7f0000000d80)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fff, 0xff0f, 0x800, [0xff3f30, 0xff30, 0xc000, 0x6000]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x410}}, {0xb5, &(0x7f0000000e40)=ANY=[@ANYBLOB="b503853b73da9a5951ba7111f12f0f03c8e2025405f57591a81a06350eb8c7d14d7eee55efd71284ac1b25c9a5675eff739ea92104bc063fdb039e735d865159791e3724362605d7488745f94666af0ded89d1104c3f568346f9b153c333206b70c9f12f5c869b86b9438c69d806486b80f89ac259e3e4bc322538bc7d6e28e0ba73fab7d9419d5189597a5cbe75e19e52ade3f942d932db3059c3243b52b9520c0899eb5136fba3035088fe4f7c6d3e94fe73019b"]}, {0xa1, &(0x7f0000000f00)=@string={0xa1, 0x3, "a841cee8910a1507f15b4cde454583e636899783c7c47bccd399991bd565f7d6b8b42889ec5bac4ba69b23ddf54578d113e8faa8d8113c4ef0a60877aeb3318a7f379c56eef7c804ad60a8b1c961f5b391584c122f2df64007e017bb97619633f207294208cdfa831c3ea7fec22984e0ba48eb75c9ace0e9844872c740cadc95090a3bc481678efc460ed7e027dff0333f4f08fe7868c4058e913a1af94df3"}}, {0xef, &(0x7f0000000fc0)=@string={0xef, 0x3, "b028b6774b9204d4fe8b0a54571e072abe846630ab665a85c9179b92b40ac32d84c2a656c393f76f83a89687ed5e9b83d7f623dbf8d1f5921cf9330a995b7b4d136f289ae6db469824ecbe116cb9aa449257a5b69d3168f5fbb651c241b7921d3a28d1bbe075fd06fb2275111cc9d9cce3059ad67e556aba705a8157c6777b43d43f258dbdd9eb714ba9976088ce9166970b7aea5607ced5a60f6d9882eb4cca50f5894a93eec52d76bb7cc43ce37fa63b99c813cd0531a66c82f58710e2d43bc00be64003b938a79beead2ef936fe2bf591487bffbe992c74ffd7f1789d5730869555e38d52ba698d67b6865a"}}, {0xcf, &(0x7f00000010c0)=@string={0xcf, 0x3, "e960fafa8f2829bf1388205a4a7984e6434a40026cd5744a0865656a0d2260790bb8cc51887a65a7a5118a65d6cefb0c0354859a3d6d0a7533c05b5a72222df8614f78c750feae5eab34fb4be5ecdd51145bff2ef8fb6965817803dfc22b5b01f8faab331a9c1b6ae66f642feccbb0022096e5f9b8047bb5fadd2b19bedb89ba206b7e3959e1c32d48aece993802ad9e79948e5797f30cfab3fcb384ec5de227ec0887ffb21d4d7c025a84c4214bb9a41313d5a73ec979aa60f696d168b908e5f3fc4c2fe21cd16cd125060bcb"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x53, &(0x7f0000001200)=@string={0x53, 0x3, "692b10a7659bff3cd7bad99dd50d0d93c466e221bfeb87a2ddee16229b8f72edd1ead973462f42c3e3458995ca691dbef235bef63cf1dbc9fd97c1a3ab58891e73a4e06c6d7aa67b264b2a58be04370a7d"}}]}) syz_usb_connect(0x0, 0x37b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x90, 0x23, 0xd7, 0x0, 0x12d1, 0xf9f0, 0x98e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x369, 0x2, 0x1, 0x6, 0x50, 0x81, [{{0x9, 0x4, 0xd1, 0x70, 0x7, 0xff, 0x2, 0x3, 0x68, [@hid_hid={0x9, 0x21, 0xd01, 0x5, 0x1, {0x22, 0x78a}}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x6, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xe8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf5fd}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x93, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x40, 0x3, 0x44, [@generic={0x5d, 0xb, "ac98213830946d614c85313e4369da7e439afea738b4c94faad28c0a4ba27ad7b80900abf4c03b8f11fb6df61fb8c1aa8f2e737ff5c7784ce31c3f4b5eee42b34b790901a39f317fb50775e82b4ddbc3cb1c49d2b6d9726a8321c0"}, @generic={0x58, 0x4, "aa3dde3aa62d04dc434c3eb210441a0c605c8223f94811344a3325e57c3769a911f0c062f3b32f2e4ab537b87087bab9fb9bfe64c3cec6b2b12794ae5c622ba3b97c3aae040748a3b12e177eebe097b46da1914d8cd1"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xa07}, @generic={0x1f, 0x23, "121445b42d8b52529bb9955098c7cbcf84faa1881767151c1f8f30fd29"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x20, 0x1, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1f, 0x7, 0x40}}]}}, {{0x9, 0x4, 0x82, 0x4, 0x9, 0x1b, 0xd0, 0x50, 0x5, [@hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x938}}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf9, 0x0, 0x9, [@generic={0xc3, 0x24, "1b053a0ad06238c62ef03e696c6b2ea2a12bcf7c8bf43d710a1875382edf918551014889b48effee3c36896b84d1d9f361c841a4ccaa3dd452f091443c954ac2b3a16501fdd3b38362d648ace3faffaaacacd44eff3a5af2233a6697a5d9d68fd03b12f5ae2fcc37f386d8002023fb5aa7a5091975b38f342c29f9d2c9fcb299a1ccacc502649769f0e683fd6dabe4793a867b50a1bd0ba36454b28add490fb4991d1352e877f86814eac6a772b9bfc35c633068ed21b055504d2b330cbebffbc2"}]}}, {{0x9, 0x5, 0x9ab6bb0516246373, 0x1, 0x400, 0x40, 0x1, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x1ff, 0x1, 0x20, 0x1, [@generic={0x64, 0x23, "db28421098e9d53bfa40e137d43e7c136ca24fad86788fff234ec9c59c2888a42ffef1709789a27511633b3ce4bc4aa373effaf23f8ad58f5f2c0573935ceffce69feda66738033eee4f6908457665b17955348d7aae6c4b3efa601fd18768d2e9a9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x4, 0x6, 0x80}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x9, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x1f, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x47, 0xba}, @generic={0x4, 0xcd07eb0809f4bc21, 'la'}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4000}, @generic={0x67, 0x19, "882530c987525f77e25d65dbeb1d0233e31c7041fbf25768226355ddb9802e907cbd579572bb241492add1b572515b05558d41f91441dc0b4b4c533b4f5fd137acd2388b7c633cf429a432c3f41196a12ce180c96f1f67f00be2f8cde55db1810ed2a62985"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x3, 0x0, 0x0, 0xff, 0xef}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e209f6a552e9dd023a2f356b55931a37"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2}}, {0xcc, &(0x7f0000000940)=@string={0xcc, 0x3, "85cfb38ecec7a7a04e495a30f40abe1f11f83f9047174a1c74e7e481227ee5e7c17e39926f98116c90e7d37a8e84236b030183fc3e80c882af5be124e37ea65f3bfb8ce31a6c31b24b33f12e7640ec03d8cc17eae08a5769402d433c42c863c440125241c70a3ccfe287b59631e94ebac38eb5c6d1a4d9eb6788cb06d0fc7f4ed582ea2f05e59283f56aa2a607871cfdec760a90a5187b206413338380fd9ddb33a00fc5e92b3ac6782a74772a5a131e9d42b54fc8978fb6d5a562545d33e4e89daf6da6c59d138cf198"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x443}}, {0xc8, &(0x7f0000000a40)=@string={0xc8, 0x3, "5e61856d4655fdf6fd88fba297b06a9d97460475630476d9dee08d65c97f02c13dabab1dce5ef0f2bb84b9ceb43019b12339000706140f935125fe41eae0772b8e8f1943ffe90ba1f30bb29efa721e2b8b42ffea0301c6565c5033a9c1dcc829c443483617098d7f671d1c73e76ce153abe2c3b57bc055d00c284dd0ba326ab580c03a2b4353bd6f82e542f3bb8eb6a6fddaef84fcb39999855ae30c62e961b0be89c0671f327d70f9786042cc8eabb9c4f408c718d9edbd3351dbed12351e5c7842760b1b9a"}}]}) syz_usb_control_io(r0, &(0x7f0000001540)={0x2c, &(0x7f0000001300)={0x20, 0x23, 0x5e, {0x5e, 0x22, "495e55a257a3ed3a49f1485db9fa56163c72531178448caf07192826bf3d8e6b59ab4f1633ccfd407f821b1648afe8ef47439d2f11e4ff75a9dc8959b5350c691d10f9d079716583e9b4ed3f044d582ed200cc0bc1d3e4cd97d70a0c"}}, &(0x7f0000001380)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "b3a25f5ab1453e9d3a80ca6ca1ae29efa3e1d9a0d4724936de3f477eedeee0d7af164a271f0fd9d453d16d472fa28beb3adb24c99493c40f21b6a4f44d34738857f7018c34f6e4f8429fdf8553d6253d9624cb0e77334fc2402599832e193e9c788aa3ddca9cf24918db7ea58386b5a72e858dbb2a05630059f3e5"}}, &(0x7f0000001440)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e690a0c34a7bdb00fdb1a66135cfbf83"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x81ec, 0x0, 0x1, [0xff00, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x5, 0x3d, 0xb9f, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xd, 0x0, 0x7}]}}, &(0x7f00000014c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x0, 0x1f, "0b87f64c", "854e8fde"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x81, 0x9, 0xa9, 0x0, 0x40}}}, &(0x7f00000019c0)={0x84, &(0x7f0000001580)={0x0, 0x3, 0x47, "bf8a3ae54f4dc92b5c4ce47f69350945aab62bec50a76a5d4895c7db700eedb74b1a99f05642448526ed1e811f12b11b66b47443e0e82519154818a4c27faed7242b5b60bf55ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x5a}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000001700)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000001740)={0x40, 0x9, 0x1, 0x53}, &(0x7f0000001780)={0x40, 0xb, 0x2, "b1c9"}, &(0x7f00000017c0)={0x40, 0xf, 0x2, 0x76}, &(0x7f0000001800)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001840)={0x40, 0x17, 0x6, @local}, &(0x7f0000001880)={0x40, 0x19, 0x2, "2012"}, &(0x7f00000018c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001980)={0x40, 0x21, 0x1, 0x1d}}) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x4d, {0x9, 0x21, 0x1f, 0x71, 0x1, {0x22, 0x8a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x89, 0x20, 0xf7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x9e, 0x80, 0x8, 0x3f}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0x6180, 0x0, [0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x7f, 0x3, 0x7}, @generic={0x1a, 0x10, 0x4, "11c072353fad4568215189b17fb77719b12053425367b7"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x1, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x7, 0x5, 0x400}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0xf0, &(0x7f00000001c0)=@string={0xf0, 0x3, "00bad29397508bc4108d221d9789135080af4fabf4489946d2803fcb332a50e711eb7499488fcf0ffb3da0d8ccf817239496bf932485e3bea3a8a702c0235411aea5e3e1f0f02d50cffd4b84301a3af5b74294f93dc3bbae5e6b58724a67b4ea60ffa3ef2302735cd5826f55335ae190bf4d0f02569157753c0aa5ce79af29c662ee4a8c0c9dd4b938f87dceacfe4b1c31dc3ef971f5c850011ecb7d6132415b36a7340d9526be914b97cdda486439d645eaf8d28e8b5109f3d65121b3dbfa742085d279c8c9a0ffe7134f28ae1cffabead467a17614915957f642bb4962154d17eb45f46b80751865e06a66efe9"}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "b37300f22c8c13519565cb5ed3cbde9467dbe7c5aa93c637c20d6a0e36c72ef11e90aec62a323a876807c28ed874d36c929aa3ea3cb380a2359b2888b1190b774cb0d2f350175cfd8e434c16bd9f044c19577a1582cc2e4227c4c91b0846942b7004c2b086723f6ab7daec5d0bb269c42f54a96759c546a85346a294cb5634d05e778e1466623173c3fc8a74fded8429aa66c8dad415f49da5cfcccbf6560f97772b075cd7617f50e7d3a8bbd2"}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "3aea75d7ad5d124d57735fbd35abd72bea9b9f6098ce81"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300}, 0x27, &(0x7f0000000bc0)={0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x1, 0xf0f, 0x9, [0xff00, 0x3f0f, 0xcf]}]}, 0x1, [{0x0, 0x0}]}) [ 1628.503615][T20464] binder: 20460:20464 ioctl c0306201 20001480 returned -14 [ 1628.547266][T20459] binder: 20458:20459 ioctl c0306201 20001480 returned -14 [ 1628.582351][T11046] usb 6-1: new high-speed USB device number 93 using dummy_hcd 07:36:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x500000000000000}], 0x0, 0x0, 0x0}) 07:36:57 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1628.665887][T20470] binder: 20469:20470 ioctl c00c620f 20000100 returned -22 07:36:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x71ec, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1628.762814][T16196] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1628.829609][T20474] binder: 20473:20474 ioctl c0306201 20001480 returned -14 [ 1628.832416][T11046] usb 6-1: Using ep0 maxpacket: 32 [ 1628.858802][T20474] binder_alloc: 20473: binder_alloc_buf size 360287970189639808 failed, no address space [ 1628.869297][T20474] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:36:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x600000000000000}], 0x0, 0x0, 0x0}) [ 1628.918243][T20476] binder: 20475:20476 ioctl c0306201 20001480 returned -14 [ 1628.931678][T20478] binder: 20477:20478 ioctl c00c620f 20000100 returned -22 [ 1628.983151][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1628.992235][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1629.001053][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1629.010430][T11046] usb 6-1: config 1 has no interface number 0 [ 1629.016829][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1629.030179][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1629.048320][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1629.058172][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.069808][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1629.075525][ T5033] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1629.155049][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1629.202896][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1629.211589][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1629.220675][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1629.231034][T16196] usb 1-1: config 1 has no interface number 0 [ 1629.237637][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1629.239573][T20480] binder: 20479:20480 ioctl c0306201 20001480 returned -14 [ 1629.249209][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1629.249408][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1629.249538][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.311265][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1629.313001][T20480] binder_alloc: 20479: binder_alloc_buf size 432345564227567744 failed, no address space [ 1629.329310][T20480] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1629.345242][T20461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.358849][T20461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.392729][ T5033] usb 4-1: Using ep0 maxpacket: 32 [ 1629.514111][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1629.524977][ T5033] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1629.534553][ T5033] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1629.545327][ T5033] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.560184][ T5033] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1629.570668][ T5033] usb 4-1: config 1 has no interface number 0 [ 1629.577359][ T5033] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1629.586864][ T5033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.602455][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1629.667838][ T5033] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1629.860837][T20472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.874226][T20472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.879606][T20468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.896685][T20468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.905058][T20472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.914714][T20472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.933852][ T5033] snd_usb_pod 4-1:1.1: set_interface failed [ 1629.940286][ T5033] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1629.948866][ T5033] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1630.000067][ T5033] usb 4-1: USB disconnect, device number 73 [ 1630.205159][T11046] usb 6-1: USB disconnect, device number 93 [ 1630.215623][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1630.563207][T11046] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) 07:37:00 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, [0xff0f, 0xfff8, 0x3f00, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ec5e3828a08f1e0be047fee11c13a33b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7400, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x700000000000000}], 0x0, 0x0, 0x0}) 07:37:00 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0xa, 0x91, {0x91, 0x30, "63ec73d1733ca16591e03ad961ff88f6634297e099e4c18c4acd3c48122adb366dab74dda926f33af7681ff7ff8a9609075c89fa4a9954d64bdfee7f8a8cbec4f1039bd95b94794df1aada6c9f5b420ebe8b70c8d1ac18ef761a1414378608bf8a8396e266d5bfaee08c28ea25077050077eec8ef5f32f084d6a9bf4b8acc4fed02edf7368233179b56d653da7cf7c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000200)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x2, 0xf5, 0x2c, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x69, 0x0, 0x3f, 0x60}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x54, 0x9, 0x9}, @generic={0x3c, 0x10, 0x4, "d2de40de39e5c5bc6fdf6f8e2481e76fe8b096301223aebee6d034edf6f1e92eede6df8c3476b77ec6aea3fc8ccae242a7e225ee0d3363d96b"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10000, 0xf000, 0x9, [0x0, 0x7f803f, 0xc000, 0xff0030, 0xff, 0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "b92e636c9c5822421ad49dc5e8a4396b"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x99, 0x10, 0x1f, 0x3, "c7d93728", "d9469e8e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x81, 0x40, 0x80, 0x5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x6, 0x69, "e236db9794c99fad51f08bea989a2d990ed7f12dc36244a4066b73d16f36edddab0efa6a54412abb455018b6ff46c16c06699849788caa6358d45420ebebc8b2471c02ac8436bd7addd779bfc8c6267ca81d235148f30a3c93b75b025569bcff3255a1fd4dec49e37a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "56a2"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, '3/'}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x19}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xaa}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:00 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r0 = syz_usb_connect$cdc_ecm(0x5, 0x11a, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x1, 0x40, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0x43, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "3e88de"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3f, 0x3, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x7, 0x8, 0x5f}, @mdlm_detail={0x35, 0x24, 0x13, 0x2a, "48c72da2f73a324bd5cef11a4ed6697dd5177f6c1c6245f459fac22a1aa83b9ac00294657c62c6c9cc2b8247a364a93cbc"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm_detail={0x7c, 0x24, 0x13, 0x8, "f8ccb4f337a041b66611e40e9b065a1dd868b757e8eee5721e1a098f88a764b5dc6ad9b1583bb195a0f1176b8c705916e4d2481c0bf29819164a79a889c2c0f387bf34870e5d6cb3668b63fbc0e2742b29427c14d9717d5a557d793ad6caf834159fc4d955c725df0669ce422084d73db8db70e1803fe11f"}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x7, 0xfffd}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6a, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x19, 0x7f, 0x4d, 0xff, 0x5}, 0x24, &(0x7f0000000d80)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fff, 0xff0f, 0x800, [0xff3f30, 0xff30, 0xc000, 0x6000]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x410}}, {0xb5, &(0x7f0000000e40)=ANY=[@ANYBLOB="b503853b73da9a5951ba7111f12f0f03c8e2025405f57591a81a06350eb8c7d14d7eee55efd71284ac1b25c9a5675eff739ea92104bc063fdb039e735d865159791e3724362605d7488745f94666af0ded89d1104c3f568346f9b153c333206b70c9f12f5c869b86b9438c69d806486b80f89ac259e3e4bc322538bc7d6e28e0ba73fab7d9419d5189597a5cbe75e19e52ade3f942d932db3059c3243b52b9520c0899eb5136fba3035088fe4f7c6d3e94fe73019b"]}, {0xa1, &(0x7f0000000f00)=@string={0xa1, 0x3, "a841cee8910a1507f15b4cde454583e636899783c7c47bccd399991bd565f7d6b8b42889ec5bac4ba69b23ddf54578d113e8faa8d8113c4ef0a60877aeb3318a7f379c56eef7c804ad60a8b1c961f5b391584c122f2df64007e017bb97619633f207294208cdfa831c3ea7fec22984e0ba48eb75c9ace0e9844872c740cadc95090a3bc481678efc460ed7e027dff0333f4f08fe7868c4058e913a1af94df3"}}, {0xef, &(0x7f0000000fc0)=@string={0xef, 0x3, "b028b6774b9204d4fe8b0a54571e072abe846630ab665a85c9179b92b40ac32d84c2a656c393f76f83a89687ed5e9b83d7f623dbf8d1f5921cf9330a995b7b4d136f289ae6db469824ecbe116cb9aa449257a5b69d3168f5fbb651c241b7921d3a28d1bbe075fd06fb2275111cc9d9cce3059ad67e556aba705a8157c6777b43d43f258dbdd9eb714ba9976088ce9166970b7aea5607ced5a60f6d9882eb4cca50f5894a93eec52d76bb7cc43ce37fa63b99c813cd0531a66c82f58710e2d43bc00be64003b938a79beead2ef936fe2bf591487bffbe992c74ffd7f1789d5730869555e38d52ba698d67b6865a"}}, {0xcf, &(0x7f00000010c0)=@string={0xcf, 0x3, "e960fafa8f2829bf1388205a4a7984e6434a40026cd5744a0865656a0d2260790bb8cc51887a65a7a5118a65d6cefb0c0354859a3d6d0a7533c05b5a72222df8614f78c750feae5eab34fb4be5ecdd51145bff2ef8fb6965817803dfc22b5b01f8faab331a9c1b6ae66f642feccbb0022096e5f9b8047bb5fadd2b19bedb89ba206b7e3959e1c32d48aece993802ad9e79948e5797f30cfab3fcb384ec5de227ec0887ffb21d4d7c025a84c4214bb9a41313d5a73ec979aa60f696d168b908e5f3fc4c2fe21cd16cd125060bcb"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x53, &(0x7f0000001200)=@string={0x53, 0x3, "692b10a7659bff3cd7bad99dd50d0d93c466e221bfeb87a2ddee16229b8f72edd1ead973462f42c3e3458995ca691dbef235bef63cf1dbc9fd97c1a3ab58891e73a4e06c6d7aa67b264b2a58be04370a7d"}}]}) syz_usb_connect(0x0, 0x37b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x90, 0x23, 0xd7, 0x0, 0x12d1, 0xf9f0, 0x98e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x369, 0x2, 0x1, 0x6, 0x50, 0x81, [{{0x9, 0x4, 0xd1, 0x70, 0x7, 0xff, 0x2, 0x3, 0x68, [@hid_hid={0x9, 0x21, 0xd01, 0x5, 0x1, {0x22, 0x78a}}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x6, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xe8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf5fd}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x93, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x40, 0x3, 0x44, [@generic={0x5d, 0xb, "ac98213830946d614c85313e4369da7e439afea738b4c94faad28c0a4ba27ad7b80900abf4c03b8f11fb6df61fb8c1aa8f2e737ff5c7784ce31c3f4b5eee42b34b790901a39f317fb50775e82b4ddbc3cb1c49d2b6d9726a8321c0"}, @generic={0x58, 0x4, "aa3dde3aa62d04dc434c3eb210441a0c605c8223f94811344a3325e57c3769a911f0c062f3b32f2e4ab537b87087bab9fb9bfe64c3cec6b2b12794ae5c622ba3b97c3aae040748a3b12e177eebe097b46da1914d8cd1"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xa07}, @generic={0x1f, 0x23, "121445b42d8b52529bb9955098c7cbcf84faa1881767151c1f8f30fd29"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x20, 0x1, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1f, 0x7, 0x40}}]}}, {{0x9, 0x4, 0x82, 0x4, 0x9, 0x1b, 0xd0, 0x50, 0x5, [@hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x938}}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf9, 0x0, 0x9, [@generic={0xc3, 0x24, "1b053a0ad06238c62ef03e696c6b2ea2a12bcf7c8bf43d710a1875382edf918551014889b48effee3c36896b84d1d9f361c841a4ccaa3dd452f091443c954ac2b3a16501fdd3b38362d648ace3faffaaacacd44eff3a5af2233a6697a5d9d68fd03b12f5ae2fcc37f386d8002023fb5aa7a5091975b38f342c29f9d2c9fcb299a1ccacc502649769f0e683fd6dabe4793a867b50a1bd0ba36454b28add490fb4991d1352e877f86814eac6a772b9bfc35c633068ed21b055504d2b330cbebffbc2"}]}}, {{0x9, 0x5, 0x9ab6bb0516246373, 0x1, 0x400, 0x40, 0x1, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x1ff, 0x1, 0x20, 0x1, [@generic={0x64, 0x23, "db28421098e9d53bfa40e137d43e7c136ca24fad86788fff234ec9c59c2888a42ffef1709789a27511633b3ce4bc4aa373effaf23f8ad58f5f2c0573935ceffce69feda66738033eee4f6908457665b17955348d7aae6c4b3efa601fd18768d2e9a9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x4, 0x6, 0x80}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x9, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x1f, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x47, 0xba}, @generic={0x4, 0xcd07eb0809f4bc21, 'la'}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4000}, @generic={0x67, 0x19, "882530c987525f77e25d65dbeb1d0233e31c7041fbf25768226355ddb9802e907cbd579572bb241492add1b572515b05558d41f91441dc0b4b4c533b4f5fd137acd2388b7c633cf429a432c3f41196a12ce180c96f1f67f00be2f8cde55db1810ed2a62985"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x3, 0x0, 0x0, 0xff, 0xef}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e209f6a552e9dd023a2f356b55931a37"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2}}, {0xcc, &(0x7f0000000940)=@string={0xcc, 0x3, "85cfb38ecec7a7a04e495a30f40abe1f11f83f9047174a1c74e7e481227ee5e7c17e39926f98116c90e7d37a8e84236b030183fc3e80c882af5be124e37ea65f3bfb8ce31a6c31b24b33f12e7640ec03d8cc17eae08a5769402d433c42c863c440125241c70a3ccfe287b59631e94ebac38eb5c6d1a4d9eb6788cb06d0fc7f4ed582ea2f05e59283f56aa2a607871cfdec760a90a5187b206413338380fd9ddb33a00fc5e92b3ac6782a74772a5a131e9d42b54fc8978fb6d5a562545d33e4e89daf6da6c59d138cf198"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x443}}, {0xc8, &(0x7f0000000a40)=@string={0xc8, 0x3, "5e61856d4655fdf6fd88fba297b06a9d97460475630476d9dee08d65c97f02c13dabab1dce5ef0f2bb84b9ceb43019b12339000706140f935125fe41eae0772b8e8f1943ffe90ba1f30bb29efa721e2b8b42ffea0301c6565c5033a9c1dcc829c443483617098d7f671d1c73e76ce153abe2c3b57bc055d00c284dd0ba326ab580c03a2b4353bd6f82e542f3bb8eb6a6fddaef84fcb39999855ae30c62e961b0be89c0671f327d70f9786042cc8eabb9c4f408c718d9edbd3351dbed12351e5c7842760b1b9a"}}]}) syz_usb_control_io(r0, &(0x7f0000001540)={0x2c, &(0x7f0000001300)={0x20, 0x23, 0x5e, {0x5e, 0x22, "495e55a257a3ed3a49f1485db9fa56163c72531178448caf07192826bf3d8e6b59ab4f1633ccfd407f821b1648afe8ef47439d2f11e4ff75a9dc8959b5350c691d10f9d079716583e9b4ed3f044d582ed200cc0bc1d3e4cd97d70a0c"}}, &(0x7f0000001380)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "b3a25f5ab1453e9d3a80ca6ca1ae29efa3e1d9a0d4724936de3f477eedeee0d7af164a271f0fd9d453d16d472fa28beb3adb24c99493c40f21b6a4f44d34738857f7018c34f6e4f8429fdf8553d6253d9624cb0e77334fc2402599832e193e9c788aa3ddca9cf24918db7ea58386b5a72e858dbb2a05630059f3e5"}}, &(0x7f0000001440)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e690a0c34a7bdb00fdb1a66135cfbf83"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x81ec, 0x0, 0x1, [0xff00, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x5, 0x3d, 0xb9f, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xd, 0x0, 0x7}]}}, &(0x7f00000014c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x0, 0x1f, "0b87f64c", "854e8fde"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x81, 0x9, 0xa9, 0x0, 0x40}}}, &(0x7f00000019c0)={0x84, &(0x7f0000001580)={0x0, 0x3, 0x47, "bf8a3ae54f4dc92b5c4ce47f69350945aab62bec50a76a5d4895c7db700eedb74b1a99f05642448526ed1e811f12b11b66b47443e0e82519154818a4c27faed7242b5b60bf55ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x5a}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000001700)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000001740)={0x40, 0x9, 0x1, 0x53}, &(0x7f0000001780)={0x40, 0xb, 0x2, "b1c9"}, &(0x7f00000017c0)={0x40, 0xf, 0x2, 0x76}, &(0x7f0000001800)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001840)={0x40, 0x17, 0x6, @local}, &(0x7f0000001880)={0x40, 0x19, 0x2, "2012"}, &(0x7f00000018c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001980)={0x40, 0x21, 0x1, 0x1d}}) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x4d, {0x9, 0x21, 0x1f, 0x71, 0x1, {0x22, 0x8a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x89, 0x20, 0xf7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x9e, 0x80, 0x8, 0x3f}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0x6180, 0x0, [0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x7f, 0x3, 0x7}, @generic={0x1a, 0x10, 0x4, "11c072353fad4568215189b17fb77719b12053425367b7"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x1, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x7, 0x5, 0x400}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0xf0, &(0x7f00000001c0)=@string={0xf0, 0x3, "00bad29397508bc4108d221d9789135080af4fabf4489946d2803fcb332a50e711eb7499488fcf0ffb3da0d8ccf817239496bf932485e3bea3a8a702c0235411aea5e3e1f0f02d50cffd4b84301a3af5b74294f93dc3bbae5e6b58724a67b4ea60ffa3ef2302735cd5826f55335ae190bf4d0f02569157753c0aa5ce79af29c662ee4a8c0c9dd4b938f87dceacfe4b1c31dc3ef971f5c850011ecb7d6132415b36a7340d9526be914b97cdda486439d645eaf8d28e8b5109f3d65121b3dbfa742085d279c8c9a0ffe7134f28ae1cffabead467a17614915957f642bb4962154d17eb45f46b80751865e06a66efe9"}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "b37300f22c8c13519565cb5ed3cbde9467dbe7c5aa93c637c20d6a0e36c72ef11e90aec62a323a876807c28ed874d36c929aa3ea3cb380a2359b2888b1190b774cb0d2f350175cfd8e434c16bd9f044c19577a1582cc2e4227c4c91b0846942b7004c2b086723f6ab7daec5d0bb269c42f54a96759c546a85346a294cb5634d05e778e1466623173c3fc8a74fded8429aa66c8dad415f49da5cfcccbf6560f97772b075cd7617f50e7d3a8bbd2"}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "3aea75d7ad5d124d57735fbd35abd72bea9b9f6098ce81"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300}, 0x27, &(0x7f0000000bc0)={0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x1, 0xf0f, 0x9, [0xff00, 0x3f0f, 0xcf]}]}, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x11a, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x1, 0x40, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0x43, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "3e88de"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3f, 0x3, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x7, 0x8, 0x5f}, @mdlm_detail={0x35, 0x24, 0x13, 0x2a, "48c72da2f73a324bd5cef11a4ed6697dd5177f6c1c6245f459fac22a1aa83b9ac00294657c62c6c9cc2b8247a364a93cbc"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm_detail={0x7c, 0x24, 0x13, 0x8, "f8ccb4f337a041b66611e40e9b065a1dd868b757e8eee5721e1a098f88a764b5dc6ad9b1583bb195a0f1176b8c705916e4d2481c0bf29819164a79a889c2c0f387bf34870e5d6cb3668b63fbc0e2742b29427c14d9717d5a557d793ad6caf834159fc4d955c725df0669ce422084d73db8db70e1803fe11f"}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x7, 0xfffd}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6a, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x19, 0x7f, 0x4d, 0xff, 0x5}, 0x24, &(0x7f0000000d80)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fff, 0xff0f, 0x800, [0xff3f30, 0xff30, 0xc000, 0x6000]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x410}}, {0xb5, &(0x7f0000000e40)=ANY=[@ANYBLOB="b503853b73da9a5951ba7111f12f0f03c8e2025405f57591a81a06350eb8c7d14d7eee55efd71284ac1b25c9a5675eff739ea92104bc063fdb039e735d865159791e3724362605d7488745f94666af0ded89d1104c3f568346f9b153c333206b70c9f12f5c869b86b9438c69d806486b80f89ac259e3e4bc322538bc7d6e28e0ba73fab7d9419d5189597a5cbe75e19e52ade3f942d932db3059c3243b52b9520c0899eb5136fba3035088fe4f7c6d3e94fe73019b"]}, {0xa1, &(0x7f0000000f00)=@string={0xa1, 0x3, "a841cee8910a1507f15b4cde454583e636899783c7c47bccd399991bd565f7d6b8b42889ec5bac4ba69b23ddf54578d113e8faa8d8113c4ef0a60877aeb3318a7f379c56eef7c804ad60a8b1c961f5b391584c122f2df64007e017bb97619633f207294208cdfa831c3ea7fec22984e0ba48eb75c9ace0e9844872c740cadc95090a3bc481678efc460ed7e027dff0333f4f08fe7868c4058e913a1af94df3"}}, {0xef, &(0x7f0000000fc0)=@string={0xef, 0x3, "b028b6774b9204d4fe8b0a54571e072abe846630ab665a85c9179b92b40ac32d84c2a656c393f76f83a89687ed5e9b83d7f623dbf8d1f5921cf9330a995b7b4d136f289ae6db469824ecbe116cb9aa449257a5b69d3168f5fbb651c241b7921d3a28d1bbe075fd06fb2275111cc9d9cce3059ad67e556aba705a8157c6777b43d43f258dbdd9eb714ba9976088ce9166970b7aea5607ced5a60f6d9882eb4cca50f5894a93eec52d76bb7cc43ce37fa63b99c813cd0531a66c82f58710e2d43bc00be64003b938a79beead2ef936fe2bf591487bffbe992c74ffd7f1789d5730869555e38d52ba698d67b6865a"}}, {0xcf, &(0x7f00000010c0)=@string={0xcf, 0x3, "e960fafa8f2829bf1388205a4a7984e6434a40026cd5744a0865656a0d2260790bb8cc51887a65a7a5118a65d6cefb0c0354859a3d6d0a7533c05b5a72222df8614f78c750feae5eab34fb4be5ecdd51145bff2ef8fb6965817803dfc22b5b01f8faab331a9c1b6ae66f642feccbb0022096e5f9b8047bb5fadd2b19bedb89ba206b7e3959e1c32d48aece993802ad9e79948e5797f30cfab3fcb384ec5de227ec0887ffb21d4d7c025a84c4214bb9a41313d5a73ec979aa60f696d168b908e5f3fc4c2fe21cd16cd125060bcb"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x53, &(0x7f0000001200)=@string={0x53, 0x3, "692b10a7659bff3cd7bad99dd50d0d93c466e221bfeb87a2ddee16229b8f72edd1ead973462f42c3e3458995ca691dbef235bef63cf1dbc9fd97c1a3ab58891e73a4e06c6d7aa67b264b2a58be04370a7d"}}]}) (async) syz_usb_connect(0x0, 0x37b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x90, 0x23, 0xd7, 0x0, 0x12d1, 0xf9f0, 0x98e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x369, 0x2, 0x1, 0x6, 0x50, 0x81, [{{0x9, 0x4, 0xd1, 0x70, 0x7, 0xff, 0x2, 0x3, 0x68, [@hid_hid={0x9, 0x21, 0xd01, 0x5, 0x1, {0x22, 0x78a}}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x6, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xe8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf5fd}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x93, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x40, 0x3, 0x44, [@generic={0x5d, 0xb, "ac98213830946d614c85313e4369da7e439afea738b4c94faad28c0a4ba27ad7b80900abf4c03b8f11fb6df61fb8c1aa8f2e737ff5c7784ce31c3f4b5eee42b34b790901a39f317fb50775e82b4ddbc3cb1c49d2b6d9726a8321c0"}, @generic={0x58, 0x4, "aa3dde3aa62d04dc434c3eb210441a0c605c8223f94811344a3325e57c3769a911f0c062f3b32f2e4ab537b87087bab9fb9bfe64c3cec6b2b12794ae5c622ba3b97c3aae040748a3b12e177eebe097b46da1914d8cd1"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xa07}, @generic={0x1f, 0x23, "121445b42d8b52529bb9955098c7cbcf84faa1881767151c1f8f30fd29"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x20, 0x1, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1f, 0x7, 0x40}}]}}, {{0x9, 0x4, 0x82, 0x4, 0x9, 0x1b, 0xd0, 0x50, 0x5, [@hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x938}}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf9, 0x0, 0x9, [@generic={0xc3, 0x24, "1b053a0ad06238c62ef03e696c6b2ea2a12bcf7c8bf43d710a1875382edf918551014889b48effee3c36896b84d1d9f361c841a4ccaa3dd452f091443c954ac2b3a16501fdd3b38362d648ace3faffaaacacd44eff3a5af2233a6697a5d9d68fd03b12f5ae2fcc37f386d8002023fb5aa7a5091975b38f342c29f9d2c9fcb299a1ccacc502649769f0e683fd6dabe4793a867b50a1bd0ba36454b28add490fb4991d1352e877f86814eac6a772b9bfc35c633068ed21b055504d2b330cbebffbc2"}]}}, {{0x9, 0x5, 0x9ab6bb0516246373, 0x1, 0x400, 0x40, 0x1, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x1ff, 0x1, 0x20, 0x1, [@generic={0x64, 0x23, "db28421098e9d53bfa40e137d43e7c136ca24fad86788fff234ec9c59c2888a42ffef1709789a27511633b3ce4bc4aa373effaf23f8ad58f5f2c0573935ceffce69feda66738033eee4f6908457665b17955348d7aae6c4b3efa601fd18768d2e9a9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x4, 0x6, 0x80}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x9, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x1f, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x47, 0xba}, @generic={0x4, 0xcd07eb0809f4bc21, 'la'}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4000}, @generic={0x67, 0x19, "882530c987525f77e25d65dbeb1d0233e31c7041fbf25768226355ddb9802e907cbd579572bb241492add1b572515b05558d41f91441dc0b4b4c533b4f5fd137acd2388b7c633cf429a432c3f41196a12ce180c96f1f67f00be2f8cde55db1810ed2a62985"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x3, 0x0, 0x0, 0xff, 0xef}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e209f6a552e9dd023a2f356b55931a37"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2}}, {0xcc, &(0x7f0000000940)=@string={0xcc, 0x3, "85cfb38ecec7a7a04e495a30f40abe1f11f83f9047174a1c74e7e481227ee5e7c17e39926f98116c90e7d37a8e84236b030183fc3e80c882af5be124e37ea65f3bfb8ce31a6c31b24b33f12e7640ec03d8cc17eae08a5769402d433c42c863c440125241c70a3ccfe287b59631e94ebac38eb5c6d1a4d9eb6788cb06d0fc7f4ed582ea2f05e59283f56aa2a607871cfdec760a90a5187b206413338380fd9ddb33a00fc5e92b3ac6782a74772a5a131e9d42b54fc8978fb6d5a562545d33e4e89daf6da6c59d138cf198"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x443}}, {0xc8, &(0x7f0000000a40)=@string={0xc8, 0x3, "5e61856d4655fdf6fd88fba297b06a9d97460475630476d9dee08d65c97f02c13dabab1dce5ef0f2bb84b9ceb43019b12339000706140f935125fe41eae0772b8e8f1943ffe90ba1f30bb29efa721e2b8b42ffea0301c6565c5033a9c1dcc829c443483617098d7f671d1c73e76ce153abe2c3b57bc055d00c284dd0ba326ab580c03a2b4353bd6f82e542f3bb8eb6a6fddaef84fcb39999855ae30c62e961b0be89c0671f327d70f9786042cc8eabb9c4f408c718d9edbd3351dbed12351e5c7842760b1b9a"}}]}) (async) syz_usb_control_io(r0, &(0x7f0000001540)={0x2c, &(0x7f0000001300)={0x20, 0x23, 0x5e, {0x5e, 0x22, "495e55a257a3ed3a49f1485db9fa56163c72531178448caf07192826bf3d8e6b59ab4f1633ccfd407f821b1648afe8ef47439d2f11e4ff75a9dc8959b5350c691d10f9d079716583e9b4ed3f044d582ed200cc0bc1d3e4cd97d70a0c"}}, &(0x7f0000001380)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "b3a25f5ab1453e9d3a80ca6ca1ae29efa3e1d9a0d4724936de3f477eedeee0d7af164a271f0fd9d453d16d472fa28beb3adb24c99493c40f21b6a4f44d34738857f7018c34f6e4f8429fdf8553d6253d9624cb0e77334fc2402599832e193e9c788aa3ddca9cf24918db7ea58386b5a72e858dbb2a05630059f3e5"}}, &(0x7f0000001440)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e690a0c34a7bdb00fdb1a66135cfbf83"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x81ec, 0x0, 0x1, [0xff00, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x5, 0x3d, 0xb9f, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xd, 0x0, 0x7}]}}, &(0x7f00000014c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x0, 0x1f, "0b87f64c", "854e8fde"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x81, 0x9, 0xa9, 0x0, 0x40}}}, &(0x7f00000019c0)={0x84, &(0x7f0000001580)={0x0, 0x3, 0x47, "bf8a3ae54f4dc92b5c4ce47f69350945aab62bec50a76a5d4895c7db700eedb74b1a99f05642448526ed1e811f12b11b66b47443e0e82519154818a4c27faed7242b5b60bf55ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x5a}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000001700)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000001740)={0x40, 0x9, 0x1, 0x53}, &(0x7f0000001780)={0x40, 0xb, 0x2, "b1c9"}, &(0x7f00000017c0)={0x40, 0xf, 0x2, 0x76}, &(0x7f0000001800)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001840)={0x40, 0x17, 0x6, @local}, &(0x7f0000001880)={0x40, 0x19, 0x2, "2012"}, &(0x7f00000018c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001980)={0x40, 0x21, 0x1, 0x1d}}) (async) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x4d, {0x9, 0x21, 0x1f, 0x71, 0x1, {0x22, 0x8a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x89, 0x20, 0xf7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x9e, 0x80, 0x8, 0x3f}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0x6180, 0x0, [0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x7f, 0x3, 0x7}, @generic={0x1a, 0x10, 0x4, "11c072353fad4568215189b17fb77719b12053425367b7"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x1, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x7, 0x5, 0x400}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0xf0, &(0x7f00000001c0)=@string={0xf0, 0x3, "00bad29397508bc4108d221d9789135080af4fabf4489946d2803fcb332a50e711eb7499488fcf0ffb3da0d8ccf817239496bf932485e3bea3a8a702c0235411aea5e3e1f0f02d50cffd4b84301a3af5b74294f93dc3bbae5e6b58724a67b4ea60ffa3ef2302735cd5826f55335ae190bf4d0f02569157753c0aa5ce79af29c662ee4a8c0c9dd4b938f87dceacfe4b1c31dc3ef971f5c850011ecb7d6132415b36a7340d9526be914b97cdda486439d645eaf8d28e8b5109f3d65121b3dbfa742085d279c8c9a0ffe7134f28ae1cffabead467a17614915957f642bb4962154d17eb45f46b80751865e06a66efe9"}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "b37300f22c8c13519565cb5ed3cbde9467dbe7c5aa93c637c20d6a0e36c72ef11e90aec62a323a876807c28ed874d36c929aa3ea3cb380a2359b2888b1190b774cb0d2f350175cfd8e434c16bd9f044c19577a1582cc2e4227c4c91b0846942b7004c2b086723f6ab7daec5d0bb269c42f54a96759c546a85346a294cb5634d05e778e1466623173c3fc8a74fded8429aa66c8dad415f49da5cfcccbf6560f97772b075cd7617f50e7d3a8bbd2"}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "3aea75d7ad5d124d57735fbd35abd72bea9b9f6098ce81"}}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300}, 0x27, &(0x7f0000000bc0)={0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x1, 0xf0f, 0x9, [0xff00, 0x3f0f, 0xcf]}]}, 0x1, [{0x0, 0x0}]}) (async) [ 1631.501434][T11153] usb 1-1: USB disconnect, device number 107 [ 1631.531077][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1631.665894][T20496] binder: 20491:20496 ioctl c00c620f 20000100 returned -22 [ 1631.701568][T20490] binder: 20489:20490 ioctl c0306201 20001480 returned -14 [ 1631.723913][T20497] binder: 20488:20497 ioctl c0306201 20001480 returned -14 07:37:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1631.824555][T20500] binder_alloc: 20489: binder_alloc_buf size 504403158265495680 failed, no address space [ 1631.835554][T20500] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1631.916028][ T5037] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1631.932209][ T21] usb 6-1: new high-speed USB device number 94 using dummy_hcd 07:37:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x800000000000000}], 0x0, 0x0, 0x0}) [ 1632.020552][T20502] binder: 20501:20502 ioctl c0306201 20001480 returned -14 [ 1632.056700][T20504] binder: 20503:20504 ioctl c00c620f 20000100 returned -22 07:37:01 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 07:37:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xec71, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1632.128397][T20506] binder: 20505:20506 ioctl c0306201 20001480 returned -14 [ 1632.152236][T11153] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1632.173589][ T5037] usb 4-1: Using ep0 maxpacket: 32 [ 1632.173820][T20506] binder_alloc: 20505: binder_alloc_buf size 576460752303423616 failed, no address space [ 1632.189069][T20506] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1632.203503][ T21] usb 6-1: Using ep0 maxpacket: 32 07:37:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x900000000000000}], 0x0, 0x0, 0x0}) [ 1632.256305][T20509] binder: 20507:20509 ioctl c00c620f 20000100 returned -22 [ 1632.291013][T20510] binder: 20508:20510 ioctl c0306201 20001480 returned -14 [ 1632.333397][ T5037] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1632.336458][T20510] binder: transaction release 11699 bad object at offset 0, size 0 [ 1632.342136][ T5037] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1632.342251][ T5037] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.342351][ T5037] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1632.342466][ T5037] usb 4-1: config 1 has no interface number 0 [ 1632.342615][ T5037] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1632.350435][T20510] binder: transaction release 11699 bad object at offset 0, size 0 [ 1632.359214][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.369086][ T21] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1632.369537][T20510] binder: transaction release 11699 bad object at offset 0, size 0 [ 1632.378552][ T21] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1632.437263][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1632.446560][ T21] usb 6-1: config 1 has no interface number 0 [ 1632.453035][ T21] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1632.464450][ T21] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1632.477816][ T21] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1632.487370][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.543455][T11153] usb 1-1: Using ep0 maxpacket: 32 [ 1632.571710][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1632.589464][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1632.662802][T20512] binder: 20511:20512 ioctl c0306201 20001480 returned -14 [ 1632.675090][T11153] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1632.684141][T11153] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1632.693533][T11153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1632.702811][T11153] usb 1-1: config 1 has no interface number 0 [ 1632.709113][T11153] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1632.720720][T11153] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1632.738278][T11153] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1632.748327][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.765925][T20494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.775685][T20494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.790252][T20512] binder_alloc: 20511: binder_alloc_buf size 648518346341351552 failed, no address space [ 1632.800600][T20512] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1632.804413][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1632.826123][T20494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.840043][T20494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.866235][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1632.929320][T20494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.943083][T20494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.949970][T20513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.960750][T20513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.072993][ T5037] snd_usb_pod 4-1:1.1: set_interface failed [ 1633.079351][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1633.087694][ T5037] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1633.099991][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1633.158646][ T5037] usb 4-1: USB disconnect, device number 74 [ 1633.590663][T11046] usb 6-1: USB disconnect, device number 94 [ 1633.607422][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1633.937360][T11046] usb 1-1: USB disconnect, device number 108 [ 1633.953922][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:37:03 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, [0xff0f, 0xfff8, 0x3f00, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ec5e3828a08f1e0be047fee11c13a33b"}]}}, 0x0, 0x0}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:03 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 07:37:03 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) r0 = syz_usb_connect$cdc_ecm(0x5, 0x11a, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x1, 0x40, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0x43, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "3e88de"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3f, 0x3, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x7, 0x8, 0x5f}, @mdlm_detail={0x35, 0x24, 0x13, 0x2a, "48c72da2f73a324bd5cef11a4ed6697dd5177f6c1c6245f459fac22a1aa83b9ac00294657c62c6c9cc2b8247a364a93cbc"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm_detail={0x7c, 0x24, 0x13, 0x8, "f8ccb4f337a041b66611e40e9b065a1dd868b757e8eee5721e1a098f88a764b5dc6ad9b1583bb195a0f1176b8c705916e4d2481c0bf29819164a79a889c2c0f387bf34870e5d6cb3668b63fbc0e2742b29427c14d9717d5a557d793ad6caf834159fc4d955c725df0669ce422084d73db8db70e1803fe11f"}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x7, 0xfffd}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6a, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x19, 0x7f, 0x4d, 0xff, 0x5}, 0x24, &(0x7f0000000d80)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fff, 0xff0f, 0x800, [0xff3f30, 0xff30, 0xc000, 0x6000]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x410}}, {0xb5, &(0x7f0000000e40)=ANY=[@ANYBLOB="b503853b73da9a5951ba7111f12f0f03c8e2025405f57591a81a06350eb8c7d14d7eee55efd71284ac1b25c9a5675eff739ea92104bc063fdb039e735d865159791e3724362605d7488745f94666af0ded89d1104c3f568346f9b153c333206b70c9f12f5c869b86b9438c69d806486b80f89ac259e3e4bc322538bc7d6e28e0ba73fab7d9419d5189597a5cbe75e19e52ade3f942d932db3059c3243b52b9520c0899eb5136fba3035088fe4f7c6d3e94fe73019b"]}, {0xa1, &(0x7f0000000f00)=@string={0xa1, 0x3, "a841cee8910a1507f15b4cde454583e636899783c7c47bccd399991bd565f7d6b8b42889ec5bac4ba69b23ddf54578d113e8faa8d8113c4ef0a60877aeb3318a7f379c56eef7c804ad60a8b1c961f5b391584c122f2df64007e017bb97619633f207294208cdfa831c3ea7fec22984e0ba48eb75c9ace0e9844872c740cadc95090a3bc481678efc460ed7e027dff0333f4f08fe7868c4058e913a1af94df3"}}, {0xef, &(0x7f0000000fc0)=@string={0xef, 0x3, "b028b6774b9204d4fe8b0a54571e072abe846630ab665a85c9179b92b40ac32d84c2a656c393f76f83a89687ed5e9b83d7f623dbf8d1f5921cf9330a995b7b4d136f289ae6db469824ecbe116cb9aa449257a5b69d3168f5fbb651c241b7921d3a28d1bbe075fd06fb2275111cc9d9cce3059ad67e556aba705a8157c6777b43d43f258dbdd9eb714ba9976088ce9166970b7aea5607ced5a60f6d9882eb4cca50f5894a93eec52d76bb7cc43ce37fa63b99c813cd0531a66c82f58710e2d43bc00be64003b938a79beead2ef936fe2bf591487bffbe992c74ffd7f1789d5730869555e38d52ba698d67b6865a"}}, {0xcf, &(0x7f00000010c0)=@string={0xcf, 0x3, "e960fafa8f2829bf1388205a4a7984e6434a40026cd5744a0865656a0d2260790bb8cc51887a65a7a5118a65d6cefb0c0354859a3d6d0a7533c05b5a72222df8614f78c750feae5eab34fb4be5ecdd51145bff2ef8fb6965817803dfc22b5b01f8faab331a9c1b6ae66f642feccbb0022096e5f9b8047bb5fadd2b19bedb89ba206b7e3959e1c32d48aece993802ad9e79948e5797f30cfab3fcb384ec5de227ec0887ffb21d4d7c025a84c4214bb9a41313d5a73ec979aa60f696d168b908e5f3fc4c2fe21cd16cd125060bcb"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x53, &(0x7f0000001200)=@string={0x53, 0x3, "692b10a7659bff3cd7bad99dd50d0d93c466e221bfeb87a2ddee16229b8f72edd1ead973462f42c3e3458995ca691dbef235bef63cf1dbc9fd97c1a3ab58891e73a4e06c6d7aa67b264b2a58be04370a7d"}}]}) syz_usb_connect(0x0, 0x37b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x90, 0x23, 0xd7, 0x0, 0x12d1, 0xf9f0, 0x98e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x369, 0x2, 0x1, 0x6, 0x50, 0x81, [{{0x9, 0x4, 0xd1, 0x70, 0x7, 0xff, 0x2, 0x3, 0x68, [@hid_hid={0x9, 0x21, 0xd01, 0x5, 0x1, {0x22, 0x78a}}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x6, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xe8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf5fd}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x93, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x40, 0x3, 0x44, [@generic={0x5d, 0xb, "ac98213830946d614c85313e4369da7e439afea738b4c94faad28c0a4ba27ad7b80900abf4c03b8f11fb6df61fb8c1aa8f2e737ff5c7784ce31c3f4b5eee42b34b790901a39f317fb50775e82b4ddbc3cb1c49d2b6d9726a8321c0"}, @generic={0x58, 0x4, "aa3dde3aa62d04dc434c3eb210441a0c605c8223f94811344a3325e57c3769a911f0c062f3b32f2e4ab537b87087bab9fb9bfe64c3cec6b2b12794ae5c622ba3b97c3aae040748a3b12e177eebe097b46da1914d8cd1"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xa07}, @generic={0x1f, 0x23, "121445b42d8b52529bb9955098c7cbcf84faa1881767151c1f8f30fd29"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x20, 0x1, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1f, 0x7, 0x40}}]}}, {{0x9, 0x4, 0x82, 0x4, 0x9, 0x1b, 0xd0, 0x50, 0x5, [@hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x938}}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf9, 0x0, 0x9, [@generic={0xc3, 0x24, "1b053a0ad06238c62ef03e696c6b2ea2a12bcf7c8bf43d710a1875382edf918551014889b48effee3c36896b84d1d9f361c841a4ccaa3dd452f091443c954ac2b3a16501fdd3b38362d648ace3faffaaacacd44eff3a5af2233a6697a5d9d68fd03b12f5ae2fcc37f386d8002023fb5aa7a5091975b38f342c29f9d2c9fcb299a1ccacc502649769f0e683fd6dabe4793a867b50a1bd0ba36454b28add490fb4991d1352e877f86814eac6a772b9bfc35c633068ed21b055504d2b330cbebffbc2"}]}}, {{0x9, 0x5, 0x9ab6bb0516246373, 0x1, 0x400, 0x40, 0x1, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x1ff, 0x1, 0x20, 0x1, [@generic={0x64, 0x23, "db28421098e9d53bfa40e137d43e7c136ca24fad86788fff234ec9c59c2888a42ffef1709789a27511633b3ce4bc4aa373effaf23f8ad58f5f2c0573935ceffce69feda66738033eee4f6908457665b17955348d7aae6c4b3efa601fd18768d2e9a9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x4, 0x6, 0x80}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x9, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x1f, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x47, 0xba}, @generic={0x4, 0xcd07eb0809f4bc21, 'la'}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4000}, @generic={0x67, 0x19, "882530c987525f77e25d65dbeb1d0233e31c7041fbf25768226355ddb9802e907cbd579572bb241492add1b572515b05558d41f91441dc0b4b4c533b4f5fd137acd2388b7c633cf429a432c3f41196a12ce180c96f1f67f00be2f8cde55db1810ed2a62985"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x3, 0x0, 0x0, 0xff, 0xef}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e209f6a552e9dd023a2f356b55931a37"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2}}, {0xcc, &(0x7f0000000940)=@string={0xcc, 0x3, "85cfb38ecec7a7a04e495a30f40abe1f11f83f9047174a1c74e7e481227ee5e7c17e39926f98116c90e7d37a8e84236b030183fc3e80c882af5be124e37ea65f3bfb8ce31a6c31b24b33f12e7640ec03d8cc17eae08a5769402d433c42c863c440125241c70a3ccfe287b59631e94ebac38eb5c6d1a4d9eb6788cb06d0fc7f4ed582ea2f05e59283f56aa2a607871cfdec760a90a5187b206413338380fd9ddb33a00fc5e92b3ac6782a74772a5a131e9d42b54fc8978fb6d5a562545d33e4e89daf6da6c59d138cf198"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x443}}, {0xc8, &(0x7f0000000a40)=@string={0xc8, 0x3, "5e61856d4655fdf6fd88fba297b06a9d97460475630476d9dee08d65c97f02c13dabab1dce5ef0f2bb84b9ceb43019b12339000706140f935125fe41eae0772b8e8f1943ffe90ba1f30bb29efa721e2b8b42ffea0301c6565c5033a9c1dcc829c443483617098d7f671d1c73e76ce153abe2c3b57bc055d00c284dd0ba326ab580c03a2b4353bd6f82e542f3bb8eb6a6fddaef84fcb39999855ae30c62e961b0be89c0671f327d70f9786042cc8eabb9c4f408c718d9edbd3351dbed12351e5c7842760b1b9a"}}]}) syz_usb_control_io(r0, &(0x7f0000001540)={0x2c, &(0x7f0000001300)={0x20, 0x23, 0x5e, {0x5e, 0x22, "495e55a257a3ed3a49f1485db9fa56163c72531178448caf07192826bf3d8e6b59ab4f1633ccfd407f821b1648afe8ef47439d2f11e4ff75a9dc8959b5350c691d10f9d079716583e9b4ed3f044d582ed200cc0bc1d3e4cd97d70a0c"}}, &(0x7f0000001380)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "b3a25f5ab1453e9d3a80ca6ca1ae29efa3e1d9a0d4724936de3f477eedeee0d7af164a271f0fd9d453d16d472fa28beb3adb24c99493c40f21b6a4f44d34738857f7018c34f6e4f8429fdf8553d6253d9624cb0e77334fc2402599832e193e9c788aa3ddca9cf24918db7ea58386b5a72e858dbb2a05630059f3e5"}}, &(0x7f0000001440)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e690a0c34a7bdb00fdb1a66135cfbf83"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x81ec, 0x0, 0x1, [0xff00, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x5, 0x3d, 0xb9f, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xd, 0x0, 0x7}]}}, &(0x7f00000014c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x0, 0x1f, "0b87f64c", "854e8fde"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x81, 0x9, 0xa9, 0x0, 0x40}}}, &(0x7f00000019c0)={0x84, &(0x7f0000001580)={0x0, 0x3, 0x47, "bf8a3ae54f4dc92b5c4ce47f69350945aab62bec50a76a5d4895c7db700eedb74b1a99f05642448526ed1e811f12b11b66b47443e0e82519154818a4c27faed7242b5b60bf55ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x5a}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000001700)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000001740)={0x40, 0x9, 0x1, 0x53}, &(0x7f0000001780)={0x40, 0xb, 0x2, "b1c9"}, &(0x7f00000017c0)={0x40, 0xf, 0x2, 0x76}, &(0x7f0000001800)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001840)={0x40, 0x17, 0x6, @local}, &(0x7f0000001880)={0x40, 0x19, 0x2, "2012"}, &(0x7f00000018c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001980)={0x40, 0x21, 0x1, 0x1d}}) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x4d, {0x9, 0x21, 0x1f, 0x71, 0x1, {0x22, 0x8a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x89, 0x20, 0xf7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x9e, 0x80, 0x8, 0x3f}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0x6180, 0x0, [0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x7f, 0x3, 0x7}, @generic={0x1a, 0x10, 0x4, "11c072353fad4568215189b17fb77719b12053425367b7"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x1, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x7, 0x5, 0x400}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0xf0, &(0x7f00000001c0)=@string={0xf0, 0x3, "00bad29397508bc4108d221d9789135080af4fabf4489946d2803fcb332a50e711eb7499488fcf0ffb3da0d8ccf817239496bf932485e3bea3a8a702c0235411aea5e3e1f0f02d50cffd4b84301a3af5b74294f93dc3bbae5e6b58724a67b4ea60ffa3ef2302735cd5826f55335ae190bf4d0f02569157753c0aa5ce79af29c662ee4a8c0c9dd4b938f87dceacfe4b1c31dc3ef971f5c850011ecb7d6132415b36a7340d9526be914b97cdda486439d645eaf8d28e8b5109f3d65121b3dbfa742085d279c8c9a0ffe7134f28ae1cffabead467a17614915957f642bb4962154d17eb45f46b80751865e06a66efe9"}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "b37300f22c8c13519565cb5ed3cbde9467dbe7c5aa93c637c20d6a0e36c72ef11e90aec62a323a876807c28ed874d36c929aa3ea3cb380a2359b2888b1190b774cb0d2f350175cfd8e434c16bd9f044c19577a1582cc2e4227c4c91b0846942b7004c2b086723f6ab7daec5d0bb269c42f54a96759c546a85346a294cb5634d05e778e1466623173c3fc8a74fded8429aa66c8dad415f49da5cfcccbf6560f97772b075cd7617f50e7d3a8bbd2"}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "3aea75d7ad5d124d57735fbd35abd72bea9b9f6098ce81"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300}, 0x27, &(0x7f0000000bc0)={0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x1, 0xf0f, 0x9, [0xff00, 0x3f0f, 0xcf]}]}, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x11a, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x1, 0x40, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0x43, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "3e88de"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3f, 0x3, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x7, 0x8, 0x5f}, @mdlm_detail={0x35, 0x24, 0x13, 0x2a, "48c72da2f73a324bd5cef11a4ed6697dd5177f6c1c6245f459fac22a1aa83b9ac00294657c62c6c9cc2b8247a364a93cbc"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mdlm_detail={0x7c, 0x24, 0x13, 0x8, "f8ccb4f337a041b66611e40e9b065a1dd868b757e8eee5721e1a098f88a764b5dc6ad9b1583bb195a0f1176b8c705916e4d2481c0bf29819164a79a889c2c0f387bf34870e5d6cb3668b63fbc0e2742b29427c14d9717d5a557d793ad6caf834159fc4d955c725df0669ce422084d73db8db70e1803fe11f"}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x7, 0xfffd}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x1, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6a, 0x81, 0x7}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x19, 0x7f, 0x4d, 0xff, 0x5}, 0x24, &(0x7f0000000d80)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fff, 0xff0f, 0x800, [0xff3f30, 0xff30, 0xc000, 0x6000]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x410}}, {0xb5, &(0x7f0000000e40)=ANY=[@ANYBLOB="b503853b73da9a5951ba7111f12f0f03c8e2025405f57591a81a06350eb8c7d14d7eee55efd71284ac1b25c9a5675eff739ea92104bc063fdb039e735d865159791e3724362605d7488745f94666af0ded89d1104c3f568346f9b153c333206b70c9f12f5c869b86b9438c69d806486b80f89ac259e3e4bc322538bc7d6e28e0ba73fab7d9419d5189597a5cbe75e19e52ade3f942d932db3059c3243b52b9520c0899eb5136fba3035088fe4f7c6d3e94fe73019b"]}, {0xa1, &(0x7f0000000f00)=@string={0xa1, 0x3, "a841cee8910a1507f15b4cde454583e636899783c7c47bccd399991bd565f7d6b8b42889ec5bac4ba69b23ddf54578d113e8faa8d8113c4ef0a60877aeb3318a7f379c56eef7c804ad60a8b1c961f5b391584c122f2df64007e017bb97619633f207294208cdfa831c3ea7fec22984e0ba48eb75c9ace0e9844872c740cadc95090a3bc481678efc460ed7e027dff0333f4f08fe7868c4058e913a1af94df3"}}, {0xef, &(0x7f0000000fc0)=@string={0xef, 0x3, "b028b6774b9204d4fe8b0a54571e072abe846630ab665a85c9179b92b40ac32d84c2a656c393f76f83a89687ed5e9b83d7f623dbf8d1f5921cf9330a995b7b4d136f289ae6db469824ecbe116cb9aa449257a5b69d3168f5fbb651c241b7921d3a28d1bbe075fd06fb2275111cc9d9cce3059ad67e556aba705a8157c6777b43d43f258dbdd9eb714ba9976088ce9166970b7aea5607ced5a60f6d9882eb4cca50f5894a93eec52d76bb7cc43ce37fa63b99c813cd0531a66c82f58710e2d43bc00be64003b938a79beead2ef936fe2bf591487bffbe992c74ffd7f1789d5730869555e38d52ba698d67b6865a"}}, {0xcf, &(0x7f00000010c0)=@string={0xcf, 0x3, "e960fafa8f2829bf1388205a4a7984e6434a40026cd5744a0865656a0d2260790bb8cc51887a65a7a5118a65d6cefb0c0354859a3d6d0a7533c05b5a72222df8614f78c750feae5eab34fb4be5ecdd51145bff2ef8fb6965817803dfc22b5b01f8faab331a9c1b6ae66f642feccbb0022096e5f9b8047bb5fadd2b19bedb89ba206b7e3959e1c32d48aece993802ad9e79948e5797f30cfab3fcb384ec5de227ec0887ffb21d4d7c025a84c4214bb9a41313d5a73ec979aa60f696d168b908e5f3fc4c2fe21cd16cd125060bcb"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x53, &(0x7f0000001200)=@string={0x53, 0x3, "692b10a7659bff3cd7bad99dd50d0d93c466e221bfeb87a2ddee16229b8f72edd1ead973462f42c3e3458995ca691dbef235bef63cf1dbc9fd97c1a3ab58891e73a4e06c6d7aa67b264b2a58be04370a7d"}}]}) (async) syz_usb_connect(0x0, 0x37b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x90, 0x23, 0xd7, 0x0, 0x12d1, 0xf9f0, 0x98e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x369, 0x2, 0x1, 0x6, 0x50, 0x81, [{{0x9, 0x4, 0xd1, 0x70, 0x7, 0xff, 0x2, 0x3, 0x68, [@hid_hid={0x9, 0x21, 0xd01, 0x5, 0x1, {0x22, 0x78a}}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x6, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xe8, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xf5fd}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x93, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x40, 0x3, 0x44, [@generic={0x5d, 0xb, "ac98213830946d614c85313e4369da7e439afea738b4c94faad28c0a4ba27ad7b80900abf4c03b8f11fb6df61fb8c1aa8f2e737ff5c7784ce31c3f4b5eee42b34b790901a39f317fb50775e82b4ddbc3cb1c49d2b6d9726a8321c0"}, @generic={0x58, 0x4, "aa3dde3aa62d04dc434c3eb210441a0c605c8223f94811344a3325e57c3769a911f0c062f3b32f2e4ab537b87087bab9fb9bfe64c3cec6b2b12794ae5c622ba3b97c3aae040748a3b12e177eebe097b46da1914d8cd1"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x40, 0xc4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xa07}, @generic={0x1f, 0x23, "121445b42d8b52529bb9955098c7cbcf84faa1881767151c1f8f30fd29"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x20, 0x1, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1f, 0x7, 0x40}}]}}, {{0x9, 0x4, 0x82, 0x4, 0x9, 0x1b, 0xd0, 0x50, 0x5, [@hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x938}}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xf9, 0x0, 0x9, [@generic={0xc3, 0x24, "1b053a0ad06238c62ef03e696c6b2ea2a12bcf7c8bf43d710a1875382edf918551014889b48effee3c36896b84d1d9f361c841a4ccaa3dd452f091443c954ac2b3a16501fdd3b38362d648ace3faffaaacacd44eff3a5af2233a6697a5d9d68fd03b12f5ae2fcc37f386d8002023fb5aa7a5091975b38f342c29f9d2c9fcb299a1ccacc502649769f0e683fd6dabe4793a867b50a1bd0ba36454b28add490fb4991d1352e877f86814eac6a772b9bfc35c633068ed21b055504d2b330cbebffbc2"}]}}, {{0x9, 0x5, 0x9ab6bb0516246373, 0x1, 0x400, 0x40, 0x1, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x1ff, 0x1, 0x20, 0x1, [@generic={0x64, 0x23, "db28421098e9d53bfa40e137d43e7c136ca24fad86788fff234ec9c59c2888a42ffef1709789a27511633b3ce4bc4aa373effaf23f8ad58f5f2c0573935ceffce69feda66738033eee4f6908457665b17955348d7aae6c4b3efa601fd18768d2e9a9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x4, 0x6, 0x80}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x9, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x1f, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x47, 0xba}, @generic={0x4, 0xcd07eb0809f4bc21, 'la'}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4000}, @generic={0x67, 0x19, "882530c987525f77e25d65dbeb1d0233e31c7041fbf25768226355ddb9802e907cbd579572bb241492add1b572515b05558d41f91441dc0b4b4c533b4f5fd137acd2388b7c633cf429a432c3f41196a12ce180c96f1f67f00be2f8cde55db1810ed2a62985"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x3, 0x0, 0x0, 0xff, 0xef}, 0x19, &(0x7f0000000480)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "e209f6a552e9dd023a2f356b55931a37"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2}}, {0xcc, &(0x7f0000000940)=@string={0xcc, 0x3, "85cfb38ecec7a7a04e495a30f40abe1f11f83f9047174a1c74e7e481227ee5e7c17e39926f98116c90e7d37a8e84236b030183fc3e80c882af5be124e37ea65f3bfb8ce31a6c31b24b33f12e7640ec03d8cc17eae08a5769402d433c42c863c440125241c70a3ccfe287b59631e94ebac38eb5c6d1a4d9eb6788cb06d0fc7f4ed582ea2f05e59283f56aa2a607871cfdec760a90a5187b206413338380fd9ddb33a00fc5e92b3ac6782a74772a5a131e9d42b54fc8978fb6d5a562545d33e4e89daf6da6c59d138cf198"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x443}}, {0xc8, &(0x7f0000000a40)=@string={0xc8, 0x3, "5e61856d4655fdf6fd88fba297b06a9d97460475630476d9dee08d65c97f02c13dabab1dce5ef0f2bb84b9ceb43019b12339000706140f935125fe41eae0772b8e8f1943ffe90ba1f30bb29efa721e2b8b42ffea0301c6565c5033a9c1dcc829c443483617098d7f671d1c73e76ce153abe2c3b57bc055d00c284dd0ba326ab580c03a2b4353bd6f82e542f3bb8eb6a6fddaef84fcb39999855ae30c62e961b0be89c0671f327d70f9786042cc8eabb9c4f408c718d9edbd3351dbed12351e5c7842760b1b9a"}}]}) (async) syz_usb_control_io(r0, &(0x7f0000001540)={0x2c, &(0x7f0000001300)={0x20, 0x23, 0x5e, {0x5e, 0x22, "495e55a257a3ed3a49f1485db9fa56163c72531178448caf07192826bf3d8e6b59ab4f1633ccfd407f821b1648afe8ef47439d2f11e4ff75a9dc8959b5350c691d10f9d079716583e9b4ed3f044d582ed200cc0bc1d3e4cd97d70a0c"}}, &(0x7f0000001380)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "b3a25f5ab1453e9d3a80ca6ca1ae29efa3e1d9a0d4724936de3f477eedeee0d7af164a271f0fd9d453d16d472fa28beb3adb24c99493c40f21b6a4f44d34738857f7018c34f6e4f8429fdf8553d6253d9624cb0e77334fc2402599832e193e9c788aa3ddca9cf24918db7ea58386b5a72e858dbb2a05630059f3e5"}}, &(0x7f0000001440)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e690a0c34a7bdb00fdb1a66135cfbf83"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x81ec, 0x0, 0x1, [0xff00, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x5, 0x3d, 0xb9f, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xd, 0x0, 0x7}]}}, &(0x7f00000014c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x0, 0x1f, "0b87f64c", "854e8fde"}}, &(0x7f0000001500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x81, 0x9, 0xa9, 0x0, 0x40}}}, &(0x7f00000019c0)={0x84, &(0x7f0000001580)={0x0, 0x3, 0x47, "bf8a3ae54f4dc92b5c4ce47f69350945aab62bec50a76a5d4895c7db700eedb74b1a99f05642448526ed1e811f12b11b66b47443e0e82519154818a4c27faed7242b5b60bf55ea"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x5a}, &(0x7f0000001680)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000001700)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000001740)={0x40, 0x9, 0x1, 0x53}, &(0x7f0000001780)={0x40, 0xb, 0x2, "b1c9"}, &(0x7f00000017c0)={0x40, 0xf, 0x2, 0x76}, &(0x7f0000001800)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001840)={0x40, 0x17, 0x6, @local}, &(0x7f0000001880)={0x40, 0x19, 0x2, "2012"}, &(0x7f00000018c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001900)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001940)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001980)={0x40, 0x21, 0x1, 0x1d}}) (async) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xc0, 0x20, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x4d, {0x9, 0x21, 0x1f, 0x71, 0x1, {0x22, 0x8a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x89, 0x20, 0xf7}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x9e, 0x80, 0x8, 0x3f}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0x6180, 0x0, [0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x7f, 0x3, 0x7}, @generic={0x1a, 0x10, 0x4, "11c072353fad4568215189b17fb77719b12053425367b7"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x1, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x7, 0x5, 0x400}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x436}}, {0xf0, &(0x7f00000001c0)=@string={0xf0, 0x3, "00bad29397508bc4108d221d9789135080af4fabf4489946d2803fcb332a50e711eb7499488fcf0ffb3da0d8ccf817239496bf932485e3bea3a8a702c0235411aea5e3e1f0f02d50cffd4b84301a3af5b74294f93dc3bbae5e6b58724a67b4ea60ffa3ef2302735cd5826f55335ae190bf4d0f02569157753c0aa5ce79af29c662ee4a8c0c9dd4b938f87dceacfe4b1c31dc3ef971f5c850011ecb7d6132415b36a7340d9526be914b97cdda486439d645eaf8d28e8b5109f3d65121b3dbfa742085d279c8c9a0ffe7134f28ae1cffabead467a17614915957f642bb4962154d17eb45f46b80751865e06a66efe9"}}, {0xaf, &(0x7f00000002c0)=@string={0xaf, 0x3, "b37300f22c8c13519565cb5ed3cbde9467dbe7c5aa93c637c20d6a0e36c72ef11e90aec62a323a876807c28ed874d36c929aa3ea3cb380a2359b2888b1190b774cb0d2f350175cfd8e434c16bd9f044c19577a1582cc2e4227c4c91b0846942b7004c2b086723f6ab7daec5d0bb269c42f54a96759c546a85346a294cb5634d05e778e1466623173c3fc8a74fded8429aa66c8dad415f49da5cfcccbf6560f97772b075cd7617f50e7d3a8bbd2"}}, {0x19, &(0x7f0000000380)=@string={0x19, 0x3, "3aea75d7ad5d124d57735fbd35abd72bea9b9f6098ce81"}}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300}, 0x27, &(0x7f0000000bc0)={0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa}, @ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x1, 0xf0f, 0x9, [0xff00, 0x3f0f, 0xcf]}]}, 0x1, [{0x0, 0x0}]}) (async) 07:37:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xa00000000000000}], 0x0, 0x0, 0x0}) 07:37:03 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0xa, 0x91, {0x91, 0x30, "63ec73d1733ca16591e03ad961ff88f6634297e099e4c18c4acd3c48122adb366dab74dda926f33af7681ff7ff8a9609075c89fa4a9954d64bdfee7f8a8cbec4f1039bd95b94794df1aada6c9f5b420ebe8b70c8d1ac18ef761a1414378608bf8a8396e266d5bfaee08c28ea25077050077eec8ef5f32f084d6a9bf4b8acc4fed02edf7368233179b56d653da7cf7c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000200)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x2, 0xf5, 0x2c, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x69, 0x0, 0x3f, 0x60}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x54, 0x9, 0x9}, @generic={0x3c, 0x10, 0x4, "d2de40de39e5c5bc6fdf6f8e2481e76fe8b096301223aebee6d034edf6f1e92eede6df8c3476b77ec6aea3fc8ccae242a7e225ee0d3363d96b"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10000, 0xf000, 0x9, [0x0, 0x7f803f, 0xc000, 0xff0030, 0xff, 0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "b92e636c9c5822421ad49dc5e8a4396b"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x99, 0x10, 0x1f, 0x3, "c7d93728", "d9469e8e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x81, 0x40, 0x80, 0x5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x6, 0x69, "e236db9794c99fad51f08bea989a2d990ed7f12dc36244a4066b73d16f36edddab0efa6a54412abb455018b6ff46c16c06699849788caa6358d45420ebebc8b2471c02ac8436bd7addd779bfc8c6267ca81d235148f30a3c93b75b025569bcff3255a1fd4dec49e37a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "56a2"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, '3/'}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x19}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xaa}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (rerun: 32) [ 1634.568889][T20522] binder: 20518:20522 ioctl c00c620f 20000100 returned -22 [ 1634.616377][T20524] binder: 20521:20524 ioctl c0306201 20001480 returned -14 [ 1634.668176][T20526] binder: 20520:20526 ioctl c0306201 20001480 returned -14 [ 1634.709327][T20524] binder_alloc: 20521: binder_alloc_buf size 720575940379279488 failed, no address space [ 1634.720009][T20524] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:37:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1634.775788][T20526] binder: transaction release 11714 bad object at offset 0, size 0 [ 1634.787989][T20526] binder: transaction release 11714 bad object at offset 0, size 0 [ 1634.797295][T20526] binder: transaction release 11714 bad object at offset 0, size 0 07:37:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xb00000000000000}], 0x0, 0x0, 0x0}) [ 1634.868755][T20535] binder: 20534:20535 ioctl c00c620f 20000100 returned -22 [ 1634.893093][ T5037] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1634.901297][T11153] usb 4-1: new high-speed USB device number 75 using dummy_hcd 07:37:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 1634.972585][T11046] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1635.062219][T20537] binder: 20536:20537 ioctl c0306201 20001480 returned -14 [ 1635.102444][T20537] binder_alloc: 20536: binder_alloc_buf size 792633534417207424 failed, no address space [ 1635.112882][T20537] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1635.122774][T20541] binder: 20539:20541 ioctl c00c620f 20000100 returned -22 [ 1635.130776][T20540] binder: 20538:20540 ioctl c0306201 20001480 returned -14 07:37:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1635.146126][T20540] binder: transaction release 11724 bad object at offset 0, size 0 [ 1635.154798][T20540] binder: transaction release 11724 bad object at offset 0, size 0 [ 1635.163097][T20540] binder: transaction release 11724 bad object at offset 0, size 0 [ 1635.165393][ T5037] usb 6-1: Using ep0 maxpacket: 32 [ 1635.181971][T11153] usb 4-1: Using ep0 maxpacket: 32 [ 1635.222675][T11046] usb 1-1: Using ep0 maxpacket: 32 07:37:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, 0x0}}], 0x0, 0x0, 0x0}) [ 1635.326333][T20543] binder: 20542:20543 ioctl c00c620f 20000100 returned -22 [ 1635.343421][T11153] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1635.343473][T11046] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1635.343590][T11046] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1635.352010][T11153] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1635.352127][T11153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.352223][T11153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1635.352338][T11153] usb 4-1: config 1 has no interface number 0 [ 1635.352481][T11153] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1635.352616][T11153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.360930][T11046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1635.371477][ T5037] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1635.379592][T11046] usb 1-1: config 1 has no interface number 0 [ 1635.389737][ T5037] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1635.398918][T11046] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1635.399064][T11046] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1635.399259][T11046] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1635.399386][T11046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.502891][ T5037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1635.512200][ T5037] usb 6-1: config 1 has no interface number 0 [ 1635.518501][ T5037] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1635.529763][ T5037] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1635.543085][ T5037] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1635.552438][ T5037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.635593][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1635.680981][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1635.713567][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1635.746111][T20545] binder: 20544:20545 ioctl c0306201 20001480 returned -14 [ 1635.848005][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1635.876019][T20529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.885690][T20529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.912623][ T5037] snd_usb_pod 6-1:1.1: set_interface failed [ 1635.918895][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1635.927336][ T5037] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 1635.929415][T20529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.944574][T20529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.987048][T20529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.997374][T20529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.013419][ T5037] usb 6-1: USB disconnect, device number 95 [ 1636.072405][T11153] snd_usb_pod 4-1:1.1: set_interface failed [ 1636.078680][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1636.088058][T11153] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1636.144118][T11153] usb 4-1: USB disconnect, device number 75 [ 1636.882354][T11046] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) 07:37:06 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, [0xff0f, 0xfff8, 0x3f00, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ec5e3828a08f1e0be047fee11c13a33b"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0x0, 0x0, [0xff0f, 0xfff8, 0x3f00, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ec5e3828a08f1e0be047fee11c13a33b"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) 07:37:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xc00000000000000}], 0x0, 0x0, 0x0}) 07:37:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:06 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, 0x0}}], 0x0, 0x0, 0x0}) 07:37:06 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1b, &(0x7f0000000640)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fffff7, 0x880f, 0x9baa}]}, 0x1, [{0x0, 0x0}]}) syz_usb_connect$printer(0x6, 0x30, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x5d, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x3f, 0x6, 0x8, 0x5}, 0x89, &(0x7f0000000100)={0x5, 0xf, 0x89, 0x2, [@generic={0x81, 0x10, 0x6, "3ddab2da05b433904997dbe5e71931063d69f8d849f8c8b5a7d0dc662180972d1cbdc7e1cfb10595ea7af1be512c00307b9969b52261cee56c5057a9aa49334a2a4366df3a84f031b46114b99ed3dd67af70b6493b0f4c1f48ca5027fe421e8166e1319894458a505872c3a78b1772f3cf735807790b09bda0a7467cd960"}, @ptm_cap={0x3}]}, 0x1, [{0x42, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x6f}}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x20, 0xb, 0xb2, {0xb2, 0x22, "4d9e97c1b9033145e3c8abd11aba6184e64b7fd80dda46e50d0347f4a2ecf317d9a4f55a924664c610da113973a23c54acf9e591c1decbfc7b567b92d704a26c578c230c69621ca1d43ddb139092a164d2147dd2468b03a400f436856fabb5d6dd13cf3047a1d4e88490b432f6b7dd208ae4a19a284995e2a4ad27d96c72b723fabbf040834757e96dbeb42ef2c4be9a6aaba9ef35d37a65e98cdf9d8f4d00449f666f6010d04b7bcf144f072a2fa138"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2403}}, &(0x7f0000000340)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "16f3ef72"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0x58a}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x40, 0xc, 0x35, "2285bb36930aeefaead6fc222c05cf69068bc592a865d1be777068d92e18b334a0f78ba0f18a96f76cdcd8393ddd2f6823604f7dbc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0x94, "9f00e162d97759d003dae69694f2e5851832e96fdf7d862744628c3c4634b7a360f627534561e9796dabdabbe0e47efd310d07de3f762c2c4aa6e6fa41bf09c344e97460f31903511ec0d73214e859ab460b704f842be1c144f70d0e279305bea46d69f5f60cfe05e186c7861fd3919f337c2fd2c4ef3241dc4bdca6652745b38da7693b2e49305522b5c0360e12782a2799b290"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x4}}) 07:37:06 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0xa, 0x91, {0x91, 0x30, "63ec73d1733ca16591e03ad961ff88f6634297e099e4c18c4acd3c48122adb366dab74dda926f33af7681ff7ff8a9609075c89fa4a9954d64bdfee7f8a8cbec4f1039bd95b94794df1aada6c9f5b420ebe8b70c8d1ac18ef761a1414378608bf8a8396e266d5bfaee08c28ea25077050077eec8ef5f32f084d6a9bf4b8acc4fed02edf7368233179b56d653da7cf7c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000200)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x2, 0xf5, 0x2c, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x69, 0x0, 0x3f, 0x60}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x54, 0x9, 0x9}, @generic={0x3c, 0x10, 0x4, "d2de40de39e5c5bc6fdf6f8e2481e76fe8b096301223aebee6d034edf6f1e92eede6df8c3476b77ec6aea3fc8ccae242a7e225ee0d3363d96b"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10000, 0xf000, 0x9, [0x0, 0x7f803f, 0xc000, 0xff0030, 0xff, 0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "b92e636c9c5822421ad49dc5e8a4396b"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x99, 0x10, 0x1f, 0x3, "c7d93728", "d9469e8e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x81, 0x40, 0x80, 0x5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x6, 0x69, "e236db9794c99fad51f08bea989a2d990ed7f12dc36244a4066b73d16f36edddab0efa6a54412abb455018b6ff46c16c06699849788caa6358d45420ebebc8b2471c02ac8436bd7addd779bfc8c6267ca81d235148f30a3c93b75b025569bcff3255a1fd4dec49e37a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "56a2"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, '3/'}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x19}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xaa}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0xa, 0x91, {0x91, 0x30, "63ec73d1733ca16591e03ad961ff88f6634297e099e4c18c4acd3c48122adb366dab74dda926f33af7681ff7ff8a9609075c89fa4a9954d64bdfee7f8a8cbec4f1039bd95b94794df1aada6c9f5b420ebe8b70c8d1ac18ef761a1414378608bf8a8396e266d5bfaee08c28ea25077050077eec8ef5f32f084d6a9bf4b8acc4fed02edf7368233179b56d653da7cf7c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000200)={0x0, 0xf, 0x99, {0x5, 0xf, 0x99, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x2, 0xf5, 0x2c, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x69, 0x0, 0x3f, 0x60}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x54, 0x9, 0x9}, @generic={0x3c, 0x10, 0x4, "d2de40de39e5c5bc6fdf6f8e2481e76fe8b096301223aebee6d034edf6f1e92eede6df8c3476b77ec6aea3fc8ccae242a7e225ee0d3363d96b"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x10000, 0xf000, 0x9, [0x0, 0x7f803f, 0xc000, 0xff0030, 0xff, 0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0xc0, "b92e636c9c5822421ad49dc5e8a4396b"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x99, 0x10, 0x1f, 0x3, "c7d93728", "d9469e8e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x81, 0x40, 0x80, 0x5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x6, 0x69, "e236db9794c99fad51f08bea989a2d990ed7f12dc36244a4066b73d16f36edddab0efa6a54412abb455018b6ff46c16c06699849788caa6358d45420ebebc8b2471c02ac8436bd7addd779bfc8c6267ca81d235148f30a3c93b75b025569bcff3255a1fd4dec49e37a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "56a2"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, '3/'}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x19}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xaa}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) [ 1637.765406][T11153] usb 1-1: USB disconnect, device number 109 [ 1637.794111][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1637.886367][T20556] binder: 20551:20556 ioctl c00c620f 20000100 returned -22 [ 1637.926591][T20558] binder: 20553:20558 ioctl c0306201 20001480 returned -14 [ 1637.936977][T20557] binder: 20554:20557 ioctl c0306201 20001480 returned -14 07:37:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1638.049576][T20558] binder_alloc: 20553: binder_alloc_buf size 864691128455135360 failed, no address space [ 1638.063749][T20558] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:37:07 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, 0x0}}], 0x0, 0x0, 0x0}) 07:37:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xd00000000000000}], 0x0, 0x0, 0x0}) [ 1638.154604][T11046] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1638.172889][ T5033] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1638.285394][T20565] binder: 20564:20565 ioctl c0306201 20001480 returned -14 [ 1638.305974][T20569] binder: 20566:20569 ioctl c00c620f 20000100 returned -22 [ 1638.317309][T20568] binder: 20567:20568 ioctl c0306201 20001480 returned -14 07:37:07 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1638.392607][T20568] binder_alloc: 20567: binder_alloc_buf size 936748722493063296 failed, no address space [ 1638.402928][T20568] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1638.412320][T11153] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1638.413034][T11046] usb 4-1: Using ep0 maxpacket: 32 [ 1638.426804][ T5033] usb 6-1: Using ep0 maxpacket: 32 07:37:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x21f4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100), 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES32=r1], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f054000"], 0x1, [{0x0, 0x0}]}) 07:37:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xe00000000000000}], 0x0, 0x0, 0x0}) [ 1638.542952][T11046] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1638.551571][T11046] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1638.560869][T11046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.575651][T11046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1638.586136][T11046] usb 4-1: config 1 has no interface number 0 [ 1638.592572][T11046] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1638.602169][T11046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.612340][ T5033] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1638.621200][ T5033] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1638.630148][ T5033] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1638.639482][ T5033] usb 6-1: config 1 has no interface number 0 [ 1638.645867][ T5033] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1638.657161][ T5033] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1638.659457][T20572] binder: 20571:20572 ioctl c00c620f 20000100 returned -22 [ 1638.670423][ T5033] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1638.670559][ T5033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.703935][T11153] usb 1-1: Using ep0 maxpacket: 32 [ 1638.731577][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1638.761287][ T5033] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1638.852644][T11153] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1638.861253][T11153] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1638.870690][T11153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1638.883792][T11153] usb 1-1: config 1 has no interface number 0 [ 1638.890504][T11153] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1638.901780][T11153] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1638.915018][T11153] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1638.924365][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.941607][T20559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.952598][T20559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.969974][T20577] binder: BINDER_SET_CONTEXT_MGR already set [ 1638.976796][T20577] binder: 20575:20577 ioctl 4018620d 20000000 returned -16 [ 1639.006920][ T5033] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1639.014072][T20577] binder: 20575:20577 ioctl c0306201 20001480 returned -14 [ 1639.158115][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1639.202379][T11046] snd_usb_pod 4-1:1.1: set_interface failed [ 1639.208660][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1639.218195][T11046] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1639.235786][T11046] usb 4-1: USB disconnect, device number 76 [ 1639.295611][T16196] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1639.364209][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1639.493474][T16196] usb 2-1: device descriptor read/64, error 18 [ 1639.562623][T20580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.572464][T20580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.671622][T11153] usb 6-1: USB disconnect, device number 96 [ 1639.682477][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1639.762215][T16196] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1639.927651][T20584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.937470][T20584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.952080][T16196] usb 2-1: device descriptor read/64, error 18 07:37:09 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x1000000000000000}], 0x0, 0x0, 0x0}) 07:37:09 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f7c000000050f7c00020c100a0000000000c7403da39678290e005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015bdca284b5c0a55c700000000000089433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) 07:37:09 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1b, &(0x7f0000000640)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fffff7, 0x880f, 0x9baa}]}, 0x1, [{0x0, 0x0}]}) syz_usb_connect$printer(0x6, 0x30, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x5d, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x3f, 0x6, 0x8, 0x5}, 0x89, &(0x7f0000000100)={0x5, 0xf, 0x89, 0x2, [@generic={0x81, 0x10, 0x6, "3ddab2da05b433904997dbe5e71931063d69f8d849f8c8b5a7d0dc662180972d1cbdc7e1cfb10595ea7af1be512c00307b9969b52261cee56c5057a9aa49334a2a4366df3a84f031b46114b99ed3dd67af70b6493b0f4c1f48ca5027fe421e8166e1319894458a505872c3a78b1772f3cf735807790b09bda0a7467cd960"}, @ptm_cap={0x3}]}, 0x1, [{0x42, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x6f}}]}) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x20, 0xb, 0xb2, {0xb2, 0x22, "4d9e97c1b9033145e3c8abd11aba6184e64b7fd80dda46e50d0347f4a2ecf317d9a4f55a924664c610da113973a23c54acf9e591c1decbfc7b567b92d704a26c578c230c69621ca1d43ddb139092a164d2147dd2468b03a400f436856fabb5d6dd13cf3047a1d4e88490b432f6b7dd208ae4a19a284995e2a4ad27d96c72b723fabbf040834757e96dbeb42ef2c4be9a6aaba9ef35d37a65e98cdf9d8f4d00449f666f6010d04b7bcf144f072a2fa138"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2403}}, &(0x7f0000000340)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "16f3ef72"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0x58a}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x40, 0xc, 0x35, "2285bb36930aeefaead6fc222c05cf69068bc592a865d1be777068d92e18b334a0f78ba0f18a96f76cdcd8393ddd2f6823604f7dbc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0x94, "9f00e162d97759d003dae69694f2e5851832e96fdf7d862744628c3c4634b7a360f627534561e9796dabdabbe0e47efd310d07de3f762c2c4aa6e6fa41bf09c344e97460f31903511ec0d73214e859ab460b704f842be1c144f70d0e279305bea46d69f5f60cfe05e186c7861fd3919f337c2fd2c4ef3241dc4bdca6652745b38da7693b2e49305522b5c0360e12782a2799b290"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x4}}) [ 1639.993913][T11046] usb 1-1: USB disconnect, device number 110 [ 1640.062156][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1640.078761][T16196] usb usb2-port1: attempt power cycle [ 1640.117750][T20590] binder: BINDER_SET_CONTEXT_MGR already set [ 1640.124178][T20590] binder: 20589:20590 ioctl 4018620d 20000000 returned -16 [ 1640.149889][T20593] binder: 20588:20593 ioctl c00c620f 20000100 returned -22 [ 1640.163646][T20590] binder: 20589:20590 ioctl c0306201 20001480 returned -14 [ 1640.180941][T20598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.191029][T20598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x1100000000000000}], 0x0, 0x0, 0x0}) 07:37:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1640.402360][ T5033] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1640.432750][T16361] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1640.459065][T20603] binder: 20601:20603 ioctl c00c620f 20000100 returned -22 [ 1640.472761][T20602] binder: 20600:20602 ioctl c0306201 20001480 returned -14 07:37:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1640.499941][T20602] binder_alloc: 20600: binder_alloc_buf size 1224979098644775040 failed, no address space [ 1640.510666][T20602] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1640.525333][T16196] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1640.579215][T20605] binder: 20604:20605 ioctl c00c620f 20000100 returned -22 07:37:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x1200000000000000}], 0x0, 0x0, 0x0}) [ 1640.623352][T11046] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1640.682614][T16361] usb 6-1: Using ep0 maxpacket: 32 [ 1640.683458][ T5033] usb 4-1: Using ep0 maxpacket: 8 [ 1640.703097][T16196] usb 2-1: device descriptor read/8, error -61 [ 1640.745139][T20608] binder: 20606:20608 ioctl c00c620f 20000100 returned -22 [ 1640.762457][T20609] binder: 20607:20609 ioctl c0306201 20001480 returned -14 [ 1640.779259][T20609] binder_alloc: 20607: binder_alloc_buf size 1297036692682702976 failed, no address space [ 1640.790038][T20609] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1640.812720][ T5033] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=b2.d9 [ 1640.826177][ T5033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.842883][T16361] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1640.851477][T16361] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1640.861036][T16361] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1640.870393][T16361] usb 6-1: config 1 has no interface number 0 [ 1640.876801][T16361] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1640.888217][T16361] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1640.888524][T11046] usb 1-1: Using ep0 maxpacket: 32 [ 1640.901363][T16361] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1640.901500][T16361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.937427][ T5033] usb 4-1: config 0 descriptor?? [ 1641.002583][T16196] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1641.012763][ T5033] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 1641.019545][ T5033] usbtest: probe of 4-1:0.0 failed with error -22 [ 1641.037214][T16361] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1641.172609][T11046] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1641.181287][T11046] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1641.190395][T11046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1641.199921][T11046] usb 1-1: config 1 has no interface number 0 [ 1641.206369][T11046] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1641.217136][T11153] usb 4-1: USB disconnect, device number 77 [ 1641.217528][T11046] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1641.242399][T11046] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1641.244407][T16361] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1641.251606][T11046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.268672][T16196] usb 2-1: device descriptor read/8, error -61 [ 1641.344985][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1641.392880][T16196] usb usb2-port1: unable to enumerate USB device 07:37:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x21f4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100), 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES32=r1], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f054000"], 0x1, [{0x0, 0x0}]}) 07:37:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1641.563977][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1641.656606][T20611] binder: 20610:20611 ioctl c00c620f 20000100 returned -22 [ 1641.830701][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.840691][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.172025][T11046] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1642.285455][T11153] usb 6-1: USB disconnect, device number 97 [ 1642.313393][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1642.333051][ T5037] usb 1-1: USB disconnect, device number 111 [ 1642.362274][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1642.364508][T11046] usb 2-1: device descriptor read/64, error 18 [ 1642.642208][T11046] usb 2-1: new high-speed USB device number 49 using dummy_hcd 07:37:11 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x2500000000000000}], 0x0, 0x0, 0x0}) 07:37:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:11 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1b, &(0x7f0000000640)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fffff7, 0x880f, 0x9baa}]}, 0x1, [{0x0, 0x0}]}) syz_usb_connect$printer(0x6, 0x30, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x5d, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x3f, 0x6, 0x8, 0x5}, 0x89, &(0x7f0000000100)={0x5, 0xf, 0x89, 0x2, [@generic={0x81, 0x10, 0x6, "3ddab2da05b433904997dbe5e71931063d69f8d849f8c8b5a7d0dc662180972d1cbdc7e1cfb10595ea7af1be512c00307b9969b52261cee56c5057a9aa49334a2a4366df3a84f031b46114b99ed3dd67af70b6493b0f4c1f48ca5027fe421e8166e1319894458a505872c3a78b1772f3cf735807790b09bda0a7467cd960"}, @ptm_cap={0x3}]}, 0x1, [{0x42, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x6f}}]}) (async, rerun: 32) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) (rerun: 32) syz_usb_disconnect(r0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x20, 0xb, 0xb2, {0xb2, 0x22, "4d9e97c1b9033145e3c8abd11aba6184e64b7fd80dda46e50d0347f4a2ecf317d9a4f55a924664c610da113973a23c54acf9e591c1decbfc7b567b92d704a26c578c230c69621ca1d43ddb139092a164d2147dd2468b03a400f436856fabb5d6dd13cf3047a1d4e88490b432f6b7dd208ae4a19a284995e2a4ad27d96c72b723fabbf040834757e96dbeb42ef2c4be9a6aaba9ef35d37a65e98cdf9d8f4d00449f666f6010d04b7bcf144f072a2fa138"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2403}}, &(0x7f0000000340)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "16f3ef72"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0x58a}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x40, 0xc, 0x35, "2285bb36930aeefaead6fc222c05cf69068bc592a865d1be777068d92e18b334a0f78ba0f18a96f76cdcd8393ddd2f6823604f7dbc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x1, 0x94, "9f00e162d97759d003dae69694f2e5851832e96fdf7d862744628c3c4634b7a360f627534561e9796dabdabbe0e47efd310d07de3f762c2c4aa6e6fa41bf09c344e97460f31903511ec0d73214e859ab460b704f842be1c144f70d0e279305bea46d69f5f60cfe05e186c7861fd3919f337c2fd2c4ef3241dc4bdca6652745b38da7693b2e49305522b5c0360e12782a2799b290"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x4}}) 07:37:11 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f7c000000050f7c00020c100a0000000000c7403da39678290e005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015bdca284b5c0a55c700000000000089433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"], 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) [ 1642.831998][T11046] usb 2-1: device descriptor read/64, error 18 [ 1642.953580][T20622] binder: 20621:20622 ioctl c00c620f 20000100 returned -22 [ 1642.953932][T11046] usb usb2-port1: attempt power cycle [ 1642.986851][T20624] binder: BINDER_SET_CONTEXT_MGR already set [ 1642.993280][T20624] binder: 20619:20624 ioctl 4018620d 20000000 returned -16 [ 1643.022921][T20624] binder: 20619:20624 ioctl c0306201 20001480 returned -14 07:37:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5000000000000000}], 0x0, 0x0, 0x0}) [ 1643.218962][T20629] binder: 20628:20629 ioctl c00c620f 20000100 returned -22 [ 1643.232776][T16196] usb 4-1: new high-speed USB device number 78 using dummy_hcd 07:37:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1643.302388][T11153] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1643.340951][T20631] binder: 20630:20631 ioctl c0306201 20001480 returned -14 [ 1643.352858][T20633] binder: 20632:20633 ioctl c00c620f 20000100 returned -22 [ 1643.366576][ T5033] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1643.368244][T20631] binder_alloc: 20630: binder_alloc_buf size 5764607523034235008 failed, no address space [ 1643.389065][T20631] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:37:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1643.402474][T11046] usb 2-1: new high-speed USB device number 50 using dummy_hcd 07:37:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5800000000000000}], 0x0, 0x0, 0x0}) [ 1643.474356][T16196] usb 4-1: Using ep0 maxpacket: 32 [ 1643.521717][T20635] binder: 20634:20635 ioctl c00c620f 20000100 returned -22 [ 1643.572095][T11153] usb 6-1: Using ep0 maxpacket: 32 [ 1643.572791][T11046] usb 2-1: device descriptor read/8, error -61 [ 1643.592613][T16196] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1643.601471][T16196] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1643.610707][T16196] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.621272][T16196] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1643.630628][T16196] usb 4-1: config 1 has no interface number 0 [ 1643.637143][T16196] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1643.646577][T16196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.660066][ T5033] usb 1-1: Using ep0 maxpacket: 32 [ 1643.694901][T11153] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1643.703745][T11153] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1643.712680][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1643.712706][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1643.712802][T11153] usb 6-1: config 1 has no interface number 0 [ 1643.734485][T11153] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1643.745942][T11153] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1643.759799][T11153] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1643.769210][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.782903][ T5033] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1643.795911][ T5033] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1643.806154][ T5033] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1643.814956][T20637] binder: 20636:20637 ioctl c0306201 20001480 returned -14 [ 1643.815402][ T5033] usb 1-1: config 1 has no interface number 0 [ 1643.828896][ T5033] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1643.840276][ T5033] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1643.853545][T20637] binder_alloc: 20636: binder_alloc_buf size 6341068275337658496 failed, no address space [ 1643.853545][ T5033] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1643.853695][T20637] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1643.863740][ T5033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.906300][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1643.938369][T20638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.941292][ T5033] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1643.948176][T20638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.954370][T11046] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1644.095068][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1644.155548][ T5033] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1644.173166][T11046] usb 2-1: device descriptor read/8, error -61 [ 1644.209462][ T5037] usb 6-1: USB disconnect, device number 98 [ 1644.218700][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1644.283594][T16196] snd_usb_pod 4-1:1.1: set_interface failed [ 1644.289932][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1644.298303][T16196] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1644.314640][T11046] usb usb2-port1: unable to enumerate USB device [ 1644.337590][T16196] usb 4-1: USB disconnect, device number 78 07:37:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x68000000}], 0x0, 0x0, 0x0}) [ 1644.735775][T11046] usb 1-1: USB disconnect, device number 112 [ 1644.753822][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1644.793842][T20645] binder: 20644:20645 ioctl c00c620f 20000100 returned -22 [ 1644.859161][T20647] binder: 20646:20647 ioctl c0306201 20001480 returned -14 [ 1644.891638][T20647] binder_alloc: 20646: binder_alloc_buf size 1744830592 failed, no address space [ 1644.902192][T20647] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:37:14 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="c782a200026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b50b000000a299f91d8da8d43fab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248673030007a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5cf271002b515db0d617e992965f869f0c43618d9b8ac5c1de3e9443895da3ad8431eea0c7d1382a27b7b64ab38e2df3962dcfe8aba9183409e66f0825b6795440f1eec48631be4fa2ed1c5e33ab57974207076de3533211a9bbd3ee1c70ef5590115969db650c28206917b1536b38844d7750183390d86"]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x5c00000000000000}], 0x0, 0x0, 0x0}) 07:37:14 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f7c000000050f7c00020c100a0000000000c7403da39678290e005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015bdca284b5c0a55c700000000000089433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) 07:37:14 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xccc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4e, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x14, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x40, 0xc, 0x2, 0x40, 0x64}, 0x14c, &(0x7f0000001200)={0x5, 0xf, 0x14c, 0x4, [@generic={0x8b, 0x10, 0x0, "950f3c902f46c73dc38859658004a291b4c9237286dc7af319fbc5e9d36f5601207e409acc38271b1a19c22a1d3d958b26f3e478b4d58212b5eb3a33f5dd472ba9a830c7d24cb6477e40b23cf06424a1fdafa7ba9e5dcf4c76fdb72fcfa5b694daa866d8683ef7a48a2985b2af4b7c37d499fc06e727aac05d8dd86b09e230dc6963e31dfd8ab460"}, @generic={0xa5, 0x10, 0xb, "81fff23919db6c301080d7b4bb4cc2c26056a1974ce0a42ac7a447f7b16e1acfe79e159d114b12ef2a057d689bf2e949811375f5f278b10b9132938f01525f4c83c59726a8c6c6c9b5736f01fb6ebdc65a39be7480bc93d6ae272d64dd48a7c24a1341a122d92155d3c768fe456145ea2be20102fce414c668656643012cc64ece818569f3d638d440808b65f4f0fe4e9cc3b7b2776a5ffbfddaa5f5702128707930"}, @ssp_cap={0xc, 0x10, 0xa, 0xc0, 0x0, 0x3f, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x31, 0xec, 0x1, 0x1, 0x9}]}, 0x7, [{0xca, &(0x7f0000000140)=@string={0xca, 0x3, "f0d3d2ac21edf679a73ffdfbff2ebcc98fede91ff4c47fe150c9b206e19e8aa6bfbc6e9537ade666b3d034c591fc054a4ad43df7c904fe4855d882f5982fd61b64a66667da62b4b62506ef487b89e60f918aba1b3e911c2ed4298b19726fa17b7e79b4aae28373ddfb9676123d1349b4eca2128af481fa7a5799b0a46433a3f216b74bae1fe870a23e413556f4e2da21ac563ca66aeeb157bf2cb1bf00d7efe51057439d3b87e89bb3c016f6e955957243c0d34c4d417cfa4135b3232f9006f7168051c39578bdd0"}}, {0x1d, &(0x7f0000000240)=ANY=[]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x642d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x102, &(0x7f0000000e80)=@string={0x102, 0x3, "163a31455e69ea2269e9bfb0dd7dc7119296ded65fa1315b5a099b5f1fce0e2f065e1ad1cf27d3c15b1a58e6128cbb8b9a9237340a5e4f0202245dc704637270c4f249c820c8a12f99d587828b1235edc4ec626ed914247e3798af45605eebba20828ccfe3e6d8e9003953d5de88acc5216f4e5e7b48cfe5b63dc1c5aca08a24599bdc244ff33a42db288d108641847fc1fec06f0896643400272da6e2504a62b93f1ba84afc90fffce540f08e15975a36624819f8ac6381980c7ee4c212ccbb2697c5a1d65c35f4a170607e24aa4c446fb998d2cb5bde785cb5e7fbb561ddd426f451d2bc65a522f788fb67488986d2bfc7bf89ac52b46bc32412f742adac15"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001140)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x21, {0x21, 0x23, "cac41cb6e04cbd0e75f35a5b767ca79ae62e949f7f91eb258a2fd8eff48d74"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f00000002c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "9b41cb96"}, @main=@item_4={0x3, 0x0, 0xb, "d061dbf9"}, @local=@item_4={0x3, 0x2, 0x5, "cd93c8ea"}, @local=@item_4={0x3, 0x2, 0x8, '}\rL\a'}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xa9, 0x1, {0x22, 0xc9c}}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001380)={0x20, 0xb, 0xa2, "c20a0eb438c82e2e20a6f4e9cce2ddaf6bdf237dd4adb8ca71a5343965f82aa6a819e5d9274af018e713cac866c913d477c240feb7ea5c051caa602f78cd38f4adfb073424ddf6ea179bece9392386feef52025a8e3bcdcc82cd5f2b5f1e7bd25ce99628a498a7ad7cf301c807f9e3c3635ed443a2626d38280c39329130bd3fd1700025f1db82fa27b0d339aaf8c72f48364ce138deec9d7f625b1fc0064a867cfa"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001440)={0x20, 0x1, 0xf2, "262103265c357871b7623b2615c9ff545fb0073709fe92f100d2f31bdc9b2a3319fec5b841b1c042b493737e0a3e22678f5349a138cb47fbf552827af160cd47ffe5d4c0708a43ab4e82dd41e6f62c64f513b39d64c5842227fb5702853d8dcac468ff7ed66039a85ef4562572c37ae79a267432ba65ddfe92af68bd92ca782f4839cdaefc99d0cd92da2cc58e4f9c832b78e3bf3e51b7952d38c479f2a2eb75893921fb199c91cc6c2950d8236d1863461afcab8b560d1982c94ba0dd9c0ee0f7fde745d05f37057cc969fe7f37c9887af7387ca97bcaab30cd9763b743e008bc09459a21f8c3a9a4e80d60121502aa6025"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x9}}) syz_usb_disconnect(r0) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0x10, 0xba, {0xba, 0x21, "8df0ed33cd3a29367d0d9c3793abd4151c1e439ce9091e40b579f6d98cfd893661eb449e4155da7b59fb5f87a9ac000100ac22c6b736082b19a9c0b7f89b5f84b62fc1f99d23971f21c4771dcae21b1652297f289e0b8b202c731c6bcd3ce45972cb0a5f4a7de016af75ab39019a75ab5355e24c5638814d69a9a12486fe86e9cf219f617de1c3915efec1ce45feb40ac62c92bc11e47b75d870444daff435a21c964f1e5dcdc0688943d627efa04a275e53e0b041d131e6"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000006c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x2a, 0x4, 0x6, 0xf000, 0x200, [0x30, 0x0, 0x1fe3fff, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x7, 0x40, 0x9, 0xd0}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2ec1ab3f992b377927983c43ded8604e"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x93, 0x2, 0x9, "4a5d87cf", "e9e831d6"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x87, 0x8, 0x33, 0x787, 0x40}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000800)={0x20, 0xa, 0x53, "7462a1c7213d3a8411ce72089011c76b8a8a6138f54d780f845aa7b19f0b9667e945e441f95f8d78c80982ef72eb7ab38aaabb0de25968590f31f43fa955ac079d2961ee0ce77ba1c54b01c14ddd849eb71ac6"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "85f1"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @random="21de1a2ee075"}, &(0x7f0000000ac0)={0x40, 0x17, 0x6}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "9b10"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x7}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xea, {0x9, 0x21, 0x8000, 0x8, 0x1, {0x22, 0x42e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe0, 0x9, 0x53}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x201, 0x3, 0x35, 0x9, 0x8, 0x20}, 0x83, &(0x7f0000001640)={0x5, 0xf, 0x83, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xe3, 0x6, 0xb0d, 0x0, 0xac, [0x3f0f, 0x0, 0x0, 0xffc0f8, 0x207f, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x2f, 0x2, 0x9, 0xf000, 0x8000, [0xffff1e, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xe, 0x9b}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1bb87c9836c7d6856e81018aae1593b9"}, @ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0x100000, 0xf, 0x7f, [0xff0000, 0x30, 0xc0, 0xff3f30, 0x3f30, 0xc000]}]}, 0x7, [{0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x40d}}, {0xf3, &(0x7f0000001840)=@string={0xf3, 0x3, "dee067558c8993cf42eba4698c0e793c7b54360eb9eb107a40f54f3b113fc12343de5e623a5b4129d3adee86ef574438e9f2c58539e9cc023d4d544659c72a1e4e242a9797e622447b1a6c0c6f5f3ef7420488fba62cc5107b0d7493605cc29a1a7a06dc953c3a99c893247a2d9b4e4812772754129666b47b46f2f5ce0d13af6c8a5fb3dd8f6aee7589cd3fb44d99f5468123ff9857c5b981ece679d94dfb13879f13f011e40ef7b5f078889292ba8769e4cc3c7a8b6c9b1baea7b22cdbae65c1c3ebdc3908e108f8926d572eae0f2fd0eae4302bd3e487e60ba6d871f8f619d66672bc16af3fc9e559b47e819fd1bc57"}}, {0xf6, &(0x7f0000001940)=@string={0xf6, 0x3, "f7d1203ec5a3c9664fa5786a5b2b41eaf2950dabc690bebdd63717be2672371d1f95d31afee195d0938f60920c51463fa9239e7e0333b9b329229b68d4b0a6e6d26f3225362e1c728179a27d9bfd7ccd0bdb87cb2391b407fa29411ca5327d62deaf15b068fdffbb00aac596ed06302b18b0b21b1cfcbb90d9fbb9eb1ca24d1b14afc2e89ebe25e3ef3260b76e59f1c13582974d9aa60585e306f28e34be414515f1e66a35d5191f191dce6542740baa0f3208d7f3549f6cd33a877d1c7c0beb92235853a6471c44cea36fa6561dfcee90f887549846dd7a03611ce6c34d9af1cdc145e68d5a5b731535c480ef0bb51276ea9ebf"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001c00)={0x24, &(0x7f0000001ac0)={0x40, 0xf, 0x63, {0x63, 0x8, "5be089caf562f5ff9d9258a791d0c2bdfb2a20fd725165661f654111033393578135cd8c497915d6ee2f3e7fad1740f85b0fe565a4c28ac0bc0e72a0fe3ea55b83ceca3f1e4439a06b2d1ecb0dede7cf23bec5407b50a773ff9f072283fbbf07f5"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1661}}, &(0x7f0000001b80)={0x0, 0x22, 0x28, {[@main=@item_4={0x3, 0x0, 0xb, "5d3e8270"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x2, 0x1, 0xb, "00cc"}, @main=@item_4={0x3, 0x0, 0xa, "596c00d7"}, @global=@item_4={0x3, 0x1, 0x3, "1b377020"}, @local=@item_4={0x3, 0x2, 0x0, "0184f811"}, @main=@item_4={0x3, 0x0, 0xb, "9216b5e6"}, @global=@item_4={0x3, 0x1, 0x9, "8d15eb8d"}, @main=@item_4={0x3, 0x0, 0xa, "cc0ea80c"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000001bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4b, 0x1, {0x22, 0xbf7}}}}, &(0x7f0000001e40)={0x2c, &(0x7f0000001c40)={0x40, 0x9, 0xd2, "f7fb3771a88fd1ad02541b936d0aca9e0423b36aca8014754f352bf5335e663b091cd83221ea0ecd0805a4f1692def3725f43f1a23442991796623b7b1649c2da40d8fe3e7ab8945e49879f74ed8d964306a8bd0390e7eaa165d2d94ba18de9dc8c8f0e2eaa31c9d95cf336a133b6a40db12f4da230a371eed661247ef65af189064b89ef29630f6caa5b650f9c19eb51503e37656e8faf5f21dfa49362e34d77d0ad5fed6fc452422a84dd91f6833e8223bca1107188ff7e85970a3d21426f6e7138aaa9e0564eaf2ce233fbf6c6414ed93"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001dc0)={0x20, 0x1, 0xa, "a5cdeb28c6db71bebaaf"}, &(0x7f0000001e00)={0x20, 0x3, 0x1, 0x9}}) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x6d, {0x6d, 0x2, "35afef852f8652cc8241aecc21c0991ae1abfc2c87ecbf023c405ee2efb371f892a9533ef993945801dcf59236749b5f49f57bb4b8c9f515bdd545539c985fdfc946148a47e23067b6e478b72214260ed121b99377e1f5d787a17c579658fa3f46146b9c83f31a0028f6f8"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000480)={0x40, 0xd, 0x64, "33ea6529bec59e6a09667ec88c38d9ff09eb48eb941caa640049f80712b05903f4d7bd8942f967aeb0373d798a528d7568e82770da9ee240a911575f2fb4453ad6b2a2fa6107c13c95e8d0a020b19ca7e41ed61d78fe51ae31a16cc50cf4e0a56c9b044e"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x6, 0x5, 0x4, 0x5, 0xec, 0x3, 0x8, 0xffffff3a, 0x4, 0x9, 0xfff, 0x40}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x87, 0x2, 0x7000}, &(0x7f0000001040)={0x20, 0x89, 0x2, 0x1}}) 07:37:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1645.354907][T20658] binder: 20655:20658 ioctl c00c620f 20000100 returned -22 [ 1645.377456][T20657] binder: 20648:20657 ioctl c0306201 20001480 returned -14 07:37:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2a4c0000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1645.435700][T20653] binder: 20652:20653 ioctl c0306201 20001480 returned -14 07:37:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0x6800000000000000}], 0x0, 0x0, 0x0}) [ 1645.652637][T11046] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1645.656253][T20663] binder: 20662:20663 ioctl c00c620f 20000100 returned -22 [ 1645.692460][T11153] usb 4-1: new high-speed USB device number 79 using dummy_hcd 07:37:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2c4c0000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1645.754793][T20666] binder: 20664:20666 unknown command 287492 [ 1645.761088][T20666] binder: 20664:20666 ioctl c0306201 20000080 returned -22 [ 1645.794048][T20667] binder: 20665:20667 ioctl c0306201 20001480 returned -14 [ 1645.818317][T20666] binder: 20664:20666 ioctl c0306201 20001480 returned -14 [ 1645.849968][T20667] binder_alloc: 20665: binder_alloc_buf size 7493989779944505472 failed, no address space [ 1645.860718][T20667] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1645.863189][T20669] binder: 20668:20669 ioctl c00c620f 20000100 returned -22 [ 1645.883333][ T5037] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1645.902370][T11046] usb 6-1: Using ep0 maxpacket: 32 07:37:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) (fail_nth: 1) 07:37:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xfcffffff00000000}], 0x0, 0x0, 0x0}) [ 1645.963256][T11153] usb 4-1: Using ep0 maxpacket: 32 [ 1646.023843][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1646.032754][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1646.041586][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1646.054917][T11046] usb 6-1: config 1 has no interface number 0 [ 1646.061226][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1646.065487][T20671] binder: 20670:20671 ioctl c0306201 20001480 returned -14 [ 1646.072806][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1646.073008][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1646.102697][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.119659][T11153] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1646.128981][T11153] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1646.137967][T11153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.140819][T20673] binder: 20672:20673 ioctl c0306201 20001480 returned -14 [ 1646.152416][T11153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1646.166797][T20673] binder_alloc: 20672: binder_alloc_buf size -216172786408750976 failed, no address space [ 1646.168765][T11153] usb 4-1: config 1 has no interface number 0 [ 1646.178953][T20673] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1646.184621][T11153] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1646.203769][T11153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.256823][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1646.259485][T20674] FAULT_INJECTION: forcing a failure. [ 1646.259485][T20674] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.276716][T20674] CPU: 1 PID: 20674 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1646.286884][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1646.297149][T20674] Call Trace: [ 1646.300586][T20674] [ 1646.303687][T20674] dump_stack_lvl+0x1bf/0x240 [ 1646.308642][T20674] dump_stack+0x1e/0x20 [ 1646.313061][T20674] should_fail_ex+0x748/0x7f0 [ 1646.318047][T20674] __should_failslab+0x188/0x1f0 [ 1646.323273][T20674] should_failslab+0x2d/0x70 [ 1646.328105][T20674] slab_pre_alloc_hook+0xa9/0xa40 [ 1646.333371][T20674] __kmem_cache_alloc_node+0xa6/0x8b0 [ 1646.338965][T20674] ? tomoyo_realpath_from_path+0x104/0xa90 [ 1646.345008][T20674] ? kstrtoull+0xbf/0x3a0 [ 1646.349562][T20674] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1646.355648][T20674] __kmalloc+0x121/0x3c0 [ 1646.360108][T20674] ? tomoyo_realpath_from_path+0x104/0xa90 [ 1646.366150][T20674] tomoyo_realpath_from_path+0x104/0xa90 [ 1646.372023][T20674] ? __srcu_read_lock+0x76/0xd0 [ 1646.377129][T20674] tomoyo_path_number_perm+0x1d9/0x8e0 [ 1646.382878][T20674] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1646.388967][T20674] tomoyo_file_ioctl+0x3f/0x50 [ 1646.393943][T20674] ? tomoyo_inode_getattr+0x40/0x40 [ 1646.399364][T20674] security_file_ioctl+0xa1/0x150 [ 1646.405123][T20674] __se_sys_ioctl+0xcc/0x400 [ 1646.409953][T20674] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1646.416023][T20674] __x64_sys_ioctl+0x96/0xe0 [ 1646.420861][T20674] do_syscall_64+0x41/0xc0 [ 1646.425503][T20674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1646.431631][T20674] RIP: 0033:0x7f77b0a8c169 [ 1646.436244][T20674] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1646.456105][T20674] RSP: 002b:00007f77b17ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.464761][T20674] RAX: ffffffffffffffda RBX: 00007f77b0bac050 RCX: 00007f77b0a8c169 [ 1646.472944][T20674] RDX: 0000000020000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1646.481707][T20674] RBP: 00007f77b17ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.489860][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.498003][T20674] R13: 00007f77b0ccfb1f R14: 00007f77b17ea300 R15: 0000000000022000 [ 1646.506172][T20674] [ 1646.514614][T20674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1646.522577][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 1646.554096][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1646.622363][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1646.674848][ T5037] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1646.683642][ T5037] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1646.692822][ T5037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1646.702141][ T5037] usb 1-1: config 1 has no interface number 0 [ 1646.708441][ T5037] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1646.719721][ T5037] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1646.733141][ T5037] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1646.742483][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.763167][T20675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.773195][T20675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.818529][T20651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.828526][T20651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.851490][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1646.866836][T11153] snd_usb_pod 4-1:1.1: set_interface failed [ 1646.875999][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1646.884371][T11153] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1646.926783][T11153] usb 4-1: USB disconnect, device number 79 [ 1647.089721][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1647.317949][T11046] usb 6-1: USB disconnect, device number 99 [ 1647.332329][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1647.462352][T11153] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1647.722181][T11153] usb 4-1: Using ep0 maxpacket: 8 [ 1647.862642][T11153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=b2.d9 [ 1647.872497][T11153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.883396][T11046] usb 1-1: USB disconnect, device number 113 [ 1647.903351][T11153] usb 4-1: config 0 descriptor?? [ 1647.921247][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1647.975610][T11153] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 1647.983063][T11153] usbtest: probe of 4-1:0.0 failed with error -22 [ 1648.173639][T20651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.183373][T20651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.201888][ T5037] usb 4-1: USB disconnect, device number 80 07:37:17 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)=ANY=[@ANYBLOB="050fa200026d1001bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a7642fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533af5fd9e519d0f5cd55e925fda20c248673010007a315728e7794c83f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5005400"/147]}) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x0, 0x3, 0x78, {0x78, 0x2, "83f2319148046b01053b4150c793e3bd367cbcb9b51e59dbba3a6b74a091a9cd3ca1b77b7969a87fc191b0651dd8c9487df94875285d078ac1173507f31d3ac8e95dc40274826003e367c9d63bc6fe8cf683b985ac2532ef476c533902bba2bfd5dd1c743852dbdcf45f8f2e378348ac1ab89cf792a9"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "2f1e2f132f2f630bd7e2f8c8845228624f077529537ce887a57ad21589cde2496a0054b765cf1daa30cbc8dca9f2aedf6329cf4187d0e2d2cff7bf7516dc7f02389884a3f92b4aa161a77d3255f15af428b81707aaa57632b0a0414aaadff3aca058390bdb0f75f1492786be1939ebbcfba6216fa4a5ca12980313fb72fa692c0ed761da3067e0ab79a2b092442626ab03ea1d626f83bdefef0f8a4ebdba155f3a8b6089baf9b257f4895bb8053e38142dfcf6e59416dbcede11cf9193b64bf8082dd1ae7526bae3ee3d05da0dd02ee27b9f968d5d3a7299eeb8e60ec195bf9f16dafef034784db2364556dd757d28d6994d3d8ac9cfd793"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x15, 0xa4, "c4f3714953af8d631d8facba6af672311a3be01f5a857444e8fe60442f40d8055207a21828ba707c794f3db0ff4564d5511881c615c6f7ad6ed5e994dc9eefb1fdae1806f1125b3354bd46102ef185b890c801f1242983c4d10690a8b1fdef7dabbcdab93fe227187f9ce76e4a702efc21780eea66b52f93582e80e7addf2ff6c47fed9ad9bfe7b37302070b59327fddc47426ea07f583614f98003f4cbe35ef7a58a042"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000380)=ANY=[@ANYBLOB="220600000000000000"], &(0x7f00000003c0)={0x20, 0x82, 0x2, "c50e"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "c7ab7d"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "9fe7"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "e877bb"}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x14, {0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:17 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xfdfdffff00000000}], 0x0, 0x0, 0x0}) [ 1648.445818][T20680] binder: 20678:20680 ioctl c00c620f 20000100 returned -22 [ 1648.482948][T20681] binder: 20679:20681 ioctl c0306201 20001480 returned -14 [ 1648.542686][T20681] binder_alloc: 20679: binder_alloc_buf size -144678142324244352 failed, no address space [ 1648.553416][T20681] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1648.842054][ T5037] usb 1-1: new high-speed USB device number 114 using dummy_hcd 07:37:18 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xccc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4e, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x14, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x40, 0xc, 0x2, 0x40, 0x64}, 0x14c, &(0x7f0000001200)={0x5, 0xf, 0x14c, 0x4, [@generic={0x8b, 0x10, 0x0, "950f3c902f46c73dc38859658004a291b4c9237286dc7af319fbc5e9d36f5601207e409acc38271b1a19c22a1d3d958b26f3e478b4d58212b5eb3a33f5dd472ba9a830c7d24cb6477e40b23cf06424a1fdafa7ba9e5dcf4c76fdb72fcfa5b694daa866d8683ef7a48a2985b2af4b7c37d499fc06e727aac05d8dd86b09e230dc6963e31dfd8ab460"}, @generic={0xa5, 0x10, 0xb, "81fff23919db6c301080d7b4bb4cc2c26056a1974ce0a42ac7a447f7b16e1acfe79e159d114b12ef2a057d689bf2e949811375f5f278b10b9132938f01525f4c83c59726a8c6c6c9b5736f01fb6ebdc65a39be7480bc93d6ae272d64dd48a7c24a1341a122d92155d3c768fe456145ea2be20102fce414c668656643012cc64ece818569f3d638d440808b65f4f0fe4e9cc3b7b2776a5ffbfddaa5f5702128707930"}, @ssp_cap={0xc, 0x10, 0xa, 0xc0, 0x0, 0x3f, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x31, 0xec, 0x1, 0x1, 0x9}]}, 0x7, [{0xca, &(0x7f0000000140)=@string={0xca, 0x3, "f0d3d2ac21edf679a73ffdfbff2ebcc98fede91ff4c47fe150c9b206e19e8aa6bfbc6e9537ade666b3d034c591fc054a4ad43df7c904fe4855d882f5982fd61b64a66667da62b4b62506ef487b89e60f918aba1b3e911c2ed4298b19726fa17b7e79b4aae28373ddfb9676123d1349b4eca2128af481fa7a5799b0a46433a3f216b74bae1fe870a23e413556f4e2da21ac563ca66aeeb157bf2cb1bf00d7efe51057439d3b87e89bb3c016f6e955957243c0d34c4d417cfa4135b3232f9006f7168051c39578bdd0"}}, {0x1d, &(0x7f0000000240)=ANY=[]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x642d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x102, &(0x7f0000000e80)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001140)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x21, {0x21, 0x23, "cac41cb6e04cbd0e75f35a5b767ca79ae62e949f7f91eb258a2fd8eff48d74"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f00000002c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "9b41cb96"}, @main=@item_4={0x3, 0x0, 0xb, "d061dbf9"}, @local=@item_4={0x3, 0x2, 0x5, "cd93c8ea"}, @local=@item_4={0x3, 0x2, 0x8, '}\rL\a'}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xa9, 0x1, {0x22, 0xc9c}}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001380)={0x20, 0xb, 0xa2, "c20a0eb438c82e2e20a6f4e9cce2ddaf6bdf237dd4adb8ca71a5343965f82aa6a819e5d9274af018e713cac866c913d477c240feb7ea5c051caa602f78cd38f4adfb073424ddf6ea179bece9392386feef52025a8e3bcdcc82cd5f2b5f1e7bd25ce99628a498a7ad7cf301c807f9e3c3635ed443a2626d38280c39329130bd3fd1700025f1db82fa27b0d339aaf8c72f48364ce138deec9d7f625b1fc0064a867cfa"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001440)={0x20, 0x1, 0xf2, "262103265c357871b7623b2615c9ff545fb0073709fe92f100d2f31bdc9b2a3319fec5b841b1c042b493737e0a3e22678f5349a138cb47fbf552827af160cd47ffe5d4c0708a43ab4e82dd41e6f62c64f513b39d64c5842227fb5702853d8dcac468ff7ed66039a85ef4562572c37ae79a267432ba65ddfe92af68bd92ca782f4839cdaefc99d0cd92da2cc58e4f9c832b78e3bf3e51b7952d38c479f2a2eb75893921fb199c91cc6c2950d8236d1863461afcab8b560d1982c94ba0dd9c0ee0f7fde745d05f37057cc969fe7f37c9887af7387ca97bcaab30cd9763b743e008bc09459a21f8c3a9a4e80d60121502aa6025"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x9}}) syz_usb_disconnect(r0) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0x10, 0xba, {0xba, 0x21, "8df0ed33cd3a29367d0d9c3793abd4151c1e439ce9091e40b579f6d98cfd893661eb449e4155da7b59fb5f87a9ac000100ac22c6b736082b19a9c0b7f89b5f84b62fc1f99d23971f21c4771dcae21b1652297f289e0b8b202c731c6bcd3ce45972cb0a5f4a7de016af75ab39019a75ab5355e24c5638814d69a9a12486fe86e9cf219f617de1c3915efec1ce45feb40ac62c92bc11e47b75d870444daff435a21c964f1e5dcdc0688943d627efa04a275e53e0b041d131e6"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000006c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x2a, 0x4, 0x6, 0xf000, 0x200, [0x30, 0x0, 0x1fe3fff, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x7, 0x40, 0x9, 0xd0}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2ec1ab3f992b377927983c43ded8604e"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x93, 0x2, 0x9, "4a5d87cf", "e9e831d6"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x87, 0x8, 0x33, 0x787, 0x40}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000800)={0x20, 0xa, 0x53, "7462a1c7213d3a8411ce72089011c76b8a8a6138f54d780f845aa7b19f0b9667e945e441f95f8d78c80982ef72eb7ab38aaabb0de25968590f31f43fa955ac079d2961ee0ce77ba1c54b01c14ddd849eb71ac6"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "85f1"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @random="21de1a2ee075"}, &(0x7f0000000ac0)={0x40, 0x17, 0x6}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "9b10"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x7}}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xea, {0x9, 0x21, 0x8000, 0x8, 0x1, {0x22, 0x42e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe0, 0x9, 0x53}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x201, 0x3, 0x35, 0x9, 0x8, 0x20}, 0x83, &(0x7f0000001640)={0x5, 0xf, 0x83, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xe3, 0x6, 0xb0d, 0x0, 0xac, [0x3f0f, 0x0, 0x0, 0xffc0f8, 0x207f, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x2f, 0x2, 0x9, 0xf000, 0x8000, [0xffff1e, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xe, 0x9b}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1bb87c9836c7d6856e81018aae1593b9"}, @ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0x100000, 0xf, 0x7f, [0xff0000, 0x30, 0xc0, 0xff3f30, 0x3f30, 0xc000]}]}, 0x7, [{0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x40d}}, {0xf3, &(0x7f0000001840)=@string={0xf3, 0x3, "dee067558c8993cf42eba4698c0e793c7b54360eb9eb107a40f54f3b113fc12343de5e623a5b4129d3adee86ef574438e9f2c58539e9cc023d4d544659c72a1e4e242a9797e622447b1a6c0c6f5f3ef7420488fba62cc5107b0d7493605cc29a1a7a06dc953c3a99c893247a2d9b4e4812772754129666b47b46f2f5ce0d13af6c8a5fb3dd8f6aee7589cd3fb44d99f5468123ff9857c5b981ece679d94dfb13879f13f011e40ef7b5f078889292ba8769e4cc3c7a8b6c9b1baea7b22cdbae65c1c3ebdc3908e108f8926d572eae0f2fd0eae4302bd3e487e60ba6d871f8f619d66672bc16af3fc9e559b47e819fd1bc57"}}, {0xf6, &(0x7f0000001940)=@string={0xf6, 0x3, "f7d1203ec5a3c9664fa5786a5b2b41eaf2950dabc690bebdd63717be2672371d1f95d31afee195d0938f60920c51463fa9239e7e0333b9b329229b68d4b0a6e6d26f3225362e1c728179a27d9bfd7ccd0bdb87cb2391b407fa29411ca5327d62deaf15b068fdffbb00aac596ed06302b18b0b21b1cfcbb90d9fbb9eb1ca24d1b14afc2e89ebe25e3ef3260b76e59f1c13582974d9aa60585e306f28e34be414515f1e66a35d5191f191dce6542740baa0f3208d7f3549f6cd33a877d1c7c0beb92235853a6471c44cea36fa6561dfcee90f887549846dd7a03611ce6c34d9af1cdc145e68d5a5b731535c480ef0bb51276ea9ebf"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001c00)={0x24, &(0x7f0000001ac0)={0x40, 0xf, 0x63, {0x63, 0x8, "5be089caf562f5ff9d9258a791d0c2bdfb2a20fd725165661f654111033393578135cd8c497915d6ee2f3e7fad1740f85b0fe565a4c28ac0bc0e72a0fe3ea55b83ceca3f1e4439a06b2d1ecb0dede7cf23bec5407b50a773ff9f072283fbbf07f5"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1661}}, &(0x7f0000001b80)={0x0, 0x22, 0x28, {[@main=@item_4={0x3, 0x0, 0xb, "5d3e8270"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x2, 0x1, 0xb, "00cc"}, @main=@item_4={0x3, 0x0, 0xa, "596c00d7"}, @global=@item_4={0x3, 0x1, 0x3, "1b377020"}, @local=@item_4={0x3, 0x2, 0x0, "0184f811"}, @main=@item_4={0x3, 0x0, 0xb, "9216b5e6"}, @global=@item_4={0x3, 0x1, 0x9, "8d15eb8d"}, @main=@item_4={0x3, 0x0, 0xa, "cc0ea80c"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000001bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4b, 0x1, {0x22, 0xbf7}}}}, &(0x7f0000001e40)={0x2c, &(0x7f0000001c40)={0x40, 0x9, 0xd2, "f7fb3771a88fd1ad02541b936d0aca9e0423b36aca8014754f352bf5335e663b091cd83221ea0ecd0805a4f1692def3725f43f1a23442991796623b7b1649c2da40d8fe3e7ab8945e49879f74ed8d964306a8bd0390e7eaa165d2d94ba18de9dc8c8f0e2eaa31c9d95cf336a133b6a40db12f4da230a371eed661247ef65af189064b89ef29630f6caa5b650f9c19eb51503e37656e8faf5f21dfa49362e34d77d0ad5fed6fc452422a84dd91f6833e8223bca1107188ff7e85970a3d21426f6e7138aaa9e0564eaf2ce233fbf6c6414ed93"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001dc0)={0x20, 0x1, 0xa, "a5cdeb28c6db71bebaaf"}, &(0x7f0000001e00)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x6d, {0x6d, 0x2, "35afef852f8652cc8241aecc21c0991ae1abfc2c87ecbf023c405ee2efb371f892a9533ef993945801dcf59236749b5f49f57bb4b8c9f515bdd545539c985fdfc946148a47e23067b6e478b72214260ed121b99377e1f5d787a17c579658fa3f46146b9c83f31a0028f6f8"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000480)={0x40, 0xd, 0x64, "33ea6529bec59e6a09667ec88c38d9ff09eb48eb941caa640049f80712b05903f4d7bd8942f967aeb0373d798a528d7568e82770da9ee240a911575f2fb4453ad6b2a2fa6107c13c95e8d0a020b19ca7e41ed61d78fe51ae31a16cc50cf4e0a56c9b044e"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x6, 0x5, 0x4, 0x5, 0xec, 0x3, 0x8, 0xffffff3a, 0x4, 0x9, 0xfff, 0x40}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x87, 0x2, 0x7000}, &(0x7f0000001040)={0x20, 0x89, 0x2, 0x1}}) 07:37:18 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_connect(0x0, 0xbca, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0x3f, 0xcb, 0x58, 0x40, 0x5032, 0xbc7, 0x82f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x40, 0x3f, 0xa0, 0x4, [{{0x9, 0x4, 0x4a, 0xfb, 0x5, 0xd5, 0x1c, 0xbc, 0x1f, [], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7f, 0x40, 0xf8, [@generic={0x24, 0x11, "77b27279edf98d48cc447d0ed49d14aad1b6a5b455a2eaab9c35804b86a3ee3031a4"}]}}, {{0x9, 0x5, 0x6b611da64b671185, 0x10, 0x200, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0x8, 0x20}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x6, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x20, 0x9, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xb533}, @generic={0xa5, 0x4, "5860e2122d60a5c525c4a497a6f12f0b388350dceb847503d26b45629c0b746259535d4c1fddf88f6f0937d9d15634abd0c2afda84279f28b3ab0dc5fdc7df84dfd25656c7a440b89e199a695f957041a9f71df33fd12dfe83c952987cf944e75f6587f922b20e40d52ec77facc52d37ac27db8b3a58f3b60bec724c0b0e8b64e2bc8244686c7a9f550bfa44675e24a6a34d9039afa8db0f83178124b63cc8210d19e8"}]}}]}}, {{0x9, 0x4, 0x99, 0x64, 0xf, 0x2f, 0x81, 0xd, 0x10, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "92a7a6dd"}, {0x5, 0x24, 0x0, 0xc5a5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5d, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x7f, 0x422, [0x157c, 0x6ee, 0x5, 0x8000]}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x3, "", "b408"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x20, 0x9, "", "641f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0x16, "", "def954"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1000, 0x43, "39d0381fb112"}]}], [{{0x9, 0x5, 0xd, 0x4, 0x400, 0x7, 0x81, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0xff, 0x7, [@generic={0x51, 0x22, "fe7878e7971d8bcdd4176522c8c3047b6df126d2069a28ccd68b67d0f722bb4819be012a83d0d1dc4bc4433d80420db025e82744e53a1b729a6e841d151c9baf28caff8b89a0bf23236e2e87849f82"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xf8, 0x9a, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x84, 0x8}, @generic={0x5, 0x31, "69e078"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x80, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x9}, @generic={0xaf, 0x6, "173ac4812e059428dcbef56f64f48093da09c5b38fb6c31ac8caf78c072b9b727419db96dbd002db15976fdcb737106e597f9d2f24603f98e6bdfa2ca030ebc3ade79852aaaed7464b9fed9f2703f841dbc164df941db16f38b795fbebf8e19ad3d561b66bd10b135f1684e8bc88e9fef2645672236aed261f9bcfe8f9be4fd8ff71af7aa8e5e446f3a9e3f4e9dc3c5bf3e50670e0e0ea899dae8315d9f7ece2df9a1d16e1ee082ad74280b5ce"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x20, 0x7f, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x20, 0x70, [@generic={0x57, 0x2a, "079a0b1bda79f84d81c23c824e4c290d43f945fd4c280a7f7c729d4c1033bdc16b06a62d50ccfabbd7e0eed212d2e83351932e937f92f8847074ed66226d5cb5f258a4912fc60f156cb818cf15fba290898f541a5f"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x4f, 0x2, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8d, 0x4}, @generic={0x19, 0x10, "849e173e69f309c700b0f9f381e66a3586b543458a929d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x7, 0xfe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x92, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3f, 0x40, 0xff}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x9, 0x1f, 0x7f}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x6, 0x1, 0x73, [@generic={0xe3, 0x21, "8031fae4eb5388fcf3f3a988ac1500726ba5bde19b3e78bf13cdb0d8b7a7f1b5fd42dda957fb0f97cc2797cee60115c180c0d13dcc5d53b1a72778e7e3aae4fe7a6c19e8fcb019ae3735d5161cfac7dbdbca1c8909bdcebdf70b7732b615d6991a98a0c36575c992233fcd7a84bf6969793f2062c08e8fcb2c14c4b456c1258b16f6d630904b9ff97db0bead8daced3803e00276b9cd809b7a5b237f053b1a4a761cc25582fe3b11f7b6103b0fc6555816c11813b9d9f76a7c8706120ccd9e7f0c1a4437ec0a5eabc182a829db337b8052891de443c00fc141b1e3f6ca6af4d129"}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x40, 0x2, 0xae, 0x40, [@generic={0x5a, 0xf, "6652d359b5873c5778b4f6b853d5b7f206f1acb77af6afff13f838e713efb3cea998ede018127d2174d528bde9821193af040b07aa0a3838d1a110aa4e08e7e2786713bd86b47672b11ed4e7bf3174d0391dfb32388d3a52"}, @generic={0xea, 0x1e, "d19c5be83de90fb40d149a845466f92eaab12e731723beb82448004b6b1bbd1ed08bada60a35b186f918919b202693bc53226adbdd8922a8eed9cc9ba93957cf7c1c0f29a824f5a0c23996ddee044e93965cc9927420017af6c0589b4125e7738f1491986e73476e6409226e7116924e939c3820b92d531257c0ae5c3b969e685a3252c1156816e56d1b1712b6bf1426d90d09f36457aef876873b5a216ee93fb3160ab34d4819745455d274f05932e49df21d70805c21e8cff500dc15bf0f27344991c5ab2aec6f8de22ef26bda083e79f24a77a488dc051c2424290c9d42b2708f8d6886292b71"}]}}]}}, {{0x9, 0x4, 0xe8, 0x2, 0xc, 0xe6, 0x93, 0x7a, 0x4, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x2, "b44640"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1f, 0x40, "5086a084"}, @as_header={0x7, 0x24, 0x1, 0x6}]}, @generic={0xde, 0x23, "685c67d54d1b84d2dd35b5bf1acbd1538435d76bb50c412409b6cb770003f1af8ed936bb810bf39550abe2e48f09c3e7085d7f69cca389a3638e79cfef6b26119aa5c7b81da57b6600f04021825b1c592676be7842bd4fb5408574b7e1cbddb9484b1b6320cc367d81ff85765de11c1dd4d92454a903843e76777d92ccf1d313473e07e99e6c60e8c6cbfe7c1859dee72f0fee979ef1e158bc30d8cdb745c13e94364ab48f7018c262e61d0d6583e90c04a8e969b27fe83e349889a6de7a7edce1ce726fe8ef7d761916a0035d1e79a02a5872ef1fb45eaec04eebf1"}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x5, 0x1f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x52c}]}}, {{0x9, 0x5, 0x1, 0x0, 0x50, 0x8, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xe46}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x4, 0x18, 0x20, 0x20, 0x0, 0x3f}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x81, 0x6, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0x2, 0x20, [@generic={0x70, 0x7, "4c41d3fe20a2d374ee1132a51f0b66389fde256965e613c863715252c1025b1c282bd837257c81afe5b5e8afb1b16ce9735df8a8c7c399e1de828cac4e141a2c3a0c6d9fc045683001949919e90f8030194dfc23cf132ca67922861a0e8b45f20eca453273f7d401d7a9a9f39b0a"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x9, 0x4d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc1, 0x4, 0x1f, [@generic={0x79, 0x21, "edf705feda3a4259e650d231b8812dd16c0ff263d9fe328e0cb84a4755b2dc9db507a670ba326df82b5ece7224e0ff9a9a0460b4e707d8e1b1b620acf56b371464bea6f2e1d2fb7e2cf6502b713ac6fc2aabf0944c0b93c203e84f4c162247dab6e68affd3e2ea7b28efd2543f503d311395995a0ae149"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x4, 0x7, 0xf3}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x1, 0x0, 0x20, [@generic={0xde, 0x23, "81bde2900655c48d0c58f049b920bffc053217b0e7c56ae9da2676f517350a41ded93c9ebab8f076e2f2d5f894c90b4f04dc63f3845cece8bf8fed1723fdece54ee3313b916733268daaafda0d4fa5df5b46cd178684eb4a6bfa3e846285f8bcd9b6e3fdfae6d0e03c2a1d20ea69efb3041a4f6726fc4eea0c0b0f69dcb267902234d9a383ecce319dcde1b8225f6d692d9fe3c0a4b4f496d15417f822d38acfb608b874246636bec4ba9f5e658b5e3d966bc8ea276c595493e4168c0d1982259b4a47f8d17a5eef6ed23af70ae4b92ee0768ace591afef31fef0ccb"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x1, 0x5, [@generic={0xd5, 0x0, "fd0f0371f472a8b0df89099032d5c8e823dd4452f9fe2e0cf6aa338fd0faac1936b2ea2153951f1b273017dfb8e6fef68a21beaf2dc7f9e8c8e3adc7babb1465cccd95a0b5f9f8786ea240b619c8c2dbc516b739b71a9b0b677783b201862c4e99d7c4c024bff7b286769745f978ab6cfe5cccd79ca4eeff9817c0e6fb9f464c194777828d8bb1aff5b1d21b2178f4883bb19d4fc852daf19a84afdac6369ca71bfa7b45be3c5f5765ee76200488342e152bb0e04219fd5d6a50c21c3d653575d1cc5db6bd0b0990a9eac1075eb547cc1e65ef"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}]}}, {{0x9, 0x4, 0xca, 0x4, 0x6, 0x8, 0x5, 0x0, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "499f983a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xa9b, 0x401, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x3f, 0x101, [0x7f, 0x0, 0xe39, 0x3, 0x9, 0xd]}, @acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x2, [0x3368, 0xffff, 0x20, 0x9, 0xfffd, 0x5]}]}, @uac_control={{0xa, 0x24, 0x1, 0x28c, 0x8}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x3, "d75a70b7"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0xe6, 0x5}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3f, 0x2, 0x4, [@generic={0x78, 0x8, "cba7509f70caeff54a3a7dce8a73846c5f87425cf898f69a12284aa88d17cb7c0ced4d0e49b73bb2bdc801924264059ea11ca9f29f224ae5828c8628e880f3d7464c0c0c6b73ac28f2dcea56e472fed8b12b99671e1779c241e393d4af5ea9706618c2f2dd54410b768308c07fe25c477409b7839e8c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xe6, 0x40, 0x4}}, {{0x9, 0x5, 0x7479b86b0112602b, 0x10, 0x10, 0x7, 0xc4, 0x69}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x70, 0x3f, 0x2, [@generic={0x92, 0x22, "d70fcc2b3a0947609c84c438576e97f3dfd847811b3bec1149409978ab0eed1868e557025cb61f3fca041077cf6e1f81c046b5c7080f0f0a585a10513453ace34d46a01bbba627b548a0d3edc5100c9d5c6dac18e91be43e8c1d402a3085312b82a3905e4535901a02e740b4e4c852e2a941a63d411e93319c34c6ccc930d26aedb735df3e5df713052358e10ee261b7"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x3, 0x4, 0x20, 0x5}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2c, 0x3c, 0x146}, @ss_container_id={0x14, 0x10, 0x4, 0x38, "9fb0bd261e9fd9c4f62e9ae9025976ab"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) (fail_nth: 2) 07:37:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xffffff7f00000000}], 0x0, 0x0, 0x0}) [ 1649.039473][T20686] binder: 20684:20686 ioctl c0306201 20001480 returned -14 [ 1649.046262][T20689] binder: 20685:20689 ioctl c00c620f 20000100 returned -22 [ 1649.092123][ T5037] usb 1-1: Using ep0 maxpacket: 32 [ 1649.099275][T20692] binder: 20688:20692 ioctl c0306201 20001480 returned -14 [ 1649.110913][T20686] FAULT_INJECTION: forcing a failure. [ 1649.110913][T20686] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.130242][T20686] CPU: 1 PID: 20686 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1649.140399][T20686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1649.150664][T20686] Call Trace: [ 1649.154098][T20686] [ 1649.157171][T20686] dump_stack_lvl+0x1bf/0x240 [ 1649.162118][T20686] dump_stack+0x1e/0x20 [ 1649.165558][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.166441][T20686] should_fail_ex+0x748/0x7f0 [ 1649.176296][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.179604][T20686] __should_failslab+0x188/0x1f0 07:37:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1649.192638][T20686] should_failslab+0x2d/0x70 [ 1649.197490][T20686] slab_pre_alloc_hook+0xa9/0xa40 [ 1649.202769][T20686] __kmem_cache_alloc_node+0xa6/0x8b0 [ 1649.208536][T20686] ? tomoyo_encode+0x5f8/0xa40 [ 1649.213566][T20686] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1649.219679][T20686] __kmalloc+0x121/0x3c0 [ 1649.224179][T20686] ? tomoyo_encode+0x5f8/0xa40 [ 1649.229193][T20686] tomoyo_encode+0x5f8/0xa40 [ 1649.234149][T20686] tomoyo_realpath_from_path+0x9d8/0xa90 [ 1649.240111][T20686] tomoyo_path_number_perm+0x1d9/0x8e0 [ 1649.245896][T20686] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1649.252033][T20686] tomoyo_file_ioctl+0x3f/0x50 [ 1649.257058][T20686] ? tomoyo_inode_getattr+0x40/0x40 [ 1649.262515][T20686] security_file_ioctl+0xa1/0x150 [ 1649.267784][T20686] __se_sys_ioctl+0xcc/0x400 [ 1649.272643][T20686] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1649.278802][T20686] __x64_sys_ioctl+0x96/0xe0 [ 1649.283639][T20686] do_syscall_64+0x41/0xc0 [ 1649.288295][T20686] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1649.294418][T20686] RIP: 0033:0x7f77b0a8c169 [ 1649.299010][T20686] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1649.318844][T20686] RSP: 002b:00007f77b180b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.327924][T20686] RAX: ffffffffffffffda RBX: 00007f77b0babf80 RCX: 00007f77b0a8c169 [ 1649.336168][T20686] RDX: 0000000020000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1649.344317][T20686] RBP: 00007f77b180b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1649.352461][T20686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1649.360601][T20686] R13: 00007f77b0ccfb1f R14: 00007f77b180b300 R15: 0000000000022000 [ 1649.368797][T20686] [ 1649.372928][T20686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1649.401056][T20692] binder_alloc: 20688: binder_alloc_buf size -554050781056 failed, no address space [ 1649.406518][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.411929][T20692] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1649.420154][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) (fail_nth: 3) [ 1649.503087][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.512926][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.521661][ T5037] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1649.534411][ T5037] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1649.543370][T11046] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1649.551357][ T5037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1649.560631][ T5037] usb 1-1: config 1 has no interface number 0 [ 1649.567007][ T5037] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1649.578203][ T5037] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1649.591472][ T5037] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 07:37:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xffffffff00000000}], 0x0, 0x0, 0x0}) [ 1649.595755][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.600806][ T5037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.610383][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.685820][T20697] binder: 20696:20697 ioctl c00c620f 20000100 returned -22 [ 1649.687776][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.703609][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.720122][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1649.727845][T11153] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1649.783699][T11046] usb 4-1: Using ep0 maxpacket: 8 07:37:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1649.895755][T20701] binder: 20700:20701 ioctl c0306201 20001480 returned -14 [ 1649.912313][T20701] binder_alloc: 20700: binder_alloc_buf size -4294967168 failed, no address space [ 1649.922156][T20701] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1649.939756][T20699] binder: 20698:20699 ioctl c0306201 20001480 returned -14 [ 1649.964335][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1649.979761][T20699] FAULT_INJECTION: forcing a failure. [ 1649.979761][T20699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.993967][T20699] CPU: 1 PID: 20699 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1650.003057][T11046] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.004029][T20699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1650.004102][T20699] Call Trace: [ 1650.004146][T20699] [ 1650.015279][T11046] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1650.025087][T20699] dump_stack_lvl+0x1bf/0x240 [ 1650.025257][T20699] dump_stack+0x1e/0x20 [ 1650.052227][T20699] should_fail_ex+0x748/0x7f0 [ 1650.057220][T20699] should_fail+0x2a/0x30 [ 1650.061736][T20699] should_fail_usercopy+0x2e/0x40 [ 1650.067002][T20699] _copy_from_user+0x33/0x160 [ 1650.071927][T20699] binder_ioctl_write_read+0x94/0x11770 [ 1650.077767][T20699] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1650.083858][T20699] ? binder_debug+0xc6/0x310 [ 1650.088723][T20699] ? filter_irq_stacks+0x60/0x1a0 [ 1650.094034][T20699] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1650.100749][T20699] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1650.106930][T20699] ? binder_debug+0x2a9/0x310 [ 1650.111897][T20699] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1650.118426][T20699] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1650.124527][T20699] ? _raw_spin_unlock+0x30/0x50 [ 1650.129615][T20699] ? binder_get_thread+0x2e6/0xbd0 [ 1650.135190][T20699] binder_ioctl+0x50f/0x33f0 [ 1650.140019][T20699] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1650.146116][T20699] ? do_vfs_ioctl+0x1211/0x3b10 [ 1650.151253][T20699] ? binder_poll+0x7f0/0x7f0 [ 1650.156082][T20699] ? binder_poll+0x7f0/0x7f0 [ 1650.160917][T20699] __se_sys_ioctl+0x222/0x400 [ 1650.165871][T20699] __x64_sys_ioctl+0x96/0xe0 [ 1650.170730][T20699] do_syscall_64+0x41/0xc0 [ 1650.175397][T20699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1650.181636][T20699] RIP: 0033:0x7f77b0a8c169 [ 1650.186250][T20699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1650.206206][T20699] RSP: 002b:00007f77b180b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.214944][T20699] RAX: ffffffffffffffda RBX: 00007f77b0babf80 RCX: 00007f77b0a8c169 [ 1650.223109][T20699] RDX: 0000000020000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1650.231262][T20699] RBP: 00007f77b180b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.239411][T20699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.247554][T20699] R13: 00007f77b0ccfb1f R14: 00007f77b180b300 R15: 0000000000022000 [ 1650.255733][T20699] [ 1650.263334][T20699] binder: 20698:20699 ioctl c0306201 20000100 returned -14 [ 1650.270855][T11153] usb 6-1: Using ep0 maxpacket: 32 [ 1650.306495][T20703] binder: 20702:20703 ioctl c00c620f 20000100 returned -22 [ 1650.412680][T11153] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1650.421261][T11153] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1650.430720][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1650.440084][T11153] usb 6-1: config 1 has no interface number 0 [ 1650.446534][T11153] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1650.453623][T11046] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.40 [ 1650.457648][T11153] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1650.466791][T11046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.479903][T11153] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1650.488153][T11046] usb 4-1: Product: 搭 [ 1650.497234][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.501468][T11046] usb 4-1: SerialNumber: ఄ [ 1650.611018][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1650.807216][T20691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.817055][T20691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.834001][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1651.007788][T16196] usb 1-1: USB disconnect, device number 114 [ 1651.023936][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:37:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}, 0xffffffffff600000}], 0x0, 0x0, 0x0}) 07:37:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:20 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)=ANY=[@ANYBLOB="050fa200026d1001bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a7642fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533af5fd9e519d0f5cd55e925fda20c248673010007a315728e7794c83f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5005400"/147]}) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x0, 0x3, 0x78, {0x78, 0x2, "83f2319148046b01053b4150c793e3bd367cbcb9b51e59dbba3a6b74a091a9cd3ca1b77b7969a87fc191b0651dd8c9487df94875285d078ac1173507f31d3ac8e95dc40274826003e367c9d63bc6fe8cf683b985ac2532ef476c533902bba2bfd5dd1c743852dbdcf45f8f2e378348ac1ab89cf792a9"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "2f1e2f132f2f630bd7e2f8c8845228624f077529537ce887a57ad21589cde2496a0054b765cf1daa30cbc8dca9f2aedf6329cf4187d0e2d2cff7bf7516dc7f02389884a3f92b4aa161a77d3255f15af428b81707aaa57632b0a0414aaadff3aca058390bdb0f75f1492786be1939ebbcfba6216fa4a5ca12980313fb72fa692c0ed761da3067e0ab79a2b092442626ab03ea1d626f83bdefef0f8a4ebdba155f3a8b6089baf9b257f4895bb8053e38142dfcf6e59416dbcede11cf9193b64bf8082dd1ae7526bae3ee3d05da0dd02ee27b9f968d5d3a7299eeb8e60ec195bf9f16dafef034784db2364556dd757d28d6994d3d8ac9cfd793"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x15, 0xa4, "c4f3714953af8d631d8facba6af672311a3be01f5a857444e8fe60442f40d8055207a21828ba707c794f3db0ff4564d5511881c615c6f7ad6ed5e994dc9eefb1fdae1806f1125b3354bd46102ef185b890c801f1242983c4d10690a8b1fdef7dabbcdab93fe227187f9ce76e4a702efc21780eea66b52f93582e80e7addf2ff6c47fed9ad9bfe7b37302070b59327fddc47426ea07f583614f98003f4cbe35ef7a58a042"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000380)=ANY=[@ANYBLOB="220600000000000000"], &(0x7f00000003c0)={0x20, 0x82, 0x2, "c50e"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "c7ab7d"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "9fe7"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "e877bb"}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x14, {0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1651.576683][T11046] usbhid 4-1:1.0: can't add hid device: -71 [ 1651.583798][T11046] usbhid: probe of 4-1:1.0 failed with error -71 [ 1651.617308][T20706] binder: 20704:20706 ioctl c00c620f 20000100 returned -22 [ 1651.638767][T11046] usb 4-1: USB disconnect, device number 81 [ 1651.643383][T20707] binder: 20705:20707 ioctl c0306201 20001480 returned -14 [ 1651.666907][T11153] usb 6-1: USB disconnect, device number 100 [ 1651.680654][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1651.738559][T20711] binder_alloc: 20705: binder_alloc_buf size -10485632 failed, no address space [ 1651.748524][T20711] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 07:37:21 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xccc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4e, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x14, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x40, 0xc, 0x2, 0x40, 0x64}, 0x14c, &(0x7f0000001200)={0x5, 0xf, 0x14c, 0x4, [@generic={0x8b, 0x10, 0x0, "950f3c902f46c73dc38859658004a291b4c9237286dc7af319fbc5e9d36f5601207e409acc38271b1a19c22a1d3d958b26f3e478b4d58212b5eb3a33f5dd472ba9a830c7d24cb6477e40b23cf06424a1fdafa7ba9e5dcf4c76fdb72fcfa5b694daa866d8683ef7a48a2985b2af4b7c37d499fc06e727aac05d8dd86b09e230dc6963e31dfd8ab460"}, @generic={0xa5, 0x10, 0xb, "81fff23919db6c301080d7b4bb4cc2c26056a1974ce0a42ac7a447f7b16e1acfe79e159d114b12ef2a057d689bf2e949811375f5f278b10b9132938f01525f4c83c59726a8c6c6c9b5736f01fb6ebdc65a39be7480bc93d6ae272d64dd48a7c24a1341a122d92155d3c768fe456145ea2be20102fce414c668656643012cc64ece818569f3d638d440808b65f4f0fe4e9cc3b7b2776a5ffbfddaa5f5702128707930"}, @ssp_cap={0xc, 0x10, 0xa, 0xc0, 0x0, 0x3f, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x31, 0xec, 0x1, 0x1, 0x9}]}, 0x7, [{0xca, &(0x7f0000000140)=@string={0xca, 0x3, "f0d3d2ac21edf679a73ffdfbff2ebcc98fede91ff4c47fe150c9b206e19e8aa6bfbc6e9537ade666b3d034c591fc054a4ad43df7c904fe4855d882f5982fd61b64a66667da62b4b62506ef487b89e60f918aba1b3e911c2ed4298b19726fa17b7e79b4aae28373ddfb9676123d1349b4eca2128af481fa7a5799b0a46433a3f216b74bae1fe870a23e413556f4e2da21ac563ca66aeeb157bf2cb1bf00d7efe51057439d3b87e89bb3c016f6e955957243c0d34c4d417cfa4135b3232f9006f7168051c39578bdd0"}}, {0x1d, &(0x7f0000000240)=ANY=[]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x642d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x102, &(0x7f0000000e80)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001140)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x21, {0x21, 0x23, "cac41cb6e04cbd0e75f35a5b767ca79ae62e949f7f91eb258a2fd8eff48d74"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f00000002c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "9b41cb96"}, @main=@item_4={0x3, 0x0, 0xb, "d061dbf9"}, @local=@item_4={0x3, 0x2, 0x5, "cd93c8ea"}, @local=@item_4={0x3, 0x2, 0x8, '}\rL\a'}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xa9, 0x1, {0x22, 0xc9c}}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001380)={0x20, 0xb, 0xa2, "c20a0eb438c82e2e20a6f4e9cce2ddaf6bdf237dd4adb8ca71a5343965f82aa6a819e5d9274af018e713cac866c913d477c240feb7ea5c051caa602f78cd38f4adfb073424ddf6ea179bece9392386feef52025a8e3bcdcc82cd5f2b5f1e7bd25ce99628a498a7ad7cf301c807f9e3c3635ed443a2626d38280c39329130bd3fd1700025f1db82fa27b0d339aaf8c72f48364ce138deec9d7f625b1fc0064a867cfa"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001440)={0x20, 0x1, 0xf2, "262103265c357871b7623b2615c9ff545fb0073709fe92f100d2f31bdc9b2a3319fec5b841b1c042b493737e0a3e22678f5349a138cb47fbf552827af160cd47ffe5d4c0708a43ab4e82dd41e6f62c64f513b39d64c5842227fb5702853d8dcac468ff7ed66039a85ef4562572c37ae79a267432ba65ddfe92af68bd92ca782f4839cdaefc99d0cd92da2cc58e4f9c832b78e3bf3e51b7952d38c479f2a2eb75893921fb199c91cc6c2950d8236d1863461afcab8b560d1982c94ba0dd9c0ee0f7fde745d05f37057cc969fe7f37c9887af7387ca97bcaab30cd9763b743e008bc09459a21f8c3a9a4e80d60121502aa6025"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x9}}) syz_usb_disconnect(r0) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0x10, 0xba, {0xba, 0x21, "8df0ed33cd3a29367d0d9c3793abd4151c1e439ce9091e40b579f6d98cfd893661eb449e4155da7b59fb5f87a9ac000100ac22c6b736082b19a9c0b7f89b5f84b62fc1f99d23971f21c4771dcae21b1652297f289e0b8b202c731c6bcd3ce45972cb0a5f4a7de016af75ab39019a75ab5355e24c5638814d69a9a12486fe86e9cf219f617de1c3915efec1ce45feb40ac62c92bc11e47b75d870444daff435a21c964f1e5dcdc0688943d627efa04a275e53e0b041d131e6"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000006c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x2a, 0x4, 0x6, 0xf000, 0x200, [0x30, 0x0, 0x1fe3fff, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x7, 0x40, 0x9, 0xd0}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2ec1ab3f992b377927983c43ded8604e"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x93, 0x2, 0x9, "4a5d87cf", "e9e831d6"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x87, 0x8, 0x33, 0x787, 0x40}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000800)={0x20, 0xa, 0x53, "7462a1c7213d3a8411ce72089011c76b8a8a6138f54d780f845aa7b19f0b9667e945e441f95f8d78c80982ef72eb7ab38aaabb0de25968590f31f43fa955ac079d2961ee0ce77ba1c54b01c14ddd849eb71ac6"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "85f1"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @random="21de1a2ee075"}, &(0x7f0000000ac0)={0x40, 0x17, 0x6}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "9b10"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x7}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xea, {0x9, 0x21, 0x8000, 0x8, 0x1, {0x22, 0x42e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe0, 0x9, 0x53}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x201, 0x3, 0x35, 0x9, 0x8, 0x20}, 0x83, &(0x7f0000001640)={0x5, 0xf, 0x83, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xe3, 0x6, 0xb0d, 0x0, 0xac, [0x3f0f, 0x0, 0x0, 0xffc0f8, 0x207f, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x2f, 0x2, 0x9, 0xf000, 0x8000, [0xffff1e, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xe, 0x9b}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1bb87c9836c7d6856e81018aae1593b9"}, @ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0x100000, 0xf, 0x7f, [0xff0000, 0x30, 0xc0, 0xff3f30, 0x3f30, 0xc000]}]}, 0x7, [{0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x40d}}, {0xf3, &(0x7f0000001840)=@string={0xf3, 0x3, "dee067558c8993cf42eba4698c0e793c7b54360eb9eb107a40f54f3b113fc12343de5e623a5b4129d3adee86ef574438e9f2c58539e9cc023d4d544659c72a1e4e242a9797e622447b1a6c0c6f5f3ef7420488fba62cc5107b0d7493605cc29a1a7a06dc953c3a99c893247a2d9b4e4812772754129666b47b46f2f5ce0d13af6c8a5fb3dd8f6aee7589cd3fb44d99f5468123ff9857c5b981ece679d94dfb13879f13f011e40ef7b5f078889292ba8769e4cc3c7a8b6c9b1baea7b22cdbae65c1c3ebdc3908e108f8926d572eae0f2fd0eae4302bd3e487e60ba6d871f8f619d66672bc16af3fc9e559b47e819fd1bc57"}}, {0xf6, &(0x7f0000001940)=@string={0xf6, 0x3, "f7d1203ec5a3c9664fa5786a5b2b41eaf2950dabc690bebdd63717be2672371d1f95d31afee195d0938f60920c51463fa9239e7e0333b9b329229b68d4b0a6e6d26f3225362e1c728179a27d9bfd7ccd0bdb87cb2391b407fa29411ca5327d62deaf15b068fdffbb00aac596ed06302b18b0b21b1cfcbb90d9fbb9eb1ca24d1b14afc2e89ebe25e3ef3260b76e59f1c13582974d9aa60585e306f28e34be414515f1e66a35d5191f191dce6542740baa0f3208d7f3549f6cd33a877d1c7c0beb92235853a6471c44cea36fa6561dfcee90f887549846dd7a03611ce6c34d9af1cdc145e68d5a5b731535c480ef0bb51276ea9ebf"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001c00)={0x24, &(0x7f0000001ac0)={0x40, 0xf, 0x63, {0x63, 0x8, "5be089caf562f5ff9d9258a791d0c2bdfb2a20fd725165661f654111033393578135cd8c497915d6ee2f3e7fad1740f85b0fe565a4c28ac0bc0e72a0fe3ea55b83ceca3f1e4439a06b2d1ecb0dede7cf23bec5407b50a773ff9f072283fbbf07f5"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1661}}, &(0x7f0000001b80)={0x0, 0x22, 0x28, {[@main=@item_4={0x3, 0x0, 0xb, "5d3e8270"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x2, 0x1, 0xb, "00cc"}, @main=@item_4={0x3, 0x0, 0xa, "596c00d7"}, @global=@item_4={0x3, 0x1, 0x3, "1b377020"}, @local=@item_4={0x3, 0x2, 0x0, "0184f811"}, @main=@item_4={0x3, 0x0, 0xb, "9216b5e6"}, @global=@item_4={0x3, 0x1, 0x9, "8d15eb8d"}, @main=@item_4={0x3, 0x0, 0xa, "cc0ea80c"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000001bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4b, 0x1, {0x22, 0xbf7}}}}, &(0x7f0000001e40)={0x2c, &(0x7f0000001c40)={0x40, 0x9, 0xd2, "f7fb3771a88fd1ad02541b936d0aca9e0423b36aca8014754f352bf5335e663b091cd83221ea0ecd0805a4f1692def3725f43f1a23442991796623b7b1649c2da40d8fe3e7ab8945e49879f74ed8d964306a8bd0390e7eaa165d2d94ba18de9dc8c8f0e2eaa31c9d95cf336a133b6a40db12f4da230a371eed661247ef65af189064b89ef29630f6caa5b650f9c19eb51503e37656e8faf5f21dfa49362e34d77d0ad5fed6fc452422a84dd91f6833e8223bca1107188ff7e85970a3d21426f6e7138aaa9e0564eaf2ce233fbf6c6414ed93"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001dc0)={0x20, 0x1, 0xa, "a5cdeb28c6db71bebaaf"}, &(0x7f0000001e00)={0x20, 0x3, 0x1, 0x9}}) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x6d, {0x6d, 0x2, "35afef852f8652cc8241aecc21c0991ae1abfc2c87ecbf023c405ee2efb371f892a9533ef993945801dcf59236749b5f49f57bb4b8c9f515bdd545539c985fdfc946148a47e23067b6e478b72214260ed121b99377e1f5d787a17c579658fa3f46146b9c83f31a0028f6f8"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000480)={0x40, 0xd, 0x64, "33ea6529bec59e6a09667ec88c38d9ff09eb48eb941caa640049f80712b05903f4d7bd8942f967aeb0373d798a528d7568e82770da9ee240a911575f2fb4453ad6b2a2fa6107c13c95e8d0a020b19ca7e41ed61d78fe51ae31a16cc50cf4e0a56c9b044e"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x6, 0x5, 0x4, 0x5, 0xec, 0x3, 0x8, 0xffffff3a, 0x4, 0x9, 0xfff, 0x40}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x87, 0x2, 0x7000}, &(0x7f0000001040)={0x20, 0x89, 0x2, 0x1}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xccc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4e, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x14, 0x8}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x40, 0xc, 0x2, 0x40, 0x64}, 0x14c, &(0x7f0000001200)={0x5, 0xf, 0x14c, 0x4, [@generic={0x8b, 0x10, 0x0, "950f3c902f46c73dc38859658004a291b4c9237286dc7af319fbc5e9d36f5601207e409acc38271b1a19c22a1d3d958b26f3e478b4d58212b5eb3a33f5dd472ba9a830c7d24cb6477e40b23cf06424a1fdafa7ba9e5dcf4c76fdb72fcfa5b694daa866d8683ef7a48a2985b2af4b7c37d499fc06e727aac05d8dd86b09e230dc6963e31dfd8ab460"}, @generic={0xa5, 0x10, 0xb, "81fff23919db6c301080d7b4bb4cc2c26056a1974ce0a42ac7a447f7b16e1acfe79e159d114b12ef2a057d689bf2e949811375f5f278b10b9132938f01525f4c83c59726a8c6c6c9b5736f01fb6ebdc65a39be7480bc93d6ae272d64dd48a7c24a1341a122d92155d3c768fe456145ea2be20102fce414c668656643012cc64ece818569f3d638d440808b65f4f0fe4e9cc3b7b2776a5ffbfddaa5f5702128707930"}, @ssp_cap={0xc, 0x10, 0xa, 0xc0, 0x0, 0x3f, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x31, 0xec, 0x1, 0x1, 0x9}]}, 0x7, [{0xca, &(0x7f0000000140)=@string={0xca, 0x3, "f0d3d2ac21edf679a73ffdfbff2ebcc98fede91ff4c47fe150c9b206e19e8aa6bfbc6e9537ade666b3d034c591fc054a4ad43df7c904fe4855d882f5982fd61b64a66667da62b4b62506ef487b89e60f918aba1b3e911c2ed4298b19726fa17b7e79b4aae28373ddfb9676123d1349b4eca2128af481fa7a5799b0a46433a3f216b74bae1fe870a23e413556f4e2da21ac563ca66aeeb157bf2cb1bf00d7efe51057439d3b87e89bb3c016f6e955957243c0d34c4d417cfa4135b3232f9006f7168051c39578bdd0"}}, {0x1d, &(0x7f0000000240)=ANY=[]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x642d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x102, &(0x7f0000000e80)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x436}}]}) (async) syz_usb_control_io$hid(r1, &(0x7f0000001140)={0x24, &(0x7f0000000100)={0x20, 0x21, 0x21, {0x21, 0x23, "cac41cb6e04cbd0e75f35a5b767ca79ae62e949f7f91eb258a2fd8eff48d74"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f00000002c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x0, "9b41cb96"}, @main=@item_4={0x3, 0x0, 0xb, "d061dbf9"}, @local=@item_4={0x3, 0x2, 0x5, "cd93c8ea"}, @local=@item_4={0x3, 0x2, 0x8, '}\rL\a'}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xa9, 0x1, {0x22, 0xc9c}}}}, &(0x7f0000001580)={0x2c, &(0x7f0000001380)={0x20, 0xb, 0xa2, "c20a0eb438c82e2e20a6f4e9cce2ddaf6bdf237dd4adb8ca71a5343965f82aa6a819e5d9274af018e713cac866c913d477c240feb7ea5c051caa602f78cd38f4adfb073424ddf6ea179bece9392386feef52025a8e3bcdcc82cd5f2b5f1e7bd25ce99628a498a7ad7cf301c807f9e3c3635ed443a2626d38280c39329130bd3fd1700025f1db82fa27b0d339aaf8c72f48364ce138deec9d7f625b1fc0064a867cfa"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001440)={0x20, 0x1, 0xf2, "262103265c357871b7623b2615c9ff545fb0073709fe92f100d2f31bdc9b2a3319fec5b841b1c042b493737e0a3e22678f5349a138cb47fbf552827af160cd47ffe5d4c0708a43ab4e82dd41e6f62c64f513b39d64c5842227fb5702853d8dcac468ff7ed66039a85ef4562572c37ae79a267432ba65ddfe92af68bd92ca782f4839cdaefc99d0cd92da2cc58e4f9c832b78e3bf3e51b7952d38c479f2a2eb75893921fb199c91cc6c2950d8236d1863461afcab8b560d1982c94ba0dd9c0ee0f7fde745d05f37057cc969fe7f37c9887af7387ca97bcaab30cd9763b743e008bc09459a21f8c3a9a4e80d60121502aa6025"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_disconnect(r0) (async) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0x10, 0xba, {0xba, 0x21, "8df0ed33cd3a29367d0d9c3793abd4151c1e439ce9091e40b579f6d98cfd893661eb449e4155da7b59fb5f87a9ac000100ac22c6b736082b19a9c0b7f89b5f84b62fc1f99d23971f21c4771dcae21b1652297f289e0b8b202c731c6bcd3ce45972cb0a5f4a7de016af75ab39019a75ab5355e24c5638814d69a9a12486fe86e9cf219f617de1c3915efec1ce45feb40ac62c92bc11e47b75d870444daff435a21c964f1e5dcdc0688943d627efa04a275e53e0b041d131e6"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f00000006c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x2a, 0x4, 0x6, 0xf000, 0x200, [0x30, 0x0, 0x1fe3fff, 0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x7, 0x40, 0x9, 0xd0}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2ec1ab3f992b377927983c43ded8604e"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x93, 0x2, 0x9, "4a5d87cf", "e9e831d6"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x87, 0x8, 0x33, 0x787, 0x40}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000800)={0x20, 0xa, 0x53, "7462a1c7213d3a8411ce72089011c76b8a8a6138f54d780f845aa7b19f0b9667e945e441f95f8d78c80982ef72eb7ab38aaabb0de25968590f31f43fa955ac079d2961ee0ce77ba1c54b01c14ddd849eb71ac6"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "85f1"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @random="21de1a2ee075"}, &(0x7f0000000ac0)={0x40, 0x17, 0x6}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "9b10"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x47, 0x3c, 0xa9, 0x8, 0x525, 0xa4a3, 0xb2d9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x8e, 0x12}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xea, {0x9, 0x21, 0x8000, 0x8, 0x1, {0x22, 0x42e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe0, 0x9, 0x53}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x5}}]}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x201, 0x3, 0x35, 0x9, 0x8, 0x20}, 0x83, &(0x7f0000001640)={0x5, 0xf, 0x83, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xe3, 0x6, 0xb0d, 0x0, 0xac, [0x3f0f, 0x0, 0x0, 0xffc0f8, 0x207f, 0xc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x2f, 0x2, 0x9, 0xf000, 0x8000, [0xffff1e, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xe, 0x9b}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1bb87c9836c7d6856e81018aae1593b9"}, @ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0x100000, 0xf, 0x7f, [0xff0000, 0x30, 0xc0, 0xff3f30, 0x3f30, 0xc000]}]}, 0x7, [{0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x40d}}, {0xf3, &(0x7f0000001840)=@string={0xf3, 0x3, "dee067558c8993cf42eba4698c0e793c7b54360eb9eb107a40f54f3b113fc12343de5e623a5b4129d3adee86ef574438e9f2c58539e9cc023d4d544659c72a1e4e242a9797e622447b1a6c0c6f5f3ef7420488fba62cc5107b0d7493605cc29a1a7a06dc953c3a99c893247a2d9b4e4812772754129666b47b46f2f5ce0d13af6c8a5fb3dd8f6aee7589cd3fb44d99f5468123ff9857c5b981ece679d94dfb13879f13f011e40ef7b5f078889292ba8769e4cc3c7a8b6c9b1baea7b22cdbae65c1c3ebdc3908e108f8926d572eae0f2fd0eae4302bd3e487e60ba6d871f8f619d66672bc16af3fc9e559b47e819fd1bc57"}}, {0xf6, &(0x7f0000001940)=@string={0xf6, 0x3, "f7d1203ec5a3c9664fa5786a5b2b41eaf2950dabc690bebdd63717be2672371d1f95d31afee195d0938f60920c51463fa9239e7e0333b9b329229b68d4b0a6e6d26f3225362e1c728179a27d9bfd7ccd0bdb87cb2391b407fa29411ca5327d62deaf15b068fdffbb00aac596ed06302b18b0b21b1cfcbb90d9fbb9eb1ca24d1b14afc2e89ebe25e3ef3260b76e59f1c13582974d9aa60585e306f28e34be414515f1e66a35d5191f191dce6542740baa0f3208d7f3549f6cd33a877d1c7c0beb92235853a6471c44cea36fa6561dfcee90f887549846dd7a03611ce6c34d9af1cdc145e68d5a5b731535c480ef0bb51276ea9ebf"}}]}) (async) syz_usb_control_io$hid(r3, &(0x7f0000001c00)={0x24, &(0x7f0000001ac0)={0x40, 0xf, 0x63, {0x63, 0x8, "5be089caf562f5ff9d9258a791d0c2bdfb2a20fd725165661f654111033393578135cd8c497915d6ee2f3e7fad1740f85b0fe565a4c28ac0bc0e72a0fe3ea55b83ceca3f1e4439a06b2d1ecb0dede7cf23bec5407b50a773ff9f072283fbbf07f5"}}, &(0x7f0000001b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1661}}, &(0x7f0000001b80)={0x0, 0x22, 0x28, {[@main=@item_4={0x3, 0x0, 0xb, "5d3e8270"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x2, 0x1, 0xb, "00cc"}, @main=@item_4={0x3, 0x0, 0xa, "596c00d7"}, @global=@item_4={0x3, 0x1, 0x3, "1b377020"}, @local=@item_4={0x3, 0x2, 0x0, "0184f811"}, @main=@item_4={0x3, 0x0, 0xb, "9216b5e6"}, @global=@item_4={0x3, 0x1, 0x9, "8d15eb8d"}, @main=@item_4={0x3, 0x0, 0xa, "cc0ea80c"}, @local=@item_012={0x0, 0x2, 0xa}]}}, &(0x7f0000001bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4b, 0x1, {0x22, 0xbf7}}}}, &(0x7f0000001e40)={0x2c, &(0x7f0000001c40)={0x40, 0x9, 0xd2, "f7fb3771a88fd1ad02541b936d0aca9e0423b36aca8014754f352bf5335e663b091cd83221ea0ecd0805a4f1692def3725f43f1a23442991796623b7b1649c2da40d8fe3e7ab8945e49879f74ed8d964306a8bd0390e7eaa165d2d94ba18de9dc8c8f0e2eaa31c9d95cf336a133b6a40db12f4da230a371eed661247ef65af189064b89ef29630f6caa5b650f9c19eb51503e37656e8faf5f21dfa49362e34d77d0ad5fed6fc452422a84dd91f6833e8223bca1107188ff7e85970a3d21426f6e7138aaa9e0564eaf2ce233fbf6c6414ed93"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001dc0)={0x20, 0x1, 0xa, "a5cdeb28c6db71bebaaf"}, &(0x7f0000001e00)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_disconnect(r2) (async) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x22, 0x6d, {0x6d, 0x2, "35afef852f8652cc8241aecc21c0991ae1abfc2c87ecbf023c405ee2efb371f892a9533ef993945801dcf59236749b5f49f57bb4b8c9f515bdd545539c985fdfc946148a47e23067b6e478b72214260ed121b99377e1f5d787a17c579658fa3f46146b9c83f31a0028f6f8"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000480)={0x40, 0xd, 0x64, "33ea6529bec59e6a09667ec88c38d9ff09eb48eb941caa640049f80712b05903f4d7bd8942f967aeb0373d798a528d7568e82770da9ee240a911575f2fb4453ad6b2a2fa6107c13c95e8d0a020b19ca7e41ed61d78fe51ae31a16cc50cf4e0a56c9b044e"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x6, 0x5, 0x4, 0x5, 0xec, 0x3, 0x8, 0xffffff3a, 0x4, 0x9, 0xfff, 0x40}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x87, 0x2, 0x7000}, &(0x7f0000001040)={0x20, 0x89, 0x2, 0x1}}) (async) [ 1652.003784][T16196] usb 1-1: new high-speed USB device number 115 using dummy_hcd 07:37:21 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (rerun: 32) syz_usb_connect(0x0, 0xbca, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0x3f, 0xcb, 0x58, 0x40, 0x5032, 0xbc7, 0x82f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x40, 0x3f, 0xa0, 0x4, [{{0x9, 0x4, 0x4a, 0xfb, 0x5, 0xd5, 0x1c, 0xbc, 0x1f, [], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7f, 0x40, 0xf8, [@generic={0x24, 0x11, "77b27279edf98d48cc447d0ed49d14aad1b6a5b455a2eaab9c35804b86a3ee3031a4"}]}}, {{0x9, 0x5, 0x6b611da64b671185, 0x10, 0x200, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0x8, 0x20}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x6, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x20, 0x9, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xb533}, @generic={0xa5, 0x4, "5860e2122d60a5c525c4a497a6f12f0b388350dceb847503d26b45629c0b746259535d4c1fddf88f6f0937d9d15634abd0c2afda84279f28b3ab0dc5fdc7df84dfd25656c7a440b89e199a695f957041a9f71df33fd12dfe83c952987cf944e75f6587f922b20e40d52ec77facc52d37ac27db8b3a58f3b60bec724c0b0e8b64e2bc8244686c7a9f550bfa44675e24a6a34d9039afa8db0f83178124b63cc8210d19e8"}]}}]}}, {{0x9, 0x4, 0x99, 0x64, 0xf, 0x2f, 0x81, 0xd, 0x10, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "92a7a6dd"}, {0x5, 0x24, 0x0, 0xc5a5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5d, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x7f, 0x422, [0x157c, 0x6ee, 0x5, 0x8000]}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x3, "", "b408"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x20, 0x9, "", "641f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0x16, "", "def954"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1000, 0x43, "39d0381fb112"}]}], [{{0x9, 0x5, 0xd, 0x4, 0x400, 0x7, 0x81, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0xff, 0x7, [@generic={0x51, 0x22, "fe7878e7971d8bcdd4176522c8c3047b6df126d2069a28ccd68b67d0f722bb4819be012a83d0d1dc4bc4433d80420db025e82744e53a1b729a6e841d151c9baf28caff8b89a0bf23236e2e87849f82"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xf8, 0x9a, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x84, 0x8}, @generic={0x5, 0x31, "69e078"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x80, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x9}, @generic={0xaf, 0x6, "173ac4812e059428dcbef56f64f48093da09c5b38fb6c31ac8caf78c072b9b727419db96dbd002db15976fdcb737106e597f9d2f24603f98e6bdfa2ca030ebc3ade79852aaaed7464b9fed9f2703f841dbc164df941db16f38b795fbebf8e19ad3d561b66bd10b135f1684e8bc88e9fef2645672236aed261f9bcfe8f9be4fd8ff71af7aa8e5e446f3a9e3f4e9dc3c5bf3e50670e0e0ea899dae8315d9f7ece2df9a1d16e1ee082ad74280b5ce"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x20, 0x7f, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x20, 0x70, [@generic={0x57, 0x2a, "079a0b1bda79f84d81c23c824e4c290d43f945fd4c280a7f7c729d4c1033bdc16b06a62d50ccfabbd7e0eed212d2e83351932e937f92f8847074ed66226d5cb5f258a4912fc60f156cb818cf15fba290898f541a5f"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x4f, 0x2, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8d, 0x4}, @generic={0x19, 0x10, "849e173e69f309c700b0f9f381e66a3586b543458a929d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x7, 0xfe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x92, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3f, 0x40, 0xff}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x9, 0x1f, 0x7f}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x6, 0x1, 0x73, [@generic={0xe3, 0x21, "8031fae4eb5388fcf3f3a988ac1500726ba5bde19b3e78bf13cdb0d8b7a7f1b5fd42dda957fb0f97cc2797cee60115c180c0d13dcc5d53b1a72778e7e3aae4fe7a6c19e8fcb019ae3735d5161cfac7dbdbca1c8909bdcebdf70b7732b615d6991a98a0c36575c992233fcd7a84bf6969793f2062c08e8fcb2c14c4b456c1258b16f6d630904b9ff97db0bead8daced3803e00276b9cd809b7a5b237f053b1a4a761cc25582fe3b11f7b6103b0fc6555816c11813b9d9f76a7c8706120ccd9e7f0c1a4437ec0a5eabc182a829db337b8052891de443c00fc141b1e3f6ca6af4d129"}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x40, 0x2, 0xae, 0x40, [@generic={0x5a, 0xf, "6652d359b5873c5778b4f6b853d5b7f206f1acb77af6afff13f838e713efb3cea998ede018127d2174d528bde9821193af040b07aa0a3838d1a110aa4e08e7e2786713bd86b47672b11ed4e7bf3174d0391dfb32388d3a52"}, @generic={0xea, 0x1e, "d19c5be83de90fb40d149a845466f92eaab12e731723beb82448004b6b1bbd1ed08bada60a35b186f918919b202693bc53226adbdd8922a8eed9cc9ba93957cf7c1c0f29a824f5a0c23996ddee044e93965cc9927420017af6c0589b4125e7738f1491986e73476e6409226e7116924e939c3820b92d531257c0ae5c3b969e685a3252c1156816e56d1b1712b6bf1426d90d09f36457aef876873b5a216ee93fb3160ab34d4819745455d274f05932e49df21d70805c21e8cff500dc15bf0f27344991c5ab2aec6f8de22ef26bda083e79f24a77a488dc051c2424290c9d42b2708f8d6886292b71"}]}}]}}, {{0x9, 0x4, 0xe8, 0x2, 0xc, 0xe6, 0x93, 0x7a, 0x4, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x2, "b44640"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1f, 0x40, "5086a084"}, @as_header={0x7, 0x24, 0x1, 0x6}]}, @generic={0xde, 0x23, "685c67d54d1b84d2dd35b5bf1acbd1538435d76bb50c412409b6cb770003f1af8ed936bb810bf39550abe2e48f09c3e7085d7f69cca389a3638e79cfef6b26119aa5c7b81da57b6600f04021825b1c592676be7842bd4fb5408574b7e1cbddb9484b1b6320cc367d81ff85765de11c1dd4d92454a903843e76777d92ccf1d313473e07e99e6c60e8c6cbfe7c1859dee72f0fee979ef1e158bc30d8cdb745c13e94364ab48f7018c262e61d0d6583e90c04a8e969b27fe83e349889a6de7a7edce1ce726fe8ef7d761916a0035d1e79a02a5872ef1fb45eaec04eebf1"}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x5, 0x1f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x52c}]}}, {{0x9, 0x5, 0x1, 0x0, 0x50, 0x8, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xe46}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x4, 0x18, 0x20, 0x20, 0x0, 0x3f}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x81, 0x6, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0x2, 0x20, [@generic={0x70, 0x7, "4c41d3fe20a2d374ee1132a51f0b66389fde256965e613c863715252c1025b1c282bd837257c81afe5b5e8afb1b16ce9735df8a8c7c399e1de828cac4e141a2c3a0c6d9fc045683001949919e90f8030194dfc23cf132ca67922861a0e8b45f20eca453273f7d401d7a9a9f39b0a"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x9, 0x4d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc1, 0x4, 0x1f, [@generic={0x79, 0x21, "edf705feda3a4259e650d231b8812dd16c0ff263d9fe328e0cb84a4755b2dc9db507a670ba326df82b5ece7224e0ff9a9a0460b4e707d8e1b1b620acf56b371464bea6f2e1d2fb7e2cf6502b713ac6fc2aabf0944c0b93c203e84f4c162247dab6e68affd3e2ea7b28efd2543f503d311395995a0ae149"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x4, 0x7, 0xf3}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x1, 0x0, 0x20, [@generic={0xde, 0x23, "81bde2900655c48d0c58f049b920bffc053217b0e7c56ae9da2676f517350a41ded93c9ebab8f076e2f2d5f894c90b4f04dc63f3845cece8bf8fed1723fdece54ee3313b916733268daaafda0d4fa5df5b46cd178684eb4a6bfa3e846285f8bcd9b6e3fdfae6d0e03c2a1d20ea69efb3041a4f6726fc4eea0c0b0f69dcb267902234d9a383ecce319dcde1b8225f6d692d9fe3c0a4b4f496d15417f822d38acfb608b874246636bec4ba9f5e658b5e3d966bc8ea276c595493e4168c0d1982259b4a47f8d17a5eef6ed23af70ae4b92ee0768ace591afef31fef0ccb"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x1, 0x5, [@generic={0xd5, 0x0, "fd0f0371f472a8b0df89099032d5c8e823dd4452f9fe2e0cf6aa338fd0faac1936b2ea2153951f1b273017dfb8e6fef68a21beaf2dc7f9e8c8e3adc7babb1465cccd95a0b5f9f8786ea240b619c8c2dbc516b739b71a9b0b677783b201862c4e99d7c4c024bff7b286769745f978ab6cfe5cccd79ca4eeff9817c0e6fb9f464c194777828d8bb1aff5b1d21b2178f4883bb19d4fc852daf19a84afdac6369ca71bfa7b45be3c5f5765ee76200488342e152bb0e04219fd5d6a50c21c3d653575d1cc5db6bd0b0990a9eac1075eb547cc1e65ef"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}]}}, {{0x9, 0x4, 0xca, 0x4, 0x6, 0x8, 0x5, 0x0, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "499f983a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xa9b, 0x401, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x3f, 0x101, [0x7f, 0x0, 0xe39, 0x3, 0x9, 0xd]}, @acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x2, [0x3368, 0xffff, 0x20, 0x9, 0xfffd, 0x5]}]}, @uac_control={{0xa, 0x24, 0x1, 0x28c, 0x8}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x3, "d75a70b7"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0xe6, 0x5}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3f, 0x2, 0x4, [@generic={0x78, 0x8, "cba7509f70caeff54a3a7dce8a73846c5f87425cf898f69a12284aa88d17cb7c0ced4d0e49b73bb2bdc801924264059ea11ca9f29f224ae5828c8628e880f3d7464c0c0c6b73ac28f2dcea56e472fed8b12b99671e1779c241e393d4af5ea9706618c2f2dd54410b768308c07fe25c477409b7839e8c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xe6, 0x40, 0x4}}, {{0x9, 0x5, 0x7479b86b0112602b, 0x10, 0x10, 0x7, 0xc4, 0x69}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x70, 0x3f, 0x2, [@generic={0x92, 0x22, "d70fcc2b3a0947609c84c438576e97f3dfd847811b3bec1149409978ab0eed1868e557025cb61f3fca041077cf6e1f81c046b5c7080f0f0a585a10513453ace34d46a01bbba627b548a0d3edc5100c9d5c6dac18e91be43e8c1d402a3085312b82a3905e4535901a02e740b4e4c852e2a941a63d411e93319c34c6ccc930d26aedb735df3e5df713052358e10ee261b7"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x3, 0x4, 0x20, 0x5}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2c, 0x3c, 0x146}, @ss_container_id={0x14, 0x10, 0x4, 0x38, "9fb0bd261e9fd9c4f62e9ae9025976ab"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (rerun: 64) 07:37:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) (fail_nth: 4) 07:37:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x2, 0x0, 0x0}) [ 1652.252177][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1652.287786][T20717] binder: 20715:20717 ioctl c0306201 20001480 returned -14 [ 1652.295970][T20721] binder: 20718:20721 ioctl c00c620f 20000100 returned -22 [ 1652.322175][T11153] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1652.340433][T20719] binder: 20716:20719 ioctl c0306201 20001480 returned -14 [ 1652.361136][T20723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.371213][T20723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1652.395745][T20719] binder: 20716:20719 ioctl c0306201 20000100 returned -14 [ 1652.407204][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1652.416117][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1652.425668][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1652.434971][T16196] usb 1-1: config 1 has no interface number 0 [ 1652.441524][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1652.452817][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1652.466145][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1652.475532][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.488947][T20717] FAULT_INJECTION: forcing a failure. [ 1652.488947][T20717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.506565][T20717] CPU: 1 PID: 20717 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1652.516740][T20717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1652.527113][T20717] Call Trace: [ 1652.530542][T20717] [ 1652.533626][T20717] dump_stack_lvl+0x1bf/0x240 [ 1652.538580][T20717] dump_stack+0x1e/0x20 [ 1652.542990][T20717] should_fail_ex+0x748/0x7f0 [ 1652.547965][T20717] should_fail+0x2a/0x30 [ 1652.552476][T20717] should_fail_usercopy+0x2e/0x40 [ 1652.557752][T20717] _copy_from_user+0x33/0x160 [ 1652.562686][T20717] binder_ioctl_write_read+0x13f3/0x11770 [ 1652.568700][T20717] ? binder_debug+0xc6/0x310 [ 1652.573659][T20717] ? filter_irq_stacks+0x60/0x1a0 [ 1652.578946][T20717] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1652.586100][T20717] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1652.592668][T20717] binder_ioctl+0x50f/0x33f0 [ 1652.597505][T20717] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1652.603616][T20717] ? do_vfs_ioctl+0x1211/0x3b10 [ 1652.608737][T20717] ? binder_poll+0x7f0/0x7f0 [ 1652.613553][T20717] ? binder_poll+0x7f0/0x7f0 [ 1652.618365][T20717] __se_sys_ioctl+0x222/0x400 [ 1652.623298][T20717] __x64_sys_ioctl+0x96/0xe0 [ 1652.628127][T20717] do_syscall_64+0x41/0xc0 [ 1652.632770][T20717] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1652.638887][T20717] RIP: 0033:0x7f77b0a8c169 [ 1652.643565][T20717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1652.663746][T20717] RSP: 002b:00007f77b180b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.672404][T20717] RAX: ffffffffffffffda RBX: 00007f77b0babf80 RCX: 00007f77b0a8c169 [ 1652.680585][T20717] RDX: 0000000020000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1652.688751][T20717] RBP: 00007f77b180b1d0 R08: 0000000000000000 R09: 0000000000000000 07:37:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x3, 0x0, 0x0}) [ 1652.696908][T20717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.705056][T20717] R13: 00007f77b0ccfb1f R14: 00007f77b180b300 R15: 0000000000022000 [ 1652.713255][T20717] [ 1652.717023][T20717] binder: 20715:20717 ioctl c0306201 20000100 returned -14 [ 1652.737047][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1652.804879][T11153] usb 4-1: Using ep0 maxpacket: 32 [ 1652.812816][T11046] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1652.869135][T20728] binder: 20725:20728 ioctl c00c620f 20000100 returned -22 [ 1652.917161][T20727] binder: 20726:20727 ioctl c0306201 20001480 returned -14 [ 1652.942817][T11153] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1652.951545][T11153] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1652.960541][T11153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.962550][T16196] snd_usb_pod 1-1:1.1: set_interface failed [ 1652.970938][T11153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1652.976986][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1652.985907][T11153] usb 4-1: config 1 has no interface number 0 [ 1652.986070][T11153] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 07:37:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1652.994335][T16196] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 1652.999458][T11153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.048754][T20727] binder: 20726:20727 ioctl c0306201 20000100 returned -14 [ 1653.062631][T11046] usb 6-1: Using ep0 maxpacket: 32 07:37:22 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) (fail_nth: 5) [ 1653.156696][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1653.183687][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1653.192659][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 07:37:22 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x4, 0x0, 0x0}) [ 1653.201581][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1653.214887][T11046] usb 6-1: config 1 has no interface number 0 [ 1653.221384][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1653.233130][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1653.246442][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1653.255829][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.329732][T16196] usb 1-1: USB disconnect, device number 115 [ 1653.347612][T20714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.357739][T20714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.369260][T20731] binder: 20729:20731 ioctl c00c620f 20000100 returned -22 [ 1653.400658][T20732] binder: 20730:20732 ioctl c0306201 20001480 returned -14 [ 1653.443539][T20732] FAULT_INJECTION: forcing a failure. [ 1653.443539][T20732] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.456521][T20732] CPU: 0 PID: 20732 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1653.466669][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1653.469020][T11153] snd_usb_pod 4-1:1.1: set_interface failed [ 1653.477279][T20732] Call Trace: [ 1653.477324][T20732] [ 1653.477366][T20732] dump_stack_lvl+0x1bf/0x240 [ 1653.483527][T11153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1653.486616][T20732] dump_stack+0x1e/0x20 [ 1653.490614][T11153] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1653.494364][T20732] should_fail_ex+0x748/0x7f0 [ 1653.494548][T20732] __should_failslab+0x188/0x1f0 [ 1653.523178][T20732] should_failslab+0x2d/0x70 [ 1653.528041][T20732] slab_pre_alloc_hook+0xa9/0xa40 [ 1653.533336][T20732] __kmem_cache_alloc_node+0xa6/0x8b0 07:37:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xec710000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1653.538964][T20732] ? binder_transaction+0x2c6e/0xa7b0 [ 1653.544639][T20732] kmalloc_trace+0x51/0x200 [ 1653.549388][T20732] ? binder_transaction+0x2c6e/0xa7b0 [ 1653.555042][T20732] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1653.561146][T20732] binder_transaction+0x2c6e/0xa7b0 [ 1653.566643][T20732] ? binder_debug+0xc6/0x310 [ 1653.571503][T20732] ? binder_debug+0xc6/0x310 [ 1653.576364][T20732] ? filter_irq_stacks+0x60/0x1a0 [ 1653.581682][T20732] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1653.588230][T20732] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1653.594346][T20732] ? binder_ioctl_write_read+0x13ca/0x11770 [ 1653.597536][T20735] binder: 20733:20735 ioctl c0306201 20001480 returned -14 [ 1653.600490][T20732] binder_ioctl_write_read+0x14fa/0x11770 [ 1653.613814][T20732] ? binder_debug+0xc6/0x310 [ 1653.618694][T20732] ? filter_irq_stacks+0x60/0x1a0 [ 1653.624001][T20732] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1653.630561][T20732] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1653.637101][T20732] binder_ioctl+0x50f/0x33f0 [ 1653.641918][T20732] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1653.647983][T20732] ? do_vfs_ioctl+0x1211/0x3b10 [ 1653.653088][T20732] ? binder_poll+0x7f0/0x7f0 [ 1653.657894][T20732] ? binder_poll+0x7f0/0x7f0 [ 1653.662693][T20732] __se_sys_ioctl+0x222/0x400 [ 1653.667616][T20732] __x64_sys_ioctl+0x96/0xe0 [ 1653.672451][T20732] do_syscall_64+0x41/0xc0 [ 1653.677090][T20732] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1653.683220][T20732] RIP: 0033:0x7f77b0a8c169 [ 1653.687808][T20732] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1653.707689][T20732] RSP: 002b:00007f77b180b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.716332][T20732] RAX: ffffffffffffffda RBX: 00007f77b0babf80 RCX: 00007f77b0a8c169 [ 1653.724494][T20732] RDX: 0000000020000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1653.732668][T20732] RBP: 00007f77b180b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.740833][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.748986][T20732] R13: 00007f77b0ccfb1f R14: 00007f77b180b300 R15: 0000000000022000 [ 1653.757173][T20732] [ 1653.797108][T20734] binder: 20733:20734 ioctl c0306201 20000100 returned -14 [ 1653.821592][T11153] usb 4-1: USB disconnect, device number 82 07:37:22 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)=ANY=[@ANYBLOB="050fa200026d1001bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a7642fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533af5fd9e519d0f5cd55e925fda20c248673010007a315728e7794c83f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5005400"/147]}) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x0, 0x3, 0x78, {0x78, 0x2, "83f2319148046b01053b4150c793e3bd367cbcb9b51e59dbba3a6b74a091a9cd3ca1b77b7969a87fc191b0651dd8c9487df94875285d078ac1173507f31d3ac8e95dc40274826003e367c9d63bc6fe8cf683b985ac2532ef476c533902bba2bfd5dd1c743852dbdcf45f8f2e378348ac1ab89cf792a9"}}, &(0x7f00000000c0)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "2f1e2f132f2f630bd7e2f8c8845228624f077529537ce887a57ad21589cde2496a0054b765cf1daa30cbc8dca9f2aedf6329cf4187d0e2d2cff7bf7516dc7f02389884a3f92b4aa161a77d3255f15af428b81707aaa57632b0a0414aaadff3aca058390bdb0f75f1492786be1939ebbcfba6216fa4a5ca12980313fb72fa692c0ed761da3067e0ab79a2b092442626ab03ea1d626f83bdefef0f8a4ebdba155f3a8b6089baf9b257f4895bb8053e38142dfcf6e59416dbcede11cf9193b64bf8082dd1ae7526bae3ee3d05da0dd02ee27b9f968d5d3a7299eeb8e60ec195bf9f16dafef034784db2364556dd757d28d6994d3d8ac9cfd793"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x15, 0xa4, "c4f3714953af8d631d8facba6af672311a3be01f5a857444e8fe60442f40d8055207a21828ba707c794f3db0ff4564d5511881c615c6f7ad6ed5e994dc9eefb1fdae1806f1125b3354bd46102ef185b890c801f1242983c4d10690a8b1fdef7dabbcdab93fe227187f9ce76e4a702efc21780eea66b52f93582e80e7addf2ff6c47fed9ad9bfe7b37302070b59327fddc47426ea07f583614f98003f4cbe35ef7a58a042"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000380)=ANY=[@ANYBLOB="220600000000000000"], &(0x7f00000003c0)={0x20, 0x82, 0x2, "c50e"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "c7ab7d"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "9fe7"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "e877bb"}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x14, {0x5, 0xf, 0x14, 0x2, [@ssp_cap={0xc}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1653.971376][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1653.978185][T20737] binder: 20736:20737 ioctl c00c620f 20000100 returned -22 [ 1654.166943][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.177340][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.199266][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.208888][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.222092][T11153] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1654.239021][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.249557][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.271475][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.281514][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.312834][T11046] snd_usb_pod 6-1:1.1: set_interface failed [ 1654.319198][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1654.328031][T11046] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 1654.372464][T11046] usb 6-1: USB disconnect, device number 101 [ 1654.385968][T16361] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1654.462167][T11153] usb 4-1: Using ep0 maxpacket: 8 [ 1654.612658][T11153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=b2.d9 [ 1654.622151][T11153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.653991][T11153] usb 4-1: config 0 descriptor?? [ 1654.659698][T16361] usb 1-1: Using ep0 maxpacket: 32 [ 1654.697687][T11153] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 1654.704483][T11153] usbtest: probe of 4-1:0.0 failed with error -22 [ 1654.812341][T16361] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1654.820950][T16361] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1654.829937][T16361] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1654.839192][T16361] usb 1-1: config 1 has no interface number 0 [ 1654.845663][T16361] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1654.860808][T16361] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1654.874776][T16361] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1654.884142][T16361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.907170][T20714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1654.917136][T20714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1654.935526][T11046] usb 4-1: USB disconnect, device number 83 [ 1655.030496][T16361] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1655.155061][T20743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.184393][T20743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:24 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0x11, 0x79, {0x79, 0x23, "8be4ebb00dc63d96493acf2436ab46d551d9c887542a69d6eda11a6dc53c05dc29c70558b0925cc2b88ddc875c5544bf7db66e03f2d8e7481b9e8b294ab90cd403852ddcdc36a02ee3ec276161271199146a541269f7c1924bdb147c4aab0c96792640b6b765e4c745908e6551ed4ae87ee2cf82fdd893"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000140)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "14a1f5083e23e2ca7e60a787e431824a"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x9, 0xf, 0x4, [0x7f80c0, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf00f, 0x6, [0x0]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0xff, 0x40, "68f03fed", "2dc3e863"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x3, 0xab, 0xff, 0x100, 0x3b}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x8d, "18475e45b39d4ec8b06c0be5107e43b679eee0ab81aa944b6fba1e975483aad8263898a65c4a167d18171d94c08e4ca23042873353068f9b518005e5789b44bc6d655bdafc8e7640abb44516b68a788c8b72b26aa861d9e6f68d8c017c112d15c60526b7429c74fdf82ba95c0de7dbecabba604a4aa482c6517ea68a85047c80d9cea4ca2d562058f348c89354"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x1e}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "980f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "8702"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) 07:37:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x5, 0x0, 0x0}) 07:37:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) (fail_nth: 6) 07:37:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xfdffffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:24 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_connect(0x0, 0xbca, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0x3f, 0xcb, 0x58, 0x40, 0x5032, 0xbc7, 0x82f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x40, 0x3f, 0xa0, 0x4, [{{0x9, 0x4, 0x4a, 0xfb, 0x5, 0xd5, 0x1c, 0xbc, 0x1f, [], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7f, 0x40, 0xf8, [@generic={0x24, 0x11, "77b27279edf98d48cc447d0ed49d14aad1b6a5b455a2eaab9c35804b86a3ee3031a4"}]}}, {{0x9, 0x5, 0x6b611da64b671185, 0x10, 0x200, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0x8, 0x20}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x6, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x20, 0x9, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xb533}, @generic={0xa5, 0x4, "5860e2122d60a5c525c4a497a6f12f0b388350dceb847503d26b45629c0b746259535d4c1fddf88f6f0937d9d15634abd0c2afda84279f28b3ab0dc5fdc7df84dfd25656c7a440b89e199a695f957041a9f71df33fd12dfe83c952987cf944e75f6587f922b20e40d52ec77facc52d37ac27db8b3a58f3b60bec724c0b0e8b64e2bc8244686c7a9f550bfa44675e24a6a34d9039afa8db0f83178124b63cc8210d19e8"}]}}]}}, {{0x9, 0x4, 0x99, 0x64, 0xf, 0x2f, 0x81, 0xd, 0x10, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "92a7a6dd"}, {0x5, 0x24, 0x0, 0xc5a5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5d, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x7f, 0x422, [0x157c, 0x6ee, 0x5, 0x8000]}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x3, "", "b408"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x20, 0x9, "", "641f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0x16, "", "def954"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1000, 0x43, "39d0381fb112"}]}], [{{0x9, 0x5, 0xd, 0x4, 0x400, 0x7, 0x81, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0xff, 0x7, [@generic={0x51, 0x22, "fe7878e7971d8bcdd4176522c8c3047b6df126d2069a28ccd68b67d0f722bb4819be012a83d0d1dc4bc4433d80420db025e82744e53a1b729a6e841d151c9baf28caff8b89a0bf23236e2e87849f82"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xf8, 0x9a, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x84, 0x8}, @generic={0x5, 0x31, "69e078"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x80, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x9}, @generic={0xaf, 0x6, "173ac4812e059428dcbef56f64f48093da09c5b38fb6c31ac8caf78c072b9b727419db96dbd002db15976fdcb737106e597f9d2f24603f98e6bdfa2ca030ebc3ade79852aaaed7464b9fed9f2703f841dbc164df941db16f38b795fbebf8e19ad3d561b66bd10b135f1684e8bc88e9fef2645672236aed261f9bcfe8f9be4fd8ff71af7aa8e5e446f3a9e3f4e9dc3c5bf3e50670e0e0ea899dae8315d9f7ece2df9a1d16e1ee082ad74280b5ce"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x20, 0x7f, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x20, 0x70, [@generic={0x57, 0x2a, "079a0b1bda79f84d81c23c824e4c290d43f945fd4c280a7f7c729d4c1033bdc16b06a62d50ccfabbd7e0eed212d2e83351932e937f92f8847074ed66226d5cb5f258a4912fc60f156cb818cf15fba290898f541a5f"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x4f, 0x2, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8d, 0x4}, @generic={0x19, 0x10, "849e173e69f309c700b0f9f381e66a3586b543458a929d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x7, 0xfe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x92, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3f, 0x40, 0xff}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x9, 0x1f, 0x7f}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x6, 0x1, 0x73, [@generic={0xe3, 0x21, "8031fae4eb5388fcf3f3a988ac1500726ba5bde19b3e78bf13cdb0d8b7a7f1b5fd42dda957fb0f97cc2797cee60115c180c0d13dcc5d53b1a72778e7e3aae4fe7a6c19e8fcb019ae3735d5161cfac7dbdbca1c8909bdcebdf70b7732b615d6991a98a0c36575c992233fcd7a84bf6969793f2062c08e8fcb2c14c4b456c1258b16f6d630904b9ff97db0bead8daced3803e00276b9cd809b7a5b237f053b1a4a761cc25582fe3b11f7b6103b0fc6555816c11813b9d9f76a7c8706120ccd9e7f0c1a4437ec0a5eabc182a829db337b8052891de443c00fc141b1e3f6ca6af4d129"}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x40, 0x2, 0xae, 0x40, [@generic={0x5a, 0xf, "6652d359b5873c5778b4f6b853d5b7f206f1acb77af6afff13f838e713efb3cea998ede018127d2174d528bde9821193af040b07aa0a3838d1a110aa4e08e7e2786713bd86b47672b11ed4e7bf3174d0391dfb32388d3a52"}, @generic={0xea, 0x1e, "d19c5be83de90fb40d149a845466f92eaab12e731723beb82448004b6b1bbd1ed08bada60a35b186f918919b202693bc53226adbdd8922a8eed9cc9ba93957cf7c1c0f29a824f5a0c23996ddee044e93965cc9927420017af6c0589b4125e7738f1491986e73476e6409226e7116924e939c3820b92d531257c0ae5c3b969e685a3252c1156816e56d1b1712b6bf1426d90d09f36457aef876873b5a216ee93fb3160ab34d4819745455d274f05932e49df21d70805c21e8cff500dc15bf0f27344991c5ab2aec6f8de22ef26bda083e79f24a77a488dc051c2424290c9d42b2708f8d6886292b71"}]}}]}}, {{0x9, 0x4, 0xe8, 0x2, 0xc, 0xe6, 0x93, 0x7a, 0x4, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x2, "b44640"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1f, 0x40, "5086a084"}, @as_header={0x7, 0x24, 0x1, 0x6}]}, @generic={0xde, 0x23, "685c67d54d1b84d2dd35b5bf1acbd1538435d76bb50c412409b6cb770003f1af8ed936bb810bf39550abe2e48f09c3e7085d7f69cca389a3638e79cfef6b26119aa5c7b81da57b6600f04021825b1c592676be7842bd4fb5408574b7e1cbddb9484b1b6320cc367d81ff85765de11c1dd4d92454a903843e76777d92ccf1d313473e07e99e6c60e8c6cbfe7c1859dee72f0fee979ef1e158bc30d8cdb745c13e94364ab48f7018c262e61d0d6583e90c04a8e969b27fe83e349889a6de7a7edce1ce726fe8ef7d761916a0035d1e79a02a5872ef1fb45eaec04eebf1"}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x5, 0x1f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x52c}]}}, {{0x9, 0x5, 0x1, 0x0, 0x50, 0x8, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xe46}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x4, 0x18, 0x20, 0x20, 0x0, 0x3f}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x81, 0x6, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0x2, 0x20, [@generic={0x70, 0x7, "4c41d3fe20a2d374ee1132a51f0b66389fde256965e613c863715252c1025b1c282bd837257c81afe5b5e8afb1b16ce9735df8a8c7c399e1de828cac4e141a2c3a0c6d9fc045683001949919e90f8030194dfc23cf132ca67922861a0e8b45f20eca453273f7d401d7a9a9f39b0a"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x9, 0x4d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc1, 0x4, 0x1f, [@generic={0x79, 0x21, "edf705feda3a4259e650d231b8812dd16c0ff263d9fe328e0cb84a4755b2dc9db507a670ba326df82b5ece7224e0ff9a9a0460b4e707d8e1b1b620acf56b371464bea6f2e1d2fb7e2cf6502b713ac6fc2aabf0944c0b93c203e84f4c162247dab6e68affd3e2ea7b28efd2543f503d311395995a0ae149"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x4, 0x7, 0xf3}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x1, 0x0, 0x20, [@generic={0xde, 0x23, "81bde2900655c48d0c58f049b920bffc053217b0e7c56ae9da2676f517350a41ded93c9ebab8f076e2f2d5f894c90b4f04dc63f3845cece8bf8fed1723fdece54ee3313b916733268daaafda0d4fa5df5b46cd178684eb4a6bfa3e846285f8bcd9b6e3fdfae6d0e03c2a1d20ea69efb3041a4f6726fc4eea0c0b0f69dcb267902234d9a383ecce319dcde1b8225f6d692d9fe3c0a4b4f496d15417f822d38acfb608b874246636bec4ba9f5e658b5e3d966bc8ea276c595493e4168c0d1982259b4a47f8d17a5eef6ed23af70ae4b92ee0768ace591afef31fef0ccb"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x1, 0x5, [@generic={0xd5, 0x0, "fd0f0371f472a8b0df89099032d5c8e823dd4452f9fe2e0cf6aa338fd0faac1936b2ea2153951f1b273017dfb8e6fef68a21beaf2dc7f9e8c8e3adc7babb1465cccd95a0b5f9f8786ea240b619c8c2dbc516b739b71a9b0b677783b201862c4e99d7c4c024bff7b286769745f978ab6cfe5cccd79ca4eeff9817c0e6fb9f464c194777828d8bb1aff5b1d21b2178f4883bb19d4fc852daf19a84afdac6369ca71bfa7b45be3c5f5765ee76200488342e152bb0e04219fd5d6a50c21c3d653575d1cc5db6bd0b0990a9eac1075eb547cc1e65ef"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}]}}, {{0x9, 0x4, 0xca, 0x4, 0x6, 0x8, 0x5, 0x0, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "499f983a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xa9b, 0x401, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x3f, 0x101, [0x7f, 0x0, 0xe39, 0x3, 0x9, 0xd]}, @acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x2, [0x3368, 0xffff, 0x20, 0x9, 0xfffd, 0x5]}]}, @uac_control={{0xa, 0x24, 0x1, 0x28c, 0x8}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x3, "d75a70b7"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0xe6, 0x5}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3f, 0x2, 0x4, [@generic={0x78, 0x8, "cba7509f70caeff54a3a7dce8a73846c5f87425cf898f69a12284aa88d17cb7c0ced4d0e49b73bb2bdc801924264059ea11ca9f29f224ae5828c8628e880f3d7464c0c0c6b73ac28f2dcea56e472fed8b12b99671e1779c241e393d4af5ea9706618c2f2dd54410b768308c07fe25c477409b7839e8c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xe6, 0x40, 0x4}}, {{0x9, 0x5, 0x7479b86b0112602b, 0x10, 0x10, 0x7, 0xc4, 0x69}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x70, 0x3f, 0x2, [@generic={0x92, 0x22, "d70fcc2b3a0947609c84c438576e97f3dfd847811b3bec1149409978ab0eed1868e557025cb61f3fca041077cf6e1f81c046b5c7080f0f0a585a10513453ace34d46a01bbba627b548a0d3edc5100c9d5c6dac18e91be43e8c1d402a3085312b82a3905e4535901a02e740b4e4c852e2a941a63d411e93319c34c6ccc930d26aedb735df3e5df713052358e10ee261b7"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x3, 0x4, 0x20, 0x5}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2c, 0x3c, 0x146}, @ss_container_id={0x14, 0x10, 0x4, 0x38, "9fb0bd261e9fd9c4f62e9ae9025976ab"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_connect(0x0, 0xbca, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0x3f, 0xcb, 0x58, 0x40, 0x5032, 0xbc7, 0x82f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x40, 0x3f, 0xa0, 0x4, [{{0x9, 0x4, 0x4a, 0xfb, 0x5, 0xd5, 0x1c, 0xbc, 0x1f, [], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7f, 0x40, 0xf8, [@generic={0x24, 0x11, "77b27279edf98d48cc447d0ed49d14aad1b6a5b455a2eaab9c35804b86a3ee3031a4"}]}}, {{0x9, 0x5, 0x6b611da64b671185, 0x10, 0x200, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x3, 0x8, 0x20}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x6, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x20, 0x9, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xb533}, @generic={0xa5, 0x4, "5860e2122d60a5c525c4a497a6f12f0b388350dceb847503d26b45629c0b746259535d4c1fddf88f6f0937d9d15634abd0c2afda84279f28b3ab0dc5fdc7df84dfd25656c7a440b89e199a695f957041a9f71df33fd12dfe83c952987cf944e75f6587f922b20e40d52ec77facc52d37ac27db8b3a58f3b60bec724c0b0e8b64e2bc8244686c7a9f550bfa44675e24a6a34d9039afa8db0f83178124b63cc8210d19e8"}]}}]}}, {{0x9, 0x4, 0x99, 0x64, 0xf, 0x2f, 0x81, 0xd, 0x10, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "92a7a6dd"}, {0x5, 0x24, 0x0, 0xc5a5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5d, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x7f, 0x422, [0x157c, 0x6ee, 0x5, 0x8000]}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x3, "", "b408"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x20, 0x9, "", "641f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0x16, "", "def954"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1000, 0x43, "39d0381fb112"}]}], [{{0x9, 0x5, 0xd, 0x4, 0x400, 0x7, 0x81, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0xff, 0x7, [@generic={0x51, 0x22, "fe7878e7971d8bcdd4176522c8c3047b6df126d2069a28ccd68b67d0f722bb4819be012a83d0d1dc4bc4433d80420db025e82744e53a1b729a6e841d151c9baf28caff8b89a0bf23236e2e87849f82"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xf8, 0x9a, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x84, 0x8}, @generic={0x5, 0x31, "69e078"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x80, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x9}, @generic={0xaf, 0x6, "173ac4812e059428dcbef56f64f48093da09c5b38fb6c31ac8caf78c072b9b727419db96dbd002db15976fdcb737106e597f9d2f24603f98e6bdfa2ca030ebc3ade79852aaaed7464b9fed9f2703f841dbc164df941db16f38b795fbebf8e19ad3d561b66bd10b135f1684e8bc88e9fef2645672236aed261f9bcfe8f9be4fd8ff71af7aa8e5e446f3a9e3f4e9dc3c5bf3e50670e0e0ea899dae8315d9f7ece2df9a1d16e1ee082ad74280b5ce"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x20, 0x7f, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x20, 0x70, [@generic={0x57, 0x2a, "079a0b1bda79f84d81c23c824e4c290d43f945fd4c280a7f7c729d4c1033bdc16b06a62d50ccfabbd7e0eed212d2e83351932e937f92f8847074ed66226d5cb5f258a4912fc60f156cb818cf15fba290898f541a5f"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x4f, 0x2, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8d, 0x4}, @generic={0x19, 0x10, "849e173e69f309c700b0f9f381e66a3586b543458a929d"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x7, 0xfe}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x92, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3f, 0x40, 0xff}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x9, 0x1f, 0x7f}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x6, 0x1, 0x73, [@generic={0xe3, 0x21, "8031fae4eb5388fcf3f3a988ac1500726ba5bde19b3e78bf13cdb0d8b7a7f1b5fd42dda957fb0f97cc2797cee60115c180c0d13dcc5d53b1a72778e7e3aae4fe7a6c19e8fcb019ae3735d5161cfac7dbdbca1c8909bdcebdf70b7732b615d6991a98a0c36575c992233fcd7a84bf6969793f2062c08e8fcb2c14c4b456c1258b16f6d630904b9ff97db0bead8daced3803e00276b9cd809b7a5b237f053b1a4a761cc25582fe3b11f7b6103b0fc6555816c11813b9d9f76a7c8706120ccd9e7f0c1a4437ec0a5eabc182a829db337b8052891de443c00fc141b1e3f6ca6af4d129"}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x40, 0x2, 0xae, 0x40, [@generic={0x5a, 0xf, "6652d359b5873c5778b4f6b853d5b7f206f1acb77af6afff13f838e713efb3cea998ede018127d2174d528bde9821193af040b07aa0a3838d1a110aa4e08e7e2786713bd86b47672b11ed4e7bf3174d0391dfb32388d3a52"}, @generic={0xea, 0x1e, "d19c5be83de90fb40d149a845466f92eaab12e731723beb82448004b6b1bbd1ed08bada60a35b186f918919b202693bc53226adbdd8922a8eed9cc9ba93957cf7c1c0f29a824f5a0c23996ddee044e93965cc9927420017af6c0589b4125e7738f1491986e73476e6409226e7116924e939c3820b92d531257c0ae5c3b969e685a3252c1156816e56d1b1712b6bf1426d90d09f36457aef876873b5a216ee93fb3160ab34d4819745455d274f05932e49df21d70805c21e8cff500dc15bf0f27344991c5ab2aec6f8de22ef26bda083e79f24a77a488dc051c2424290c9d42b2708f8d6886292b71"}]}}]}}, {{0x9, 0x4, 0xe8, 0x2, 0xc, 0xe6, 0x93, 0x7a, 0x4, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x2, "b44640"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x2, 0x1f, 0x40, "5086a084"}, @as_header={0x7, 0x24, 0x1, 0x6}]}, @generic={0xde, 0x23, "685c67d54d1b84d2dd35b5bf1acbd1538435d76bb50c412409b6cb770003f1af8ed936bb810bf39550abe2e48f09c3e7085d7f69cca389a3638e79cfef6b26119aa5c7b81da57b6600f04021825b1c592676be7842bd4fb5408574b7e1cbddb9484b1b6320cc367d81ff85765de11c1dd4d92454a903843e76777d92ccf1d313473e07e99e6c60e8c6cbfe7c1859dee72f0fee979ef1e158bc30d8cdb745c13e94364ab48f7018c262e61d0d6583e90c04a8e969b27fe83e349889a6de7a7edce1ce726fe8ef7d761916a0035d1e79a02a5872ef1fb45eaec04eebf1"}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x5, 0x1f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x52c}]}}, {{0x9, 0x5, 0x1, 0x0, 0x50, 0x8, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xe46}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x4, 0x18, 0x20, 0x20, 0x0, 0x3f}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x81, 0x6, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3f, 0x2, 0x20, [@generic={0x70, 0x7, "4c41d3fe20a2d374ee1132a51f0b66389fde256965e613c863715252c1025b1c282bd837257c81afe5b5e8afb1b16ce9735df8a8c7c399e1de828cac4e141a2c3a0c6d9fc045683001949919e90f8030194dfc23cf132ca67922861a0e8b45f20eca453273f7d401d7a9a9f39b0a"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x9, 0x4d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc1, 0x4, 0x1f, [@generic={0x79, 0x21, "edf705feda3a4259e650d231b8812dd16c0ff263d9fe328e0cb84a4755b2dc9db507a670ba326df82b5ece7224e0ff9a9a0460b4e707d8e1b1b620acf56b371464bea6f2e1d2fb7e2cf6502b713ac6fc2aabf0944c0b93c203e84f4c162247dab6e68affd3e2ea7b28efd2543f503d311395995a0ae149"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x4, 0x7, 0xf3}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x1, 0x0, 0x20, [@generic={0xde, 0x23, "81bde2900655c48d0c58f049b920bffc053217b0e7c56ae9da2676f517350a41ded93c9ebab8f076e2f2d5f894c90b4f04dc63f3845cece8bf8fed1723fdece54ee3313b916733268daaafda0d4fa5df5b46cd178684eb4a6bfa3e846285f8bcd9b6e3fdfae6d0e03c2a1d20ea69efb3041a4f6726fc4eea0c0b0f69dcb267902234d9a383ecce319dcde1b8225f6d692d9fe3c0a4b4f496d15417f822d38acfb608b874246636bec4ba9f5e658b5e3d966bc8ea276c595493e4168c0d1982259b4a47f8d17a5eef6ed23af70ae4b92ee0768ace591afef31fef0ccb"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x1, 0x5, [@generic={0xd5, 0x0, "fd0f0371f472a8b0df89099032d5c8e823dd4452f9fe2e0cf6aa338fd0faac1936b2ea2153951f1b273017dfb8e6fef68a21beaf2dc7f9e8c8e3adc7babb1465cccd95a0b5f9f8786ea240b619c8c2dbc516b739b71a9b0b677783b201862c4e99d7c4c024bff7b286769745f978ab6cfe5cccd79ca4eeff9817c0e6fb9f464c194777828d8bb1aff5b1d21b2178f4883bb19d4fc852daf19a84afdac6369ca71bfa7b45be3c5f5765ee76200488342e152bb0e04219fd5d6a50c21c3d653575d1cc5db6bd0b0990a9eac1075eb547cc1e65ef"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}]}}, {{0x9, 0x4, 0xca, 0x4, 0x6, 0x8, 0x5, 0x0, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "499f983a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xa9b, 0x401, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x3f, 0x101, [0x7f, 0x0, 0xe39, 0x3, 0x9, 0xd]}, @acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x2, [0x3368, 0xffff, 0x20, 0x9, 0xfffd, 0x5]}]}, @uac_control={{0xa, 0x24, 0x1, 0x28c, 0x8}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x3, "d75a70b7"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0xe6, 0x5}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0xff, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3f, 0x2, 0x4, [@generic={0x78, 0x8, "cba7509f70caeff54a3a7dce8a73846c5f87425cf898f69a12284aa88d17cb7c0ced4d0e49b73bb2bdc801924264059ea11ca9f29f224ae5828c8628e880f3d7464c0c0c6b73ac28f2dcea56e472fed8b12b99671e1779c241e393d4af5ea9706618c2f2dd54410b768308c07fe25c477409b7839e8c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xe6, 0x40, 0x4}}, {{0x9, 0x5, 0x7479b86b0112602b, 0x10, 0x10, 0x7, 0xc4, 0x69}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x70, 0x3f, 0x2, [@generic={0x92, 0x22, "d70fcc2b3a0947609c84c438576e97f3dfd847811b3bec1149409978ab0eed1868e557025cb61f3fca041077cf6e1f81c046b5c7080f0f0a585a10513453ace34d46a01bbba627b548a0d3edc5100c9d5c6dac18e91be43e8c1d402a3085312b82a3905e4535901a02e740b4e4c852e2a941a63d411e93319c34c6ccc930d26aedb735df3e5df713052358e10ee261b7"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x3, 0x4, 0x20, 0x5}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2c, 0x3c, 0x146}, @ss_container_id={0x14, 0x10, 0x4, 0x38, "9fb0bd261e9fd9c4f62e9ae9025976ab"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}]}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) [ 1655.265323][T16361] snd_usb_pod 1-1:1.1: set_interface failed [ 1655.271613][T16361] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1655.279961][T16361] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 1655.367832][T20750] binder: 20749:20750 ioctl c00c620f 20000100 returned -22 [ 1655.387900][T20752] binder: 20748:20752 ioctl c0306201 20001480 returned -14 [ 1655.393896][T16361] usb 1-1: USB disconnect, device number 116 [ 1655.400375][T20754] binder: 20747:20754 ioctl c0306201 20001480 returned -14 [ 1655.425027][T20752] FAULT_INJECTION: forcing a failure. [ 1655.425027][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.438904][T20752] CPU: 0 PID: 20752 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1655.449044][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1655.459394][T20752] Call Trace: [ 1655.462845][T20752] [ 1655.465929][T20752] dump_stack_lvl+0x1bf/0x240 [ 1655.470880][T20752] dump_stack+0x1e/0x20 [ 1655.475295][T20752] should_fail_ex+0x748/0x7f0 [ 1655.480278][T20752] __should_failslab+0x188/0x1f0 [ 1655.481470][T20754] binder: 20747:20754 ioctl c0306201 20000100 returned -14 [ 1655.485512][T20752] should_failslab+0x2d/0x70 [ 1655.485664][T20752] slab_pre_alloc_hook+0xa9/0xa40 [ 1655.502936][T20752] __kmem_cache_alloc_node+0xa6/0x8b0 [ 1655.508570][T20752] ? binder_transaction+0x2d96/0xa7b0 [ 1655.514227][T20752] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1655.520329][T20752] kmalloc_trace+0x51/0x200 07:37:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x6, 0x0, 0x0}) [ 1655.525102][T20752] ? binder_transaction+0x2d96/0xa7b0 [ 1655.530745][T20752] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1655.536934][T20752] binder_transaction+0x2d96/0xa7b0 [ 1655.542512][T20752] ? binder_debug+0xc6/0x310 [ 1655.547372][T20752] ? binder_debug+0xc6/0x310 [ 1655.552211][T20752] ? filter_irq_stacks+0x60/0x1a0 [ 1655.557515][T20752] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1655.564052][T20752] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1655.570147][T20752] ? binder_ioctl_write_read+0x13ca/0x11770 [ 1655.576366][T20752] binder_ioctl_write_read+0x14fa/0x11770 [ 1655.582381][T20752] ? binder_debug+0xc6/0x310 [ 1655.587245][T20752] ? filter_irq_stacks+0x60/0x1a0 [ 1655.592536][T20752] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1655.599074][T20752] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1655.605598][T20752] binder_ioctl+0x50f/0x33f0 [ 1655.610410][T20752] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1655.616482][T20752] ? do_vfs_ioctl+0x1211/0x3b10 [ 1655.621593][T20752] ? binder_poll+0x7f0/0x7f0 [ 1655.626407][T20752] ? binder_poll+0x7f0/0x7f0 [ 1655.631202][T20752] __se_sys_ioctl+0x222/0x400 [ 1655.636126][T20752] __x64_sys_ioctl+0x96/0xe0 [ 1655.640956][T20752] do_syscall_64+0x41/0xc0 [ 1655.645604][T20752] ? sysvec_apic_timer_interrupt+0x4d/0x90 [ 1655.651675][T20752] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1655.657799][T20752] RIP: 0033:0x7f77b0a8c169 [ 1655.662391][T20752] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1655.682234][T20752] RSP: 002b:00007f77b180b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.690885][T20752] RAX: ffffffffffffffda RBX: 00007f77b0babf80 RCX: 00007f77b0a8c169 [ 1655.699042][T20752] RDX: 0000000020000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1655.707187][T20752] RBP: 00007f77b180b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.715345][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.723502][T20752] R13: 00007f77b0ccfb1f R14: 00007f77b180b300 R15: 0000000000022000 [ 1655.731680][T20752] 07:37:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) (fail_nth: 7) [ 1655.942229][T11153] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1655.959406][T20758] binder: 20757:20758 ioctl c0306201 20001480 returned -14 07:37:25 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x208080, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@any, 0x7fff}, @host, 0x2, 0x6, 0x5, 0x3ff, 0x5, 0xfe000, 0x8001}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRESOCT=0x0, @ANYBLOB="7399246180fac4654b166f486535138e5e980c2d94df46fac57fe7952b1027ba95dd4088d574f5ad6a43590ba16ffcb659e3c204dcde345b2739b33f46ee8779eecd8ccd739254afdd04e436f88103f6d5c1f5a0a00bf03992a74ee61f3edc1af8bd546c0c5b44e56e268d8e1e2663f9726ce0dc881575570007f60d76f73410de7314b2d47e7b848a1e51f4045f57e948507ca038d08f659f546b798191ccc6d675cbe0199186b51fd63e83", @ANYRESOCT=r1], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1655.992000][T20761] binder: 20759:20761 ioctl c00c620f 20000100 returned -22 [ 1656.007329][T20758] binder: 20757:20758 ioctl c0306201 20000100 returned -14 07:37:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1656.112503][T11046] usb 4-1: new high-speed USB device number 84 using dummy_hcd 07:37:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x7, 0x0, 0x0}) [ 1656.195647][T20763] binder: 20760:20763 ioctl c0306201 20001480 returned -14 [ 1656.203539][T11153] usb 6-1: Using ep0 maxpacket: 32 [ 1656.248095][T20767] binder: 20764:20767 ioctl c00c620f 20000100 returned -22 [ 1656.278701][T20762] FAULT_INJECTION: forcing a failure. [ 1656.278701][T20762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.296652][T20762] CPU: 1 PID: 20762 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1656.306830][T20762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1656.317092][T20762] Call Trace: [ 1656.318553][T20770] binder: 20769:20770 ioctl c0306201 20001480 returned -14 [ 1656.320453][T20762] [ 1656.320502][T20762] dump_stack_lvl+0x1bf/0x240 [ 1656.335615][T20762] dump_stack+0x1e/0x20 [ 1656.340021][T20762] should_fail_ex+0x748/0x7f0 [ 1656.345034][T20762] should_fail+0x2a/0x30 [ 1656.349552][T20762] should_fail_usercopy+0x2e/0x40 [ 1656.354806][T20762] _copy_to_user+0x33/0x100 [ 1656.355858][T11046] usb 4-1: Using ep0 maxpacket: 32 [ 1656.359470][T20762] simple_read_from_buffer+0x199/0x340 [ 1656.369835][T20770] binder: 20769:20770 ioctl c0306201 20000100 returned -14 [ 1656.370108][T20762] proc_fail_nth_read+0x1e2/0x2b0 [ 1656.382687][T20762] ? proc_fault_inject_write+0x490/0x490 [ 1656.388569][T20762] vfs_read+0x361/0xe40 [ 1656.392991][T20762] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1656.399527][T20762] ksys_read+0x20f/0x4c0 [ 1656.404050][T20762] __x64_sys_read+0x93/0xd0 [ 1656.408815][T20762] do_syscall_64+0x41/0xc0 [ 1656.413483][T20762] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1656.419625][T20762] RIP: 0033:0x7f77b0a3df8c [ 1656.424236][T20762] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 07:37:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1656.444108][T20762] RSP: 002b:00007f77b180b160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1656.452876][T20762] RAX: ffffffffffffffda RBX: 00007f77b0babf80 RCX: 00007f77b0a3df8c [ 1656.461074][T20762] RDX: 000000000000000f RSI: 00007f77b180b1e0 RDI: 0000000000000007 [ 1656.469266][T20762] RBP: 00007f77b180b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.477452][T20762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.485641][T20762] R13: 00007f77b0ccfb1f R14: 00007f77b180b300 R15: 0000000000022000 [ 1656.494359][T20762] [ 1656.542330][T11153] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1656.542660][T11046] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1656.550946][T11153] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1656.559687][T11046] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1656.568706][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1656.577462][T11046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.586033][T11153] usb 6-1: config 1 has no interface number 0 [ 1656.586161][T11153] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1656.600117][T11046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1656.600242][T11046] usb 4-1: config 1 has no interface number 0 [ 1656.600391][T11046] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1656.606993][T11153] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1656.618046][T11046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.627085][T11153] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1656.673340][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.704837][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1656.801025][T20774] binder: 20773:20774 ioctl c00c620f 20000100 returned -22 [ 1656.870197][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1656.905122][T16361] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1656.922490][T11046] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1656.931390][T11046] snd_usb_pod 4-1:1.1: invalid control EP [ 1656.937479][T11046] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1656.945628][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1656.955154][T11046] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1657.057157][T20753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.066734][T20753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.084260][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1657.122197][T16361] usb 1-1: device descriptor read/64, error 18 [ 1657.139160][ T5037] usb 4-1: USB disconnect, device number 84 [ 1657.413272][T16361] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1657.612052][T16361] usb 1-1: device descriptor read/64, error 18 [ 1657.645042][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.655029][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x8, 0x0, 0x0}) 07:37:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:26 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0x11, 0x79, {0x79, 0x23, "8be4ebb00dc63d96493acf2436ab46d551d9c887542a69d6eda11a6dc53c05dc29c70558b0925cc2b88ddc875c5544bf7db66e03f2d8e7481b9e8b294ab90cd403852ddcdc36a02ee3ec276161271199146a541269f7c1924bdb147c4aab0c96792640b6b765e4c745908e6551ed4ae87ee2cf82fdd893"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000140)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "14a1f5083e23e2ca7e60a787e431824a"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x9, 0xf, 0x4, [0x7f80c0, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf00f, 0x6, [0x0]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0xff, 0x40, "68f03fed", "2dc3e863"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x3, 0xab, 0xff, 0x100, 0x3b}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x8d, "18475e45b39d4ec8b06c0be5107e43b679eee0ab81aa944b6fba1e975483aad8263898a65c4a167d18171d94c08e4ca23042873353068f9b518005e5789b44bc6d655bdafc8e7640abb44516b68a788c8b72b26aa861d9e6f68d8c017c112d15c60526b7429c74fdf82ba95c0de7dbecabba604a4aa482c6517ea68a85047c80d9cea4ca2d562058f348c89354"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x1e}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "980f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "8702"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) 07:37:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x60ffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1657.742947][T16361] usb usb1-port1: attempt power cycle [ 1657.749993][T11153] usb 6-1: USB disconnect, device number 102 [ 1657.759087][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 07:37:26 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f8100026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786da0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248670f10007a315728e7794cfdf84e7ebb"]}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0x4, 0x76, {0x76, 0xd, "7963d0a613064b2b8927b74cb9ff3ed1d0b04a5d204e1f59950f86c2cbaa6487e297fc4384663d931fc8b52734046ab2e163728d65b4daa6d9fbc9c98973e5ede83856dec066cea16a34ca61192a6020ec321b0467858013f58a4df135b6164a8e3d11f3d624de877e33ba16ce91d58df11a0207"}}, &(0x7f00000000c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "9b2fdd103fd8949ca618ffdb40dd5ff8e90b02f85dc294e7592fac77c73b98b43501ac5467f8fa406be76ee2a477f6b1dcc02977c8ebdbc902fce068fc5ff700191b1ebb8e2f1dce16b8e7db69bd547561cdebe3856fe0c7ce2c7add0fb5d47120dc0aca380bcd341254598e67a6f0d99b489e406892be32959f1f70bb727e40d71a9c"}}, &(0x7f0000000180)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xa, "a6db035e"}, @local=@item_4={0x3, 0x2, 0x0, "1ebf1439"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "563c8ad4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb4f, 0x0, 0x1, {0x22, 0xda8}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x30, 0x16, 0x5, "f59fccf32f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "eecda1f73d5ae97742cfc343dafb36e55c95df8c1a7084c4705e6d9102a31fb444560ed017c28c6971e16319e48fd91e025fc5e835ffe1f67682beebc0fb1b92bc2d2ba5d1f3305d2438e6fa958648f28165cfb52f07e7e6209be9f3"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1657.847645][T20784] binder: 20781:20784 ioctl c00c620f 20000100 returned -22 [ 1657.867868][T20783] binder: 20780:20783 ioctl c0306201 20001480 returned -14 [ 1657.898020][T20785] binder: 20782:20785 ioctl c0306201 20001480 returned -14 07:37:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1657.956655][T20785] binder: 20782:20785 ioctl c0306201 20000100 returned -14 07:37:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x9, 0x0, 0x0}) [ 1658.170865][T20793] binder: 20791:20793 ioctl c00c620f 20000100 returned -22 [ 1658.192114][T16361] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1658.223602][T20794] binder: 20792:20794 ioctl c0306201 20001480 returned -14 [ 1658.258007][T20796] binder: 20795:20796 ioctl c0306201 20001480 returned -14 [ 1658.279676][T20796] binder: 20795:20796 ioctl c0306201 20000100 returned -14 [ 1658.362027][ T5037] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1658.403894][T16361] usb 1-1: device descriptor read/8, error -61 [ 1658.410356][T11153] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1658.631910][ T5037] usb 4-1: Using ep0 maxpacket: 32 [ 1658.672652][T16361] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1658.702171][T11153] usb 6-1: Using ep0 maxpacket: 32 [ 1658.772736][ T5037] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1658.781306][ T5037] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1658.790337][ T5037] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.800931][ T5037] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1658.810315][ T5037] usb 4-1: config 1 has no interface number 0 [ 1658.816748][ T5037] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1658.826163][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.873000][T11153] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1658.881629][T11153] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1658.890730][T11153] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1658.900460][T11153] usb 6-1: config 1 has no interface number 0 [ 1658.906874][T11153] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1658.918377][T11153] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1658.931640][T11153] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1658.941269][T11153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.963753][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1658.971315][T16361] usb 1-1: device descriptor read/8, error -61 [ 1659.041105][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1659.112941][T16361] usb usb1-port1: unable to enumerate USB device [ 1659.122298][ T5037] snd_usb_pod 4-1:1.1: set_interface failed [ 1659.128539][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1659.136920][ T5037] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 1659.167030][ T5037] usb 4-1: USB disconnect, device number 85 07:37:28 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x208080, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@any, 0x7fff}, @host, 0x2, 0x6, 0x5, 0x3ff, 0x5, 0xfe000, 0x8001}) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRESOCT=0x0, @ANYBLOB="7399246180fac4654b166f486535138e5e980c2d94df46fac57fe7952b1027ba95dd4088d574f5ad6a43590ba16ffcb659e3c204dcde345b2739b33f46ee8779eecd8ccd739254afdd04e436f88103f6d5c1f5a0a00bf03992a74ee61f3edc1af8bd546c0c5b44e56e268d8e1e2663f9726ce0dc881575570007f60d76f73410de7314b2d47e7b848a1e51f4045f57e948507ca038d08f659f546b798191ccc6d675cbe0199186b51fd63e83", @ANYRESOCT=r1], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xa, 0x0, 0x0}) [ 1659.284037][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1659.373694][T20800] binder: 20799:20800 ioctl c00c620f 20000100 returned -22 [ 1659.387513][T20798] binder: 20797:20798 ioctl c0306201 20001480 returned -14 07:37:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1659.449731][T20803] binder: 20801:20803 ioctl c0306201 20001480 returned -14 [ 1659.475867][T20798] binder: 20797:20798 ioctl c0306201 20000100 returned -14 [ 1659.510842][T20809] binder: 20801:20809 ioctl 10 20000100 returned -22 07:37:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1659.641629][T20811] binder: 20810:20811 ioctl c00c620f 20000100 returned -22 07:37:28 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) (async) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0x11, 0x79, {0x79, 0x23, "8be4ebb00dc63d96493acf2436ab46d551d9c887542a69d6eda11a6dc53c05dc29c70558b0925cc2b88ddc875c5544bf7db66e03f2d8e7481b9e8b294ab90cd403852ddcdc36a02ee3ec276161271199146a541269f7c1924bdb147c4aab0c96792640b6b765e4c745908e6551ed4ae87ee2cf82fdd893"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000140)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "14a1f5083e23e2ca7e60a787e431824a"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x9, 0xf, 0x4, [0x7f80c0, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf00f, 0x6, [0x0]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0xff, 0x40, "68f03fed", "2dc3e863"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x3, 0xab, 0xff, 0x100, 0x3b}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x11, 0x8d, "18475e45b39d4ec8b06c0be5107e43b679eee0ab81aa944b6fba1e975483aad8263898a65c4a167d18171d94c08e4ca23042873353068f9b518005e5789b44bc6d655bdafc8e7640abb44516b68a788c8b72b26aa861d9e6f68d8c017c112d15c60526b7429c74fdf82ba95c0de7dbecabba604a4aa482c6517ea68a85047c80d9cea4ca2d562058f348c89354"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x1e}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "980f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "8702"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) 07:37:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xb, 0x0, 0x0}) [ 1659.861062][T20814] binder: 20813:20814 ioctl c0306201 20001480 returned -14 [ 1659.879809][T20816] binder: BINDER_SET_CONTEXT_MGR already set [ 1659.886707][T20816] binder: 20812:20816 ioctl 4018620d 20000000 returned -16 [ 1659.897879][T20814] binder: 20813:20814 ioctl c0306201 20000100 returned -14 [ 1659.898187][T20816] binder: 20812:20816 ioctl c0306201 20001480 returned -14 [ 1659.919775][T20816] binder: 20812:20816 ioctl 541b 20000100 returned -22 [ 1660.132001][T11046] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1660.332436][ T21] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1660.372155][T11046] usb 4-1: Using ep0 maxpacket: 32 [ 1660.492820][T11046] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1660.501433][T11046] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1660.510402][T11046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.520836][T11046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1660.530249][T11046] usb 4-1: config 1 has no interface number 0 [ 1660.536701][T11046] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1660.546126][T11046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.610748][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1660.832575][T11046] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1660.841437][T11046] snd_usb_pod 4-1:1.1: invalid control EP [ 1660.847497][T11046] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1660.854526][T11046] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1660.864065][T11046] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1661.037621][ T21] usb 4-1: USB disconnect, device number 86 07:37:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:30 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x208080, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@any, 0x7fff}, @host, 0x2, 0x6, 0x5, 0x3ff, 0x5, 0xfe000, 0x8001}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x21f4) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRESOCT=0x0, @ANYBLOB="7399246180fac4654b166f486535138e5e980c2d94df46fac57fe7952b1027ba95dd4088d574f5ad6a43590ba16ffcb659e3c204dcde345b2739b33f46ee8779eecd8ccd739254afdd04e436f88103f6d5c1f5a0a00bf03992a74ee61f3edc1af8bd546c0c5b44e56e268d8e1e2663f9726ce0dc881575570007f60d76f73410de7314b2d47e7b848a1e51f4045f57e948507ca038d08f659f546b798191ccc6d675cbe0199186b51fd63e83", @ANYRESOCT=r1], 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xc, 0x0, 0x0}) [ 1661.463025][T11046] usb 6-1: USB disconnect, device number 103 [ 1661.475739][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 07:37:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:30 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f8100026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786da0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248670f10007a315728e7794cfdf84e7ebb"]}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0x4, 0x76, {0x76, 0xd, "7963d0a613064b2b8927b74cb9ff3ed1d0b04a5d204e1f59950f86c2cbaa6487e297fc4384663d931fc8b52734046ab2e163728d65b4daa6d9fbc9c98973e5ede83856dec066cea16a34ca61192a6020ec321b0467858013f58a4df135b6164a8e3d11f3d624de877e33ba16ce91d58df11a0207"}}, &(0x7f00000000c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "9b2fdd103fd8949ca618ffdb40dd5ff8e90b02f85dc294e7592fac77c73b98b43501ac5467f8fa406be76ee2a477f6b1dcc02977c8ebdbc902fce068fc5ff700191b1ebb8e2f1dce16b8e7db69bd547561cdebe3856fe0c7ce2c7add0fb5d47120dc0aca380bcd341254598e67a6f0d99b489e406892be32959f1f70bb727e40d71a9c"}}, &(0x7f0000000180)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xa, "a6db035e"}, @local=@item_4={0x3, 0x2, 0x0, "1ebf1439"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "563c8ad4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb4f, 0x0, 0x1, {0x22, 0xda8}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x30, 0x16, 0x5, "f59fccf32f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "eecda1f73d5ae97742cfc343dafb36e55c95df8c1a7084c4705e6d9102a31fb444560ed017c28c6971e16319e48fd91e025fc5e835ffe1f67682beebc0fb1b92bc2d2ba5d1f3305d2438e6fa958648f28165cfb52f07e7e6209be9f3"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:30 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100030009040169363154a0ca020d6c30ce13dd5e3487244cf72b0e8fc4d7465ee4f293504d3d4ec9da95e0266bb896b29c29f330d16da7fb4540bd24580cb5be4542ea55c40cc2c615ed36be46031d33109a5a75072efb8e648b52f07d77711fd8460d"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x1c2, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x1, 0x1, 0x8, 0x592103ca873b598d, 0x2, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x31, {{0xb, 0x24, 0x6, 0x0, 0x0, "09cfa9f6b5db"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x8, 0x77}, [@network_terminal={0x7, 0x24, 0xa, 0x1c, 0x72, 0x5, 0xa3}, @ncm={0x6, 0x24, 0x1a, 0x81, 0x5}, @mdlm_detail={0x74, 0x24, 0x13, 0x8, "3a6cadf9eef995f4d3dd361f962e006a7f59ded06514baa4b3bed143635463ce2f9459d0c0502981f99a9f8adb24402348fe4644f4843dae9ad8dc53200bc98a8587f770281820199d2b801ddc3ae535e63ced3190b72cc9b8293becdc4a3ea66eee997843ed4d60ba4a2c88c8f0775e"}, @obex={0x5, 0x24, 0x15, 0xfbff}, @ncm={0x6, 0x24, 0x1a, 0x7}, @mdlm_detail={0xda, 0x24, 0x13, 0x1, "ca3ae883b7d731492dddb319e5dcdd3dd493d08bd52d03cabc0137741443d04b0c7c0c8150506e3ba302334ee443273789a9789a7f087d7ec1a3b8b1288a20e20156199fccbe7a3be05eda904a77c92271cd5ca9dd6cae08ae9cb3a8b5cd80f1101759848a89731f1d63d05df1e417dae3719ffbbb05fc32a65b0db028df2b52c2b0c937fe22ec19f0243481276025c662f9dbe976628b97afe0e0a61d5e9017b277019dd0bda90356a7dd0ae3fdb77af7a7bece90e21315be511b47628df96e4c558a62f5824ed536fbf7d95f4a74b9672e8d8a0c09"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd9, 0x5, 0x28}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x1f, 0x7f, 0x8, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0xa, &(0x7f0000000380)=@string={0xa, 0x3, "536706c8ce59d2a3"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) [ 1661.631321][T20828] binder: 20822:20828 ioctl c00c620f 20000100 returned -22 [ 1661.658786][T20825] binder: 20823:20825 ioctl c0306201 20001480 returned -14 [ 1661.671068][T20826] binder: 20824:20826 ioctl c0306201 20001480 returned -14 [ 1661.707505][T20825] binder: 20823:20825 ioctl c0306201 20000100 returned -14 [ 1661.730607][T20830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.741000][T20830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:30 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0xffffffffffffffbc, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000c40)={0x5, 0xf, 0x5}, 0x0, [{0x0, &(0x7f0000000000)=@string={0x0, 0x3, "77e77d8a11027be89ab3e8f8d61e8e067385489668322ea094f2031a29ba22a1ce386c1ab272afb9c956655609aae0b4bf2c2a39961b02cfd6830f8f88630c41df120cced5dd0375d8b40a14f571d42b575e6d90bbe3ff2f03ca26749c240808daf4ec34a650f4fdea03e2619af416842179b828d131054a03913e"}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xd, 0x0, 0x0}) [ 1662.023860][T20838] binder: 20836:20838 ioctl c0306201 20001480 returned -14 [ 1662.037500][T20840] binder: 20837:20840 ioctl c00c620f 20000100 returned -22 [ 1662.045576][T11046] usb 6-1: new high-speed USB device number 104 using dummy_hcd 07:37:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1662.152691][T16196] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1662.169661][T20843] binder: 20842:20843 ioctl c0306201 20001480 returned -14 [ 1662.211555][T20843] binder: 20842:20843 ioctl c0306201 20000100 returned -14 07:37:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xe, 0x0, 0x0}) [ 1662.290258][T20846] binder: 20844:20846 ioctl c00c620f 20000100 returned -22 [ 1662.298155][T11046] usb 6-1: Using ep0 maxpacket: 32 [ 1662.308347][T20847] binder: 20845:20847 ioctl c0306201 20001480 returned -14 07:37:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1662.342434][ T21] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1662.404204][T16196] usb 4-1: Using ep0 maxpacket: 32 [ 1662.423708][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1662.436946][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1662.446954][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1662.456303][T11046] usb 6-1: config 1 has no interface number 0 [ 1662.463420][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1662.474693][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1662.488180][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 07:37:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1662.497660][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.562564][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1662.592503][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 1662.592781][T16196] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1662.606658][T16196] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1662.616131][T16196] usb 4-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1662.626780][T16196] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1662.640374][T16196] usb 4-1: config 1 has no interface number 0 [ 1662.647301][T16196] usb 4-1: too many endpoints for config 1 interface 1 altsetting 105: 54, using maximum allowed: 30 [ 1662.651102][T20849] binder: 20848:20849 ioctl c0306201 20001480 returned -14 [ 1662.658436][T16196] usb 4-1: config 1 interface 1 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 54 [ 1662.658595][T16196] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1662.658741][T16196] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1662.658867][T16196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.702707][T20852] binder: 20850:20852 ioctl c00c620f 20000100 returned -22 [ 1662.729787][T20853] binder: 20848:20853 ioctl c0306201 20000100 returned -14 [ 1662.743096][ T21] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1662.751950][ T21] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1662.760772][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1662.770175][ T21] usb 1-1: config 1 has no interface number 0 [ 1662.776933][ T21] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1662.788228][ T21] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1662.801466][ T21] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1662.810885][T20854] binder: 20851:20854 ioctl c0306201 20001480 returned -14 [ 1662.810909][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.830306][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached 07:37:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1662.938461][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1662.953687][T20835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.963388][T20835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.046085][T16196] usb 4-1: string descriptor 0 read error: -71 [ 1663.060652][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1663.068178][T16196] usb 4-1: selecting invalid altsetting 0 [ 1663.074209][T16196] snd_usb_pod 4-1:1.1: set_interface failed [ 1663.080437][T16196] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1663.088755][T16196] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1663.135139][T20856] binder: 20855:20856 ioctl c00c620f 20000100 returned -22 [ 1663.145744][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1663.168406][T16196] usb 4-1: USB disconnect, device number 87 [ 1663.842256][T16196] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1663.921662][ T21] usb 1-1: USB disconnect, device number 121 [ 1663.936861][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:37:34 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f8100026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786da0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248670f10007a315728e7794cfdf84e7ebb"]}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0x4, 0x76, {0x76, 0xd, "7963d0a613064b2b8927b74cb9ff3ed1d0b04a5d204e1f59950f86c2cbaa6487e297fc4384663d931fc8b52734046ab2e163728d65b4daa6d9fbc9c98973e5ede83856dec066cea16a34ca61192a6020ec321b0467858013f58a4df135b6164a8e3d11f3d624de877e33ba16ce91d58df11a0207"}}, &(0x7f00000000c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "9b2fdd103fd8949ca618ffdb40dd5ff8e90b02f85dc294e7592fac77c73b98b43501ac5467f8fa406be76ee2a477f6b1dcc02977c8ebdbc902fce068fc5ff700191b1ebb8e2f1dce16b8e7db69bd547561cdebe3856fe0c7ce2c7add0fb5d47120dc0aca380bcd341254598e67a6f0d99b489e406892be32959f1f70bb727e40d71a9c"}}, &(0x7f0000000180)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0xa, "a6db035e"}, @local=@item_4={0x3, 0x2, 0x0, "1ebf1439"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "563c8ad4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb4f, 0x0, 0x1, {0x22, 0xda8}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x30, 0x16, 0x5, "f59fccf32f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "eecda1f73d5ae97742cfc343dafb36e55c95df8c1a7084c4705e6d9102a31fb444560ed017c28c6971e16319e48fd91e025fc5e835ffe1f67682beebc0fb1b92bc2d2ba5d1f3305d2438e6fa958648f28165cfb52f07e7e6209be9f3"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x10, 0x0, 0x0}) 07:37:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:34 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100030009040169363154a0ca020d6c30ce13dd5e3487244cf72b0e8fc4d7465ee4f293504d3d4ec9da95e0266bb896b29c29f330d16da7fb4540bd24580cb5be4542ea55c40cc2c615ed36be46031d33109a5a75072efb8e648b52f07d77711fd8460d"], 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x1c2, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x1, 0x1, 0x8, 0x592103ca873b598d, 0x2, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x31, {{0xb, 0x24, 0x6, 0x0, 0x0, "09cfa9f6b5db"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x8, 0x77}, [@network_terminal={0x7, 0x24, 0xa, 0x1c, 0x72, 0x5, 0xa3}, @ncm={0x6, 0x24, 0x1a, 0x81, 0x5}, @mdlm_detail={0x74, 0x24, 0x13, 0x8, "3a6cadf9eef995f4d3dd361f962e006a7f59ded06514baa4b3bed143635463ce2f9459d0c0502981f99a9f8adb24402348fe4644f4843dae9ad8dc53200bc98a8587f770281820199d2b801ddc3ae535e63ced3190b72cc9b8293becdc4a3ea66eee997843ed4d60ba4a2c88c8f0775e"}, @obex={0x5, 0x24, 0x15, 0xfbff}, @ncm={0x6, 0x24, 0x1a, 0x7}, @mdlm_detail={0xda, 0x24, 0x13, 0x1, "ca3ae883b7d731492dddb319e5dcdd3dd493d08bd52d03cabc0137741443d04b0c7c0c8150506e3ba302334ee443273789a9789a7f087d7ec1a3b8b1288a20e20156199fccbe7a3be05eda904a77c92271cd5ca9dd6cae08ae9cb3a8b5cd80f1101759848a89731f1d63d05df1e417dae3719ffbbb05fc32a65b0db028df2b52c2b0c937fe22ec19f0243481276025c662f9dbe976628b97afe0e0a61d5e9017b277019dd0bda90356a7dd0ae3fdb77af7a7bece90e21315be511b47628df96e4c558a62f5824ed536fbf7d95f4a74b9672e8d8a0c09"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd9, 0x5, 0x28}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x1f, 0x7f, 0x8, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0xa, &(0x7f0000000380)=@string={0xa, 0x3, "536706c8ce59d2a3"}}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) 07:37:34 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0xffffffffffffffbc, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000c40)={0x5, 0xf, 0x5}, 0x0, [{0x0, &(0x7f0000000000)=@string={0x0, 0x3, "77e77d8a11027be89ab3e8f8d61e8e067385489668322ea094f2031a29ba22a1ce386c1ab272afb9c956655609aae0b4bf2c2a39961b02cfd6830f8f88630c41df120cced5dd0375d8b40a14f571d42b575e6d90bbe3ff2f03ca26749c240808daf4ec34a650f4fdea03e2619af416842179b828d131054a03913e"}}]}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1664.967424][T16196] usb 6-1: USB disconnect, device number 104 [ 1664.976942][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1665.076763][T20865] binder: 20860:20865 ioctl c00c620f 20000100 returned -22 [ 1665.151444][T20866] binder: 20857:20866 ioctl c0306201 20001480 returned -14 [ 1665.161208][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.170934][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.175605][T20863] binder: 20861:20863 ioctl c0306201 20001480 returned -14 07:37:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x8933, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1665.318881][T20863] binder: 20861:20863 ioctl c0306201 20000100 returned -14 07:37:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x11, 0x0, 0x0}) [ 1665.382763][ T21] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1665.390952][ T5037] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1665.437495][T20874] binder: 20872:20874 ioctl c0306201 20001480 returned -14 [ 1665.447419][T20875] binder: 20873:20875 ioctl c00c620f 20000100 returned -22 [ 1665.467017][T20874] binder: 20872:20874 ioctl 8933 20000100 returned -22 07:37:34 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400448c9, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1665.578822][T20877] binder: 20876:20877 ioctl c0306201 20001480 returned -14 [ 1665.609316][T16196] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1665.622979][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 1665.636041][T20877] binder: 20876:20877 ioctl c0306201 20000100 returned -14 [ 1665.666304][T20879] binder: 20878:20879 ioctl c00c620f 20000100 returned -22 [ 1665.682857][ T5037] usb 4-1: Using ep0 maxpacket: 32 07:37:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x12, 0x0, 0x0}) [ 1665.753779][T20881] binder: 20880:20881 ioctl c0306201 20001480 returned -14 [ 1665.765339][ T21] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1665.769166][T20881] binder: 20880:20881 ioctl 400448c9 20000100 returned -22 [ 1665.774024][ T21] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1665.774142][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1665.799425][ T21] usb 1-1: config 1 has no interface number 0 [ 1665.805850][ T21] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1665.817045][ T21] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1665.830316][ T21] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1665.839821][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.863495][T16196] usb 6-1: Using ep0 maxpacket: 32 [ 1665.873540][ T5037] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1665.882771][ T5037] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1665.891582][ T5037] usb 4-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1665.902207][ T5037] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1665.915198][ T5037] usb 4-1: config 1 has no interface number 0 [ 1665.921956][ T5037] usb 4-1: too many endpoints for config 1 interface 1 altsetting 105: 54, using maximum allowed: 30 [ 1665.933145][ T5037] usb 4-1: config 1 interface 1 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 54 [ 1665.946664][ T5037] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1665.953587][ T5037] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1665.962939][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.022868][T16196] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1666.031526][T16196] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1666.040991][T16196] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1666.050425][T16196] usb 6-1: config 1 has no interface number 0 [ 1666.056857][T16196] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1666.061818][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1666.068115][T16196] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1666.089324][T16196] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1666.098704][T16196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.151989][T20883] binder: 20882:20883 ioctl c0306201 20001480 returned -14 [ 1666.168570][T20883] binder: 20882:20883 ioctl c0306201 20000100 returned -14 [ 1666.192194][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1666.326080][ T21] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1666.354629][ T5037] usb 4-1: string descriptor 0 read error: -71 [ 1666.369153][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1666.375667][ T5037] usb 4-1: selecting invalid altsetting 0 [ 1666.381604][ T5037] snd_usb_pod 4-1:1.1: set_interface failed [ 1666.387934][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1666.396320][ T5037] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1666.414671][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1666.427309][ T5037] usb 4-1: USB disconnect, device number 88 [ 1667.157128][T16196] usb 1-1: USB disconnect, device number 122 [ 1667.172554][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1667.442248][T16196] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) 07:37:37 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x80, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0xfff, 0x40, 0x1, {0x22, 0x61c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x1, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x82, 0x1f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x20, 0x7, 0x1f, 0xff, 0x8}, 0x29, &(0x7f00000000c0)={0x5, 0xf, 0x63, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0xf0f, 0x3}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1465}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0x40, 0x6, 0xc4, {0xc4, 0x6, "8ae1bc16d6a81d56469d0713fad58e6bc8e83a7bb502fceeb1aa5c13956cdb31667179c2ef68d043ce8fd0da5e2a05ee9be0ebeb16f5c25d5a5d4aefd52a279658ceb039b817147f2a5e66849c1601308e3593b7eb9fa36595d53dd0629d71d5b0ec10a29872fe4820fea0bea49294b9fe91aeecf238637f0e77285298bcb48792594bb3f0cacaa57407c6c45d120bf55555391f4d223e9f1441d645425827d9038f8395baa38a5fc204079bd012c47439721cd555eaf63235590512e418e574217e"}}, &(0x7f0000000b00)=ANY=[@ANYBLOB="00039f505909b805eff20000009f03ce593393462b1da27f28747cb03aee0be14bd269c6ebdd34fe4b0efa7b0ac4815242d2fed53079215e567c6f90cbb067c0aded1b15cadb9c60634dc244edd48911bbb7646a5ad6524c7dbcd0a8e2bfa29ec4fdc6d3e5610fb71e5748a3af468ca4000cea2769768e049a7ef1b2faa9533b9bd61fc20de42eb5e6838ccb7314cbd2fc4d8545252f2af6690131026ebb07eb7e105c20a9"], &(0x7f0000000800)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x5, "3d6b905f"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4cf, 0x8, 0x1, {0x22, 0xf05}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x0, 0x5, 0xc3, "71ebb64ddaae7909e4a6e5373dac5c7aa038d0fb97823976ea78bdd31f6ee3d0be246550d82d6fec52a848084eac40c4168d180dd5f90059d5d4da75757611a8ef47d8aeb19ec1cda8a4111123bfb64aabe88d8c4135e25546905dc57f8b890cb37c62fed82f1ad957c03e08825a17917068de56264d82eed8a995db17fd313cd8e4db0057908c8bc932f6219931f7b80ce545df4910a4b5d533572bd3dd6aa81a56903ee46448cc3a62c293e0e686f0c5d179a0184d98607e4f6f15eb843abd72adf1"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x1, 0xff, "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"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x40}}) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000001000)={0x0, 0x31, 0x2, {0x2, 0x9}}, &(0x7f0000000280)={0x0, 0x3, 0x29, @string={0x29, 0x3, "49f2378e2510e17d67b7f8c35f7129b1358df5a864299110e20614ba97b22deae8e980cf31eeec"}}, &(0x7f0000000740)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "29b28e5f68349189a7115b40ca56e021"}, @generic={0x6, 0x10, 0x4, 'kW\b'}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x41, 0x0, 0x0, 0x8, "3502efd7", "b924cd74"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3, 0x0, 0x9, 0x8001}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x40, 0xe, 0x14, "8895b0956e2c0aaf110e8b21b666aa26593acfb8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xfffb}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x64}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 't\\'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'G9'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000240)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xcd}}) syz_usb_control_io$hid(r1, &(0x7f0000001180)={0x24, &(0x7f0000001040)={0x20, 0x5, 0x4a, {0x4a, 0x11, "5273d667dcd4f8479ec669e7103de3abb54c0b0668ae016a6fc880fa51be6aece939bc0cc2e3fea3697e24a5bda0b49a174b78f54615ebaec2bb4f2d7c7d10bc870002205d82df36"}}, &(0x7f00000010c0)={0x0, 0x3, 0x45, @string={0x45, 0x3, "c848a4f0cebe3a2b6c54514942161904a7379e98764a041d7ea076b78e96224c79ff0606c36f12db46f280bf40a439f9ea98b6e0d8c9619623b646a531765c790dae52"}}, &(0x7f00000002c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x8, "501faf39"}, @main=@item_4={0x3, 0x0, 0x8, "94278654"}]}}, &(0x7f0000001140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0xcfd}}}}, &(0x7f0000001440)={0x2c, &(0x7f00000011c0)={0x0, 0x15, 0xbc, "638ebea0d7b8cd6c152f3cb6fddddbf9108cb4cda34303c71ac7cdd5c1ae2c383d41bda7ef965638d31bd8cd47c46c7b350cc1ec85386844904964700b1a93fb71e0d92ecbef7211ece1fb95f591322a60ce87269b4344f2410b4a1c6e1982f13af2486a079f0c9c6836ced98bdbf3078fcd7baa74c5f535afa22a3dbeae0440d14bd03348aebd74dd03ac2a7da4570167d4b257390ec8a102626483df031529a43e60caf211fe49f82f3651912d49a6a6435a8f181df882110fa840"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001340)={0x20, 0x1, 0x83, "062e3284bf3ccadae7b8c91c9055fe11cb9b6b9f686d504731283e82d5fc51ed6f3a58b83de22348623b0f7a47b7114d7222dc23c3293ec85652f68aa7475a93c4a70bb7216dbc0efc647c189161e404c59c8ad675c6c393cd82cf3ffea435f5cb33e59dfc7f11bd13609094ae9f381175497515c034c85fe20c3cdf42214a803c0f6d"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x6}}) 07:37:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400448dd, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x25, 0x0, 0x0}) 07:37:37 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100030009040169363154a0ca020d6c30ce13dd5e3487244cf72b0e8fc4d7465ee4f293504d3d4ec9da95e0266bb896b29c29f330d16da7fb4540bd24580cb5be4542ea55c40cc2c615ed36be46031d33109a5a75072efb8e648b52f07d77711fd8460d"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x1c2, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x1, 0x1, 0x8, 0x592103ca873b598d, 0x2, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x31, {{0xb, 0x24, 0x6, 0x0, 0x0, "09cfa9f6b5db"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x8, 0x77}, [@network_terminal={0x7, 0x24, 0xa, 0x1c, 0x72, 0x5, 0xa3}, @ncm={0x6, 0x24, 0x1a, 0x81, 0x5}, @mdlm_detail={0x74, 0x24, 0x13, 0x8, "3a6cadf9eef995f4d3dd361f962e006a7f59ded06514baa4b3bed143635463ce2f9459d0c0502981f99a9f8adb24402348fe4644f4843dae9ad8dc53200bc98a8587f770281820199d2b801ddc3ae535e63ced3190b72cc9b8293becdc4a3ea66eee997843ed4d60ba4a2c88c8f0775e"}, @obex={0x5, 0x24, 0x15, 0xfbff}, @ncm={0x6, 0x24, 0x1a, 0x7}, @mdlm_detail={0xda, 0x24, 0x13, 0x1, "ca3ae883b7d731492dddb319e5dcdd3dd493d08bd52d03cabc0137741443d04b0c7c0c8150506e3ba302334ee443273789a9789a7f087d7ec1a3b8b1288a20e20156199fccbe7a3be05eda904a77c92271cd5ca9dd6cae08ae9cb3a8b5cd80f1101759848a89731f1d63d05df1e417dae3719ffbbb05fc32a65b0db028df2b52c2b0c937fe22ec19f0243481276025c662f9dbe976628b97afe0e0a61d5e9017b277019dd0bda90356a7dd0ae3fdb77af7a7bece90e21315be511b47628df96e4c558a62f5824ed536fbf7d95f4a74b9672e8d8a0c09"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd9, 0x5, 0x28}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x1f, 0x7f, 0x8, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0xa, &(0x7f0000000380)=@string={0xa, 0x3, "536706c8ce59d2a3"}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100030009040169363154a0ca020d6c30ce13dd5e3487244cf72b0e8fc4d7465ee4f293504d3d4ec9da95e0266bb896b29c29f330d16da7fb4540bd24580cb5be4542ea55c40cc2c615ed36be46031d33109a5a75072efb8e648b52f07d77711fd8460d"], 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x1c2, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x1, 0x1, 0x8, 0x592103ca873b598d, 0x2, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x31, {{0xb, 0x24, 0x6, 0x0, 0x0, "09cfa9f6b5db"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81, 0x8, 0x77}, [@network_terminal={0x7, 0x24, 0xa, 0x1c, 0x72, 0x5, 0xa3}, @ncm={0x6, 0x24, 0x1a, 0x81, 0x5}, @mdlm_detail={0x74, 0x24, 0x13, 0x8, "3a6cadf9eef995f4d3dd361f962e006a7f59ded06514baa4b3bed143635463ce2f9459d0c0502981f99a9f8adb24402348fe4644f4843dae9ad8dc53200bc98a8587f770281820199d2b801ddc3ae535e63ced3190b72cc9b8293becdc4a3ea66eee997843ed4d60ba4a2c88c8f0775e"}, @obex={0x5, 0x24, 0x15, 0xfbff}, @ncm={0x6, 0x24, 0x1a, 0x7}, @mdlm_detail={0xda, 0x24, 0x13, 0x1, "ca3ae883b7d731492dddb319e5dcdd3dd493d08bd52d03cabc0137741443d04b0c7c0c8150506e3ba302334ee443273789a9789a7f087d7ec1a3b8b1288a20e20156199fccbe7a3be05eda904a77c92271cd5ca9dd6cae08ae9cb3a8b5cd80f1101759848a89731f1d63d05df1e417dae3719ffbbb05fc32a65b0db028df2b52c2b0c937fe22ec19f0243481276025c662f9dbe976628b97afe0e0a61d5e9017b277019dd0bda90356a7dd0ae3fdb77af7a7bece90e21315be511b47628df96e4c558a62f5824ed536fbf7d95f4a74b9672e8d8a0c09"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x60, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xd9, 0x5, 0x28}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x1f, 0x7f, 0x8, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0xa, &(0x7f0000000380)=@string={0xa, 0x3, "536706c8ce59d2a3"}}]}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x12, &(0x7f0000000c40)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa}, @generic={0x3}]}, 0x1, [{0x0, 0x0}]}) (async) 07:37:37 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0xffffffffffffffbc, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000c40)={0x5, 0xf, 0x5}, 0x0, [{0x0, &(0x7f0000000000)=@string={0x0, 0x3, "77e77d8a11027be89ab3e8f8d61e8e067385489668322ea094f2031a29ba22a1ce386c1ab272afb9c956655609aae0b4bf2c2a39961b02cfd6830f8f88630c41df120cced5dd0375d8b40a14f571d42b575e6d90bbe3ff2f03ca26749c240808daf4ec34a650f4fdea03e2619af416842179b828d131054a03913e"}}]}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1668.548003][ T21] usb 6-1: USB disconnect, device number 105 [ 1668.556821][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1668.694211][T20892] binder: 20888:20892 ioctl c00c620f 20000100 returned -22 [ 1668.750512][T20894] binder: 20889:20894 ioctl c0306201 20001480 returned -14 [ 1668.757646][T20896] binder: BINDER_SET_CONTEXT_MGR already set [ 1668.765282][T20896] binder: 20886:20896 ioctl 4018620d 20000000 returned -16 [ 1668.798264][T20894] binder: 20889:20894 ioctl c0306201 20000100 returned -14 07:37:37 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1668.845953][T20896] binder: 20886:20896 ioctl c0306201 20001480 returned -14 07:37:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x50, 0x0, 0x0}) [ 1668.887819][T20896] binder: 20886:20896 ioctl 400448dd 20000100 returned -22 07:37:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400454ca, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1668.970008][T20899] binder: 20898:20899 ioctl c00c620f 20000100 returned -22 [ 1668.986485][ T5037] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1669.022661][T11153] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1669.060410][T20901] binder: 20900:20901 ioctl c0306201 20001480 returned -14 07:37:38 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1669.076338][T20901] binder: 20900:20901 ioctl c0306201 20000100 returned -14 07:37:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x58, 0x0, 0x0}) [ 1669.171307][T20903] binder: 20902:20903 ioctl c0306201 20001480 returned -14 [ 1669.182276][ T21] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1669.198822][T20903] binder: 20902:20903 ioctl 400454ca 20000100 returned -22 [ 1669.210636][T20905] binder: 20904:20905 ioctl c00c620f 20000100 returned -22 07:37:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1669.255955][ T5037] usb 4-1: Using ep0 maxpacket: 32 [ 1669.282965][T11153] usb 1-1: Using ep0 maxpacket: 32 [ 1669.322657][T20907] binder: 20906:20907 ioctl c0306201 20001480 returned -14 [ 1669.345797][T20907] binder: 20906:20907 ioctl c0306201 20000100 returned -14 [ 1669.394960][ T5037] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1669.404356][ T5037] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1669.413315][ T5037] usb 4-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1669.423860][ T5037] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1669.426590][T20909] binder: 20908:20909 ioctl c0306201 20001480 returned -14 [ 1669.433082][ T5037] usb 4-1: config 1 has no interface number 0 [ 1669.433191][ T5037] usb 4-1: too many endpoints for config 1 interface 1 altsetting 105: 54, using maximum allowed: 30 [ 1669.433331][ T5037] usb 4-1: config 1 interface 1 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 54 [ 1669.471225][ T5037] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1669.478210][ T5037] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1669.487597][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.502823][T11153] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1669.511427][T11153] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1669.520394][T11153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1669.529670][T11153] usb 1-1: config 1 has no interface number 0 [ 1669.536115][T11153] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1669.547329][T11153] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1669.560991][T11153] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1669.570666][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.634783][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 1669.662124][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1669.772338][ T21] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1669.780913][ T21] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1669.789899][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1669.803274][ T21] usb 6-1: config 1 has no interface number 0 [ 1669.809614][ T21] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1669.821392][ T21] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1669.834715][ T21] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1669.844086][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.873823][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1669.892271][T20891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.906814][T20891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.949749][T20891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.959893][T20912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.959993][T20891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.969955][T20912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.016439][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1670.073221][ T5037] usb 4-1: string descriptor 0 read error: -71 [ 1670.087451][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1670.093925][ T5037] usb 4-1: selecting invalid altsetting 0 [ 1670.099808][ T5037] snd_usb_pod 4-1:1.1: set_interface failed [ 1670.106110][ T5037] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1670.114417][ T5037] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1670.146949][ T5037] usb 4-1: USB disconnect, device number 89 [ 1670.234434][ T21] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1670.561082][ T5037] usb 1-1: USB disconnect, device number 123 [ 1670.570428][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1671.057943][T16196] usb 6-1: USB disconnect, device number 106 [ 1671.072909][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected 07:37:40 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x80, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0xfff, 0x40, 0x1, {0x22, 0x61c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x1, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x82, 0x1f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x20, 0x7, 0x1f, 0xff, 0x8}, 0x29, &(0x7f00000000c0)={0x5, 0xf, 0x63, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0xf0f, 0x3}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1465}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0x40, 0x6, 0xc4, {0xc4, 0x6, "8ae1bc16d6a81d56469d0713fad58e6bc8e83a7bb502fceeb1aa5c13956cdb31667179c2ef68d043ce8fd0da5e2a05ee9be0ebeb16f5c25d5a5d4aefd52a279658ceb039b817147f2a5e66849c1601308e3593b7eb9fa36595d53dd0629d71d5b0ec10a29872fe4820fea0bea49294b9fe91aeecf238637f0e77285298bcb48792594bb3f0cacaa57407c6c45d120bf55555391f4d223e9f1441d645425827d9038f8395baa38a5fc204079bd012c47439721cd555eaf63235590512e418e574217e"}}, &(0x7f0000000b00)=ANY=[@ANYBLOB="00039f505909b805eff20000009f03ce593393462b1da27f28747cb03aee0be14bd269c6ebdd34fe4b0efa7b0ac4815242d2fed53079215e567c6f90cbb067c0aded1b15cadb9c60634dc244edd48911bbb7646a5ad6524c7dbcd0a8e2bfa29ec4fdc6d3e5610fb71e5748a3af468ca4000cea2769768e049a7ef1b2faa9533b9bd61fc20de42eb5e6838ccb7314cbd2fc4d8545252f2af6690131026ebb07eb7e105c20a9"], &(0x7f0000000800)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x5, "3d6b905f"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4cf, 0x8, 0x1, {0x22, 0xf05}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x0, 0x5, 0xc3, "71ebb64ddaae7909e4a6e5373dac5c7aa038d0fb97823976ea78bdd31f6ee3d0be246550d82d6fec52a848084eac40c4168d180dd5f90059d5d4da75757611a8ef47d8aeb19ec1cda8a4111123bfb64aabe88d8c4135e25546905dc57f8b890cb37c62fed82f1ad957c03e08825a17917068de56264d82eed8a995db17fd313cd8e4db0057908c8bc932f6219931f7b80ce545df4910a4b5d533572bd3dd6aa81a56903ee46448cc3a62c293e0e686f0c5d179a0184d98607e4f6f15eb843abd72adf1"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x1, 0xff, "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"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x40}}) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000001000)={0x0, 0x31, 0x2, {0x2, 0x9}}, &(0x7f0000000280)={0x0, 0x3, 0x29, @string={0x29, 0x3, "49f2378e2510e17d67b7f8c35f7129b1358df5a864299110e20614ba97b22deae8e980cf31eeec"}}, &(0x7f0000000740)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "29b28e5f68349189a7115b40ca56e021"}, @generic={0x6, 0x10, 0x4, 'kW\b'}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x41, 0x0, 0x0, 0x8, "3502efd7", "b924cd74"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3, 0x0, 0x9, 0x8001}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x40, 0xe, 0x14, "8895b0956e2c0aaf110e8b21b666aa26593acfb8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xfffb}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x64}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 't\\'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'G9'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000240)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xcd}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000001180)={0x24, &(0x7f0000001040)={0x20, 0x5, 0x4a, {0x4a, 0x11, "5273d667dcd4f8479ec669e7103de3abb54c0b0668ae016a6fc880fa51be6aece939bc0cc2e3fea3697e24a5bda0b49a174b78f54615ebaec2bb4f2d7c7d10bc870002205d82df36"}}, &(0x7f00000010c0)={0x0, 0x3, 0x45, @string={0x45, 0x3, "c848a4f0cebe3a2b6c54514942161904a7379e98764a041d7ea076b78e96224c79ff0606c36f12db46f280bf40a439f9ea98b6e0d8c9619623b646a531765c790dae52"}}, &(0x7f00000002c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x8, "501faf39"}, @main=@item_4={0x3, 0x0, 0x8, "94278654"}]}}, &(0x7f0000001140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0xcfd}}}}, &(0x7f0000001440)={0x2c, &(0x7f00000011c0)={0x0, 0x15, 0xbc, "638ebea0d7b8cd6c152f3cb6fddddbf9108cb4cda34303c71ac7cdd5c1ae2c383d41bda7ef965638d31bd8cd47c46c7b350cc1ec85386844904964700b1a93fb71e0d92ecbef7211ece1fb95f591322a60ce87269b4344f2410b4a1c6e1982f13af2486a079f0c9c6836ced98bdbf3078fcd7baa74c5f535afa22a3dbeae0440d14bd03348aebd74dd03ac2a7da4570167d4b257390ec8a102626483df031529a43e60caf211fe49f82f3651912d49a6a6435a8f181df882110fa840"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001340)={0x20, 0x1, 0x83, "062e3284bf3ccadae7b8c91c9055fe11cb9b6b9f686d504731283e82d5fc51ed6f3a58b83de22348623b0f7a47b7114d7222dc23c3293ec85652f68aa7475a93c4a70bb7216dbc0efc647c189161e404c59c8ad675c6c393cd82cf3ffea435f5cb33e59dfc7f11bd13609094ae9f381175497515c034c85fe20c3cdf42214a803c0f6d"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x6}}) 07:37:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x5c, 0x0, 0x0}) 07:37:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:40 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 07:37:40 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x3c, &(0x7f0000000c40)={0x5, 0xf, 0x3c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x2, 0x401}, @generic={0x30, 0x10, 0x0, "8901a212833bd5f683f54cc51fe50700000056d418a08535d3c543fcaea7c784bb3ff3f5000000000000000000"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x5, 0xf1, {0xf1, 0x4, "f0d466c53cfa1b373cf6c493f4eaf7e8d4008a2bd8aabe8f6d940fd6d53c6ee094a59dde680117b4187336455bc542058f3e57421ee2f9a885bb79c30b4e5dad3feaca3176f68bfdd874c5f5ffa52205a87ff5f0d4fbb5e36fb01fefb92847e3f3646ea79411491093cfe4e7f18cfc52c48e214c83dc25ff402df36adfee3b60909d5630251e7ccacd7116b79cb7ba06f154beb8636af657eb5fe7e5700f5b257e3d1f23046a0c0cc44d6e0489eb3520b9146a092ad3c95c2b9f02d34228f66be6f7a08a333625a438bdbc67af74f43127fb6050408f66c4247b5d54d7cd8ad29e964a2cd4dc68c37749b4ff00d788"}}, &(0x7f0000000200)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "65b021040917166e04986d6b2705b18db33fb95c27b369bd9d320240c966a046dece81d1561335477293caab4af455ef33c2563bb80e7f21fc23bf"}}, &(0x7f0000000280)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x9, 0xf00, 0x7, [0xff3f60, 0x30, 0xf, 0xf, 0xff00, 0x3f30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x1, 0x2995}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x9, 0xf00f, 0x2000, [0xc0, 0x0, 0x0, 0x1f80, 0x2e]}, @ssp_cap={0xc, 0x10, 0xa, 0xbe, 0x0, 0x0, 0x7800, 0xff}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0xb, 0x5, 0x14, "2cec2b72", "459b6832"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x3f, 0xf9, 0xfb, 0xf800, 0x2d10}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x20, 0x14, 0x16, "64cf046a9b360cc12dc4656c01234a28fa98965c4bab"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x2, 0x2, [0xf]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "0c1a"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "e238"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x94}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1671.683331][T20923] binder: 20920:20923 ioctl c00c620f 20000100 returned -22 [ 1671.718203][T20922] binder: 20919:20922 ioctl c0306201 20001480 returned -14 07:37:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_CREATE_OPEN(r0, 0x0, 0xfe33) [ 1671.757389][T20924] binder: 20915:20924 ioctl c0306201 20001480 returned -14 07:37:40 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1671.798126][T20924] binder: 20915:20924 ioctl c0306201 20000100 returned -14 [ 1671.833693][T20922] binder: BINDER_SET_CONTEXT_MGR already set [ 1671.839870][T20922] binder: 20919:20922 ioctl 40046207 20000100 returned -16 07:37:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x68, 0x0, 0x0}) 07:37:41 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000002ac0)='./file1\x00', 0x63c29fc8d6983244, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1, 0x93) [ 1671.972504][T16196] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1671.986781][T20931] binder: 20929:20931 ioctl c00c620f 20000100 returned -22 07:37:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:41 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1672.082431][T11046] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1672.126675][T20934] binder: 20932:20934 ioctl c0306201 20001480 returned -14 [ 1672.189104][T20934] binder: 20932:20934 ioctl c0306201 20000100 returned -14 [ 1672.222299][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1672.267945][T20939] binder: 20937:20939 ioctl c00c620f 20000100 returned -22 [ 1672.270080][T20938] binder: 20936:20938 ioctl c0306201 20001480 returned -14 [ 1672.324192][T11046] usb 6-1: Using ep0 maxpacket: 32 [ 1672.345742][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1672.354488][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1672.363445][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1672.372730][T16196] usb 1-1: config 1 has no interface number 0 [ 1672.379028][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1672.390584][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1672.403862][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1672.413231][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.483255][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1672.502600][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1672.511219][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1672.520249][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1672.529656][T11046] usb 6-1: config 1 has no interface number 0 [ 1672.536269][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1672.547550][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1672.560858][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1672.574180][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.630367][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1672.684040][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1672.833693][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1672.902598][T20918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.912403][T20918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.503856][T11046] usb 1-1: USB disconnect, device number 124 [ 1673.522613][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:37:42 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) (async) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x80, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0xfff, 0x40, 0x1, {0x22, 0x61c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x1, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x82, 0x1f}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x20, 0x7, 0x1f, 0xff, 0x8}, 0x29, &(0x7f00000000c0)={0x5, 0xf, 0x63, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0xf0f, 0x3}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1465}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)={0x40, 0x6, 0xc4, {0xc4, 0x6, "8ae1bc16d6a81d56469d0713fad58e6bc8e83a7bb502fceeb1aa5c13956cdb31667179c2ef68d043ce8fd0da5e2a05ee9be0ebeb16f5c25d5a5d4aefd52a279658ceb039b817147f2a5e66849c1601308e3593b7eb9fa36595d53dd0629d71d5b0ec10a29872fe4820fea0bea49294b9fe91aeecf238637f0e77285298bcb48792594bb3f0cacaa57407c6c45d120bf55555391f4d223e9f1441d645425827d9038f8395baa38a5fc204079bd012c47439721cd555eaf63235590512e418e574217e"}}, &(0x7f0000000b00)=ANY=[@ANYBLOB="00039f505909b805eff20000009f03ce593393462b1da27f28747cb03aee0be14bd269c6ebdd34fe4b0efa7b0ac4815242d2fed53079215e567c6f90cbb067c0aded1b15cadb9c60634dc244edd48911bbb7646a5ad6524c7dbcd0a8e2bfa29ec4fdc6d3e5610fb71e5748a3af468ca4000cea2769768e049a7ef1b2faa9533b9bd61fc20de42eb5e6838ccb7314cbd2fc4d8545252f2af6690131026ebb07eb7e105c20a9"], &(0x7f0000000800)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x5, "3d6b905f"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4cf, 0x8, 0x1, {0x22, 0xf05}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d00)={0x0, 0x5, 0xc3, "71ebb64ddaae7909e4a6e5373dac5c7aa038d0fb97823976ea78bdd31f6ee3d0be246550d82d6fec52a848084eac40c4168d180dd5f90059d5d4da75757611a8ef47d8aeb19ec1cda8a4111123bfb64aabe88d8c4135e25546905dc57f8b890cb37c62fed82f1ad957c03e08825a17917068de56264d82eed8a995db17fd313cd8e4db0057908c8bc932f6219931f7b80ce545df4910a4b5d533572bd3dd6aa81a56903ee46448cc3a62c293e0e686f0c5d179a0184d98607e4f6f15eb843abd72adf1"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x1, 0xff, "f637d453b52f5c1c5e1e6d03c7ee1a7ac94d1a92aee4534f7faa817c1f32944287d242ca211d5a170550b88b5e45bc0df8ffb7a933cd3a3e6d778103b42daf0a87ede7db104130f483494acd12ea2cdd3da9a5ac8393db0f5d7706f41d0ea27450b91f4e69db5bde8a0cc716c6d5925dd241a0a02e44b44aa09f7fea7d3dd6050152ce0307d8e11acae2b1266596fb8d030f668fd1b97710ea1abc88839324dcc541d6384a4cef2e42b6703edc602a75894d5378a53131e9fa9d64344a917867f6875a28cb0d3cc6b73ed76d6c9abda4e91a432b580b1fc09ab5aa6da6dc40d89477ef9560d3d998ebca8341cd029bbaa06eda04650fdc4e53d980d1a2e8a4"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x40}}) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000001000)={0x0, 0x31, 0x2, {0x2, 0x9}}, &(0x7f0000000280)={0x0, 0x3, 0x29, @string={0x29, 0x3, "49f2378e2510e17d67b7f8c35f7129b1358df5a864299110e20614ba97b22deae8e980cf31eeec"}}, &(0x7f0000000740)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "29b28e5f68349189a7115b40ca56e021"}, @generic={0x6, 0x10, 0x4, 'kW\b'}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x41, 0x0, 0x0, 0x8, "3502efd7", "b924cd74"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x3, 0x0, 0x9, 0x8001}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x40, 0xe, 0x14, "8895b0956e2c0aaf110e8b21b666aa26593acfb8"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xfffb}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x64}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 't\\'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'G9'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000240)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xcd}}) syz_usb_control_io$hid(r1, &(0x7f0000001180)={0x24, &(0x7f0000001040)={0x20, 0x5, 0x4a, {0x4a, 0x11, "5273d667dcd4f8479ec669e7103de3abb54c0b0668ae016a6fc880fa51be6aece939bc0cc2e3fea3697e24a5bda0b49a174b78f54615ebaec2bb4f2d7c7d10bc870002205d82df36"}}, &(0x7f00000010c0)={0x0, 0x3, 0x45, @string={0x45, 0x3, "c848a4f0cebe3a2b6c54514942161904a7379e98764a041d7ea076b78e96224c79ff0606c36f12db46f280bf40a439f9ea98b6e0d8c9619623b646a531765c790dae52"}}, &(0x7f00000002c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x8, "501faf39"}, @main=@item_4={0x3, 0x0, 0x8, "94278654"}]}}, &(0x7f0000001140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0xcfd}}}}, &(0x7f0000001440)={0x2c, &(0x7f00000011c0)={0x0, 0x15, 0xbc, "638ebea0d7b8cd6c152f3cb6fddddbf9108cb4cda34303c71ac7cdd5c1ae2c383d41bda7ef965638d31bd8cd47c46c7b350cc1ec85386844904964700b1a93fb71e0d92ecbef7211ece1fb95f591322a60ce87269b4344f2410b4a1c6e1982f13af2486a079f0c9c6836ced98bdbf3078fcd7baa74c5f535afa22a3dbeae0440d14bd03348aebd74dd03ac2a7da4570167d4b257390ec8a102626483df031529a43e60caf211fe49f82f3651912d49a6a6435a8f181df882110fa840"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001340)={0x20, 0x1, 0x83, "062e3284bf3ccadae7b8c91c9055fe11cb9b6b9f686d504731283e82d5fc51ed6f3a58b83de22348623b0f7a47b7114d7222dc23c3293ec85652f68aa7475a93c4a70bb7216dbc0efc647c189161e404c59c8ad675c6c393cd82cf3ffea435f5cb33e59dfc7f11bd13609094ae9f381175497515c034c85fe20c3cdf42214a803c0f6d"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x6}}) 07:37:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 07:37:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x300, 0x0, 0x0}) 07:37:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046210, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:42 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1673.642024][ T5037] usb 6-1: USB disconnect, device number 107 [ 1673.672556][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1673.717577][T20953] binder: 20944:20953 ioctl c00c620f 20000100 returned -22 [ 1673.751605][T20946] binder: 20945:20946 ioctl c0306201 20001480 returned -14 [ 1673.759265][T20954] binder: 20952:20954 ioctl c0306201 20001480 returned -14 [ 1673.824075][T20946] binder: 20945:20946 ioctl c0306201 20000100 returned -14 07:37:43 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x3c, &(0x7f0000000c40)={0x5, 0xf, 0x3c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x2, 0x401}, @generic={0x30, 0x10, 0x0, "8901a212833bd5f683f54cc51fe50700000056d418a08535d3c543fcaea7c784bb3ff3f5000000000000000000"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x5, 0xf1, {0xf1, 0x4, "f0d466c53cfa1b373cf6c493f4eaf7e8d4008a2bd8aabe8f6d940fd6d53c6ee094a59dde680117b4187336455bc542058f3e57421ee2f9a885bb79c30b4e5dad3feaca3176f68bfdd874c5f5ffa52205a87ff5f0d4fbb5e36fb01fefb92847e3f3646ea79411491093cfe4e7f18cfc52c48e214c83dc25ff402df36adfee3b60909d5630251e7ccacd7116b79cb7ba06f154beb8636af657eb5fe7e5700f5b257e3d1f23046a0c0cc44d6e0489eb3520b9146a092ad3c95c2b9f02d34228f66be6f7a08a333625a438bdbc67af74f43127fb6050408f66c4247b5d54d7cd8ad29e964a2cd4dc68c37749b4ff00d788"}}, &(0x7f0000000200)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "65b021040917166e04986d6b2705b18db33fb95c27b369bd9d320240c966a046dece81d1561335477293caab4af455ef33c2563bb80e7f21fc23bf"}}, &(0x7f0000000280)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x9, 0xf00, 0x7, [0xff3f60, 0x30, 0xf, 0xf, 0xff00, 0x3f30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x1, 0x2995}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x9, 0xf00f, 0x2000, [0xc0, 0x0, 0x0, 0x1f80, 0x2e]}, @ssp_cap={0xc, 0x10, 0xa, 0xbe, 0x0, 0x0, 0x7800, 0xff}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0xb, 0x5, 0x14, "2cec2b72", "459b6832"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x3f, 0xf9, 0xfb, 0xf800, 0x2d10}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x20, 0x14, 0x16, "64cf046a9b360cc12dc4656c01234a28fa98965c4bab"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x2, 0x2, [0xf]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "0c1a"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "e238"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x94}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 07:37:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x500, 0x0, 0x0}) [ 1674.159556][T20964] binder: 20961:20964 ioctl c00c620f 20000100 returned -22 [ 1674.168405][T20962] binder: 20959:20962 ioctl c0306201 20001480 returned -14 [ 1674.177842][T20963] binder: 20957:20963 ioctl c0306201 20001480 returned -14 [ 1674.192570][ T5037] usb 6-1: new high-speed USB device number 108 using dummy_hcd 07:37:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000180)="4336abe6ba4feac0", 0x8) [ 1674.225378][T20962] binder: 20959:20962 ioctl c0306201 20000100 returned -14 07:37:43 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2a4c000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1674.446166][T20970] binder: 20969:20970 ioctl c00c620f 20000100 returned -22 [ 1674.465117][ T5037] usb 6-1: Using ep0 maxpacket: 32 [ 1674.572347][T11153] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1674.616211][ T5037] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1674.625460][ T5037] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1674.634408][ T5037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1674.643673][ T5037] usb 6-1: config 1 has no interface number 0 [ 1674.649999][ T5037] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1674.661194][ T5037] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1674.674443][ T5037] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1674.683850][ T5037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.750350][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1674.891959][T11153] usb 1-1: Using ep0 maxpacket: 32 [ 1674.964231][ T5037] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1675.032632][T11153] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1675.041207][T11153] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1675.050292][T11153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1675.059973][T11153] usb 1-1: config 1 has no interface number 0 [ 1675.066312][T11153] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1675.077762][T11153] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1675.091075][T11153] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1675.100727][T11153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.190847][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1675.403647][T11153] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1675.561561][T11153] usb 6-1: USB disconnect, device number 108 [ 1675.581545][T11153] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1675.609820][T20966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.619636][T20966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x600, 0x0, 0x0}) 07:37:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 07:37:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80002, @private1={0xfc, 0x1, '\x00', 0xff}, 0x1800003}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xee01, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f8100026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b7b0b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248670f10007a315728e7794cfdf84e"]}) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x2c4c000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1676.182914][T20980] binder: 20976:20980 ioctl c00c620f 20000100 returned -22 [ 1676.193493][T20979] binder: 20974:20979 ioctl c0306201 20001480 returned -14 [ 1676.215947][T20978] binder: 20977:20978 ioctl c0306201 20001480 returned -14 [ 1676.236502][T20979] binder: 20974:20979 ioctl 40086602 20000100 returned -22 [ 1676.262949][ T5037] usb 1-1: USB disconnect, device number 125 [ 1676.305804][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1676.311596][T20978] binder: 20977:20978 ioctl c0306201 20000100 returned -14 [ 1676.612050][T11046] usb 6-1: new high-speed USB device number 109 using dummy_hcd 07:37:45 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x3c, &(0x7f0000000c40)={0x5, 0xf, 0x3c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x2, 0x401}, @generic={0x30, 0x10, 0x0, "8901a212833bd5f683f54cc51fe50700000056d418a08535d3c543fcaea7c784bb3ff3f5000000000000000000"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0x5, 0xf1, {0xf1, 0x4, "f0d466c53cfa1b373cf6c493f4eaf7e8d4008a2bd8aabe8f6d940fd6d53c6ee094a59dde680117b4187336455bc542058f3e57421ee2f9a885bb79c30b4e5dad3feaca3176f68bfdd874c5f5ffa52205a87ff5f0d4fbb5e36fb01fefb92847e3f3646ea79411491093cfe4e7f18cfc52c48e214c83dc25ff402df36adfee3b60909d5630251e7ccacd7116b79cb7ba06f154beb8636af657eb5fe7e5700f5b257e3d1f23046a0c0cc44d6e0489eb3520b9146a092ad3c95c2b9f02d34228f66be6f7a08a333625a438bdbc67af74f43127fb6050408f66c4247b5d54d7cd8ad29e964a2cd4dc68c37749b4ff00d788"}}, &(0x7f0000000200)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "65b021040917166e04986d6b2705b18db33fb95c27b369bd9d320240c966a046dece81d1561335477293caab4af455ef33c2563bb80e7f21fc23bf"}}, &(0x7f0000000280)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x9, 0xf00, 0x7, [0xff3f60, 0x30, 0xf, 0xf, 0xff00, 0x3f30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x1, 0x2995}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x9, 0xf00f, 0x2000, [0xc0, 0x0, 0x0, 0x1f80, 0x2e]}, @ssp_cap={0xc, 0x10, 0xa, 0xbe, 0x0, 0x0, 0x7800, 0xff}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0xb, 0x5, 0x14, "2cec2b72", "459b6832"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x3f, 0xf9, 0xfb, 0xf800, 0x2d10}}}, &(0x7f0000000940)={0x84, &(0x7f00000003c0)={0x20, 0x14, 0x16, "64cf046a9b360cc12dc4656c01234a28fa98965c4bab"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x2, 0x2, [0xf]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "0c1a"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "e238"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x94}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:45 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x311003, 0x0) 07:37:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x700, 0x0, 0x0}) [ 1676.852716][T11046] usb 6-1: Using ep0 maxpacket: 32 07:37:46 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003680)={0x6, 0x3, &(0x7f0000003240)=@framed, &(0x7f0000003280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003640), 0x10}, 0x80) [ 1676.878871][T20991] binder: 20987:20991 ioctl c0306201 20001480 returned -14 [ 1676.910215][T20992] binder: 20989:20992 ioctl c0306201 20001480 returned -14 [ 1676.919128][T20993] binder: 20990:20993 ioctl c00c620f 20000100 returned -22 [ 1676.976837][T11046] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1676.986268][T11046] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1676.995311][T11046] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1677.004588][T11046] usb 6-1: config 1 has no interface number 0 [ 1677.010898][T11046] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1677.022253][T11046] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1677.035582][T11046] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1677.045020][T11046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:37:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1677.082050][T20991] binder_alloc: 20987: binder_alloc_buf size 128 failed, no address space [ 1677.087169][T20992] binder: 20989:20992 ioctl 400c620e 20000100 returned -22 [ 1677.090686][T20991] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 1677.108236][T20991] binder: 20987:20991 ioctl c0306201 20000100 returned -14 07:37:46 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003680)={0x6, 0x3, &(0x7f0000003240)=@framed, &(0x7f0000003280)='syzkaller\x00', 0x0, 0x14, &(0x7f00000032c0)=""/20, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:37:46 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1677.249609][T21001] binder: 21000:21001 ioctl c00c620f 20000100 returned -22 [ 1677.289687][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found 07:37:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x5c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1677.332237][T16196] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1677.462390][T21007] binder: 21003:21007 ioctl c00c620f 20000100 returned -22 [ 1677.491672][T21006] binder: BINDER_SET_CONTEXT_MGR already set [ 1677.498190][T21006] binder: 21004:21006 ioctl 4018620d 20000000 returned -16 [ 1677.512568][T11046] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1677.572421][T16196] usb 1-1: Using ep0 maxpacket: 32 [ 1677.597190][T21006] binder: 21004:21006 ioctl c0306201 20001480 returned -14 [ 1677.697714][T16196] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1677.706457][T16196] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1677.715529][T16196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1677.724808][T16196] usb 1-1: config 1 has no interface number 0 [ 1677.731064][T16196] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1677.742602][T16196] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1677.755973][T16196] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1677.765775][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.820092][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1678.018385][T20996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1678.026947][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1678.035085][T20996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.564120][T16196] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1678.626222][T16196] usb 1-1: USB disconnect, device number 126 [ 1678.645390][T16196] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:37:48 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80002, @private1={0xfc, 0x1, '\x00', 0xff}, 0x1800003}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xee01, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f8100026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b7b0b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248670f10007a315728e7794cfdf84e"]}) (async) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x900, 0x0, 0x0}) 07:37:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x10}}, &(0x7f0000000d80)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 07:37:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:48 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40186366, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:48 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x84, {0x5, 0xf, 0x84, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "c9e5893bacfdda64cf82a851fe71a4aa"}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) [ 1679.312605][T16196] usb 6-1: USB disconnect, device number 109 [ 1679.372478][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1679.474196][T21018] binder: 21014:21018 ioctl c00c620f 20000100 returned -22 [ 1679.480368][T21016] binder: 21012:21016 ioctl c0306201 20001480 returned -14 07:37:48 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)) [ 1679.519396][T21016] binder: 21012:21016 ioctl 40186366 20000100 returned -22 [ 1679.522192][T21019] binder: 21013:21019 ioctl c0306201 20001480 returned -14 07:37:48 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) [ 1679.601478][T21019] binder: 21013:21019 ioctl c0306201 20000100 returned -14 07:37:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xa00, 0x0, 0x0}) [ 1679.702598][T11046] usb 1-1: new high-speed USB device number 127 using dummy_hcd 07:37:48 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000840)) [ 1679.791355][T21028] binder: 21026:21028 ioctl c00c620f 20000100 returned -22 07:37:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1679.857434][T21029] binder: 21027:21029 ioctl c0306201 20001480 returned -14 [ 1679.909250][T21029] binder: 21027:21029 ioctl 401c5820 20000100 returned -22 [ 1679.927125][T21031] binder: 21030:21031 ioctl c0306201 20001480 returned -14 [ 1679.946143][T11046] usb 1-1: Using ep0 maxpacket: 32 [ 1679.956319][T21031] binder: 21030:21031 ioctl c0306201 20000100 returned -14 [ 1680.032276][T16196] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1680.063327][T11046] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1680.072159][T11046] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1680.081001][T11046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1680.090372][T11046] usb 1-1: config 1 has no interface number 0 [ 1680.096827][T11046] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1680.108170][T11046] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1680.121474][T11046] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1680.131142][T11046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.164764][T21035] binder: 21034:21035 ioctl c00c620f 20000100 returned -22 [ 1680.271045][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1680.352819][T16196] usb 6-1: Using ep0 maxpacket: 32 [ 1680.473930][T11046] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1680.484512][T16196] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1680.493289][T16196] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1680.502382][T16196] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1680.511557][T16196] usb 6-1: config 1 has no interface number 0 [ 1680.518023][T16196] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1680.529240][T16196] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1680.542755][T16196] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1680.556442][T16196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.620684][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found 07:37:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) (async) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x21f4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80002, @private1={0xfc, 0x1, '\x00', 0xff}, 0x1800003}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80002, @private1={0xfc, 0x1, '\x00', 0xff}, 0x1800003}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xee01, 0x0) (async) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xee01, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f8100026d1000bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b7b0b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c248670f10007a315728e7794cfdf84e"]}) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:49 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xb00, 0x0, 0x0}) 07:37:49 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 07:37:49 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1680.843339][T16196] snd_usb_pod 6-1:1.1: set_interface failed [ 1680.849612][T16196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1680.858112][T16196] snd_usb_pod: probe of 6-1:1.1 failed with error -71 [ 1680.884303][T16196] usb 6-1: USB disconnect, device number 110 [ 1681.004876][T21039] binder: 21037:21039 ioctl c0306201 20001480 returned -14 [ 1681.036748][T21045] binder: 21040:21045 ioctl c00c620f 20000100 returned -22 [ 1681.050376][T21043] binder: 21038:21043 ioctl c0306201 20001480 returned -14 [ 1681.138127][T21043] binder: 21038:21043 ioctl c0306201 20000100 returned -14 [ 1681.257531][ T5037] usb 1-1: USB disconnect, device number 127 [ 1681.287844][ T5037] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected 07:37:50 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0xa2, &(0x7f0000000c40)={0x5, 0xf, 0xa2, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0x30, 0x10, 0x0, "7a315728e7794cfdf84e7ebb32d97f01a212833bd5f683f531c51fe559e12d1e56d418a08535d3c784bb3ff3f5"}]}}) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x84, {0x5, 0xf, 0x84, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "c9e5893bacfdda64cf82a851fe71a4aa"}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) 07:37:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="0049f8000099be0000000000892f", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="bf810b10297a"}, 0x14) 07:37:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80086301, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x70742a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 07:37:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000100)={0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:37:50 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x81, &(0x7f0000000c40)={0x5, 0xf, 0x81, 0x2, [@generic={0x6d, 0x10, 0x0, "bb92bc65c16d00d1933aef83913dbfaf0420447ccd55b0a2a76420b4b1c786de0d5c2fc1a4b9d587186fdecd4e0649876c6002b90987044f632e511ed7221e53b538532d22a2ab2915da29ff5c5f6423533a432d73cf5111dab5f5fd9e519d0f5cd55e925fda20c24867"}, @generic={0xf, 0x10, 0x0, "7a315728e7794cfdf84e7ebb"}]}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x7c, {0x5, 0xf, 0x7c, 0x2, [@ssp_cap={0xc}, @generic={0x6b, 0x10, 0x0, "f1005188bdea8e59973de97b721f8225cf84ce51c416975f09e1c4b1bef514ae562b6b4c3704b42ec8a2e40efbe6e992522a6e26dd048a1808fc63bbfa9174fb4b27e6ad3015216b00370ba883343f89433226a66d8450f71a61210163ebaec1b4c24baae7cf78bf"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x441, &(0x7f0000000900)=ANY=[]) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x0, 0x1, 0x56, {0x56, 0xf, "1389f3abfa8696add36e3576267d7dd0a173e06e470814ce5461027fbf76f52d0a996c5bcd9a31099fe5bbb4ba73658ee3c56a7e03e5293777a67d4bbc8ccb44a70df96f378f225715e2412c5827541eb278fd36"}}, &(0x7f00000000c0)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "0d0d8ae59e4f9758df8d5d0917dde78a676a6f455ceb511e17650a28f7bb846b5c0484c56e33a8bcbc5437034b4143ac7b114de11d41ab42b49f696487cf99ac05b4097e8976c4967049fdcbaac4f8b61722c58b6d0662a4ce4379e38a6bea6d40487835299969dd66572470791e85634fea5d1f3acdf49e88f7d3683eefc0b0f469caee8f62855c0b36151d4f11e1fadffdb69a10f3121add69b937ccd1a75e7ca886c339ba"}}, &(0x7f0000000180), &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0xf3d}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x17, 0x23, "c61288997e270bb18da07f99bbbb8f81b4da5c6d31e97f86fca877f56396a7090a77b1"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x1, 0x1b, "5fe83c4158ced68eb42f76cb8dfdc794f8a4f2a44d003f0188ee88"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x5}}) 07:37:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@fda={0x77622a85}, @ptr={0x77622a85, 0x0, 0x0}, @fda={0x66642a85}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0xc00, 0x0, 0x0}) [ 1681.918875][T21052] binder: 21051:21052 ioctl c0306201 20001480 returned -14 [ 1681.929391][T21058] ===================================================== [ 1681.936871][T21058] BUG: KMSAN: uninit-value in hsr_get_node+0xa2e/0xa40 [ 1681.944041][T21058] hsr_get_node+0xa2e/0xa40 [ 1681.946222][T21059] binder: 21053:21059 ioctl c00c620f 20000100 returned -22 [ 1681.948856][T21058] hsr_forward_skb+0x328/0x30f0 [ 1681.961239][T21058] hsr_dev_xmit+0x192/0x330 [ 1681.966077][T21058] dev_hard_start_xmit+0x247/0xa10 [ 1681.971449][T21058] __dev_queue_xmit+0x34eb/0x50f0 [ 1681.976886][T21058] packet_xmit+0x9c/0x6b0 [ 1681.981526][T21058] packet_sendmsg+0x8a5d/0x9de0 [ 1681.986675][T21058] __sys_sendto+0x76c/0xa10 [ 1681.991360][T21058] __x64_sys_sendto+0x125/0x1c0 [ 1681.996683][T21058] do_syscall_64+0x41/0xc0 [ 1682.001289][T21058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1682.007500][T21058] [ 1682.009901][T21058] Uninit was created at: [ 1682.014484][T21058] slab_post_alloc_hook+0x12d/0xb60 [ 1682.019844][T21058] kmem_cache_alloc_node+0x535/0xa30 [ 1682.025453][T21058] kmalloc_reserve+0x148/0x470 [ 1682.030404][T21058] __alloc_skb+0x318/0x740 [ 1682.035194][T21058] alloc_skb_with_frags+0xbd/0xbb0 [ 1682.040463][T21058] sock_alloc_send_pskb+0xa80/0xbf0 [ 1682.045981][T21058] packet_sendmsg+0x6fc2/0x9de0 [ 1682.050981][T21058] __sys_sendto+0x76c/0xa10 [ 1682.055800][T21058] __x64_sys_sendto+0x125/0x1c0 [ 1682.060832][T21058] do_syscall_64+0x41/0xc0 [ 1682.065570][T21058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1682.071640][T21058] [ 1682.074208][T21058] CPU: 1 PID: 21058 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1682.084347][T21058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1682.094668][T21058] ===================================================== [ 1682.102398][T21058] Disabling lock debugging due to kernel taint [ 1682.108652][T21058] Kernel panic - not syncing: kmsan.panic set ... [ 1682.115269][T21058] CPU: 1 PID: 21058 Comm: syz-executor.3 Tainted: G B 6.4.0-rc3-syzkaller-gf93f2feda5d6 #0 [ 1682.126804][T21058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 1682.136992][T21058] Call Trace: [ 1682.140367][T21058] [ 1682.143390][T21058] dump_stack_lvl+0x1bf/0x240 [ 1682.148250][T21058] dump_stack+0x1e/0x20 [ 1682.152574][T21058] panic+0x4d5/0xc70 [ 1682.156675][T21058] ? add_taint+0x108/0x1a0 [ 1682.161264][T21058] kmsan_report+0x2d0/0x2d0 [ 1682.165968][T21058] ? __msan_warning+0x96/0x110 [ 1682.170914][T21058] ? hsr_get_node+0xa2e/0xa40 [ 1682.175775][T21058] ? hsr_forward_skb+0x328/0x30f0 [ 1682.180994][T21058] ? hsr_dev_xmit+0x192/0x330 [ 1682.185873][T21058] ? dev_hard_start_xmit+0x247/0xa10 [ 1682.191322][T21058] ? __dev_queue_xmit+0x34eb/0x50f0 [ 1682.196694][T21058] ? packet_xmit+0x9c/0x6b0 [ 1682.201378][T21058] ? packet_sendmsg+0x8a5d/0x9de0 [ 1682.206555][T21058] ? __sys_sendto+0x76c/0xa10 [ 1682.211428][T21058] ? __x64_sys_sendto+0x125/0x1c0 [ 1682.216723][T21058] ? do_syscall_64+0x41/0xc0 [ 1682.221482][T21058] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1682.227698][T21058] ? kmsan_internal_poison_memory+0x49/0xa0 [ 1682.233761][T21058] ? kmsan_slab_alloc+0xdd/0x150 [ 1682.238863][T21058] ? slab_post_alloc_hook+0x12d/0xb60 [ 1682.244371][T21058] ? kmem_cache_alloc_node+0x535/0xa30 [ 1682.249968][T21058] ? kmalloc_reserve+0x148/0x470 [ 1682.255065][T21058] ? __alloc_skb+0x318/0x740 [ 1682.259811][T21058] ? alloc_skb_with_frags+0xbd/0xbb0 [ 1682.265238][T21058] ? sock_alloc_send_pskb+0xa80/0xbf0 [ 1682.270868][T21058] ? packet_sendmsg+0x6fc2/0x9de0 [ 1682.276025][T21058] ? __sys_sendto+0x76c/0xa10 [ 1682.280872][T21058] ? __x64_sys_sendto+0x125/0x1c0 [ 1682.286055][T21058] ? do_syscall_64+0x41/0xc0 [ 1682.290795][T21058] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1682.297015][T21058] ? kmsan_internal_poison_memory+0x49/0xa0 [ 1682.303087][T21058] ? kmsan_slab_alloc+0xdd/0x150 [ 1682.308193][T21058] ? slab_post_alloc_hook+0x12d/0xb60 [ 1682.313702][T21058] ? kmem_cache_alloc_node+0x535/0xa30 [ 1682.319298][T21058] ? __alloc_skb+0x1e5/0x740 [ 1682.324036][T21058] ? alloc_skb_with_frags+0xbd/0xbb0 [ 1682.329464][T21058] ? sock_alloc_send_pskb+0xa80/0xbf0 [ 1682.334981][T21058] ? packet_sendmsg+0x6fc2/0x9de0 [ 1682.340142][T21058] ? __sys_sendto+0x76c/0xa10 [ 1682.344975][T21058] ? __x64_sys_sendto+0x125/0x1c0 [ 1682.350166][T21058] ? do_syscall_64+0x41/0xc0 [ 1682.354901][T21058] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1682.361220][T21058] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1682.367200][T21058] ? hsr_forward_skb+0x43/0x30f0 [ 1682.372308][T21058] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1682.378290][T21058] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1682.384270][T21058] __msan_warning+0x96/0x110 [ 1682.389018][T21058] hsr_get_node+0xa2e/0xa40 [ 1682.393703][T21058] hsr_forward_skb+0x328/0x30f0 [ 1682.398753][T21058] hsr_dev_xmit+0x192/0x330 [ 1682.403421][T21058] ? is_hsr_master+0x90/0x90 [ 1682.408171][T21058] dev_hard_start_xmit+0x247/0xa10 [ 1682.413439][T21058] __dev_queue_xmit+0x34eb/0x50f0 [ 1682.418637][T21058] packet_xmit+0x9c/0x6b0 [ 1682.423111][T21058] packet_sendmsg+0x8a5d/0x9de0 [ 1682.428101][T21058] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 1682.434094][T21058] ? aa_label_sk_perm+0x64c/0x790 [ 1682.439297][T21058] ? filter_irq_stacks+0x60/0x1a0 [ 1682.444489][T21058] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1682.450947][T21058] ? packet_getsockopt+0xfb0/0xfb0 [ 1682.456189][T21058] __sys_sendto+0x76c/0xa10 [ 1682.460869][T21058] ? xfd_validate_state+0x89/0x210 [ 1682.466162][T21058] __x64_sys_sendto+0x125/0x1c0 [ 1682.471303][T21058] do_syscall_64+0x41/0xc0 [ 1682.475898][T21058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1682.482149][T21058] RIP: 0033:0x7facda28c169 [ 1682.486674][T21058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1682.506444][T21058] RSP: 002b:00007facdafeb168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1682.515000][T21058] RAX: ffffffffffffffda RBX: 00007facda3abf80 RCX: 00007facda28c169 [ 1682.523098][T21058] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000003 [ 1682.531172][T21058] RBP: 00007facda2e7ca1 R08: 0000000020000100 R09: 0000000000000014 [ 1682.539255][T21058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.547325][T21058] R13: 00007facda4cfb1f R14: 00007facdafeb300 R15: 0000000000022000 [ 1682.555427][T21058] [ 1682.558768][T21058] Kernel Offset: disabled [ 1682.563146][T21058] Rebooting in 86400 seconds..