7b95e17b512985d592206ad8aae45ccebc0efb482de6f16da633fa7bf6549b3841e2ba668daaaec61f17ae4ba2817"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x9, 0x9, 0x2, [@generic={0x32, 0x23, "58bcd067efeb353ce77d7dc7ea309ce163d36a218c20c83e980e8629018861ce2445396e0c3e0b8ef0137c2626e5f16d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x8, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x7, 0x0, 0x6, 0x10, 0x6}, 0x2e, &(0x7f0000000040)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "180251959d47345c72a50646462fb16d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xb, 0x5, 0x400, 0x6}]}, 0x4, [{0xb3, &(0x7f0000000140)=@string={0xb3, 0x3, "362bac58b10ae3c52a459c5ec2e657181f60c8cc5d45927ff870d22c60080a7d4015e271d106eac9c6946d448b26139b759c0160a35482531060ef6edca25cf135f1ea5991d793193952224145d59613e7083953060b3a5068c0e3c56052c5ec99396e7220ccec0e3ca3fe92f8dc77e2839c4df7c7d2ae4278bc93f9b624e37ca6346d44c191cbb5d0f306c3c3c8f4bc8a37f4d6f9ed6be49ca86b41968abdaf95a34960c375090778779bd80e9907a33a"}}, {0xc2, &(0x7f0000000200)=@string={0xc2, 0x3, "d4c99079d39ef60c55411c893cb7d631a9a40a52f57339f68142f88b829111e88b9b08bccff78bb8118aeb946ef485d73dec13c42aa72be91a18257c90f3993a9bb71620fe681c9d776a27d44930b6008b1d281eac28691b8c35d021104c74110f2298d7c3a3f581c994e2c6642cb48d4cf9145e6787ad8fa0b0c9e38ac86790fdad52a37080cf35060acdc48dc65c2cd1f60e4e4beec12e52fb10bb6a4df24410725bbea7b0b8fcda2afdba74f550abfdb5cfa924914bb54b8701d317b7365c"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc1a}}, {0x29, &(0x7f0000000300)=@string={0x29, 0x3, "a5b67a922376f950337d67bef60106f52f726dbab0936ba782393cee672237d73f43ac39f5d4bf"}}]}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "e08e8457", {0x3, 0x106, 0x0, 0x1, 0xd0a, 0x80, 0x4}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) syz_usb_connect(0x2, 0xb3a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x41, 0xe5, 0xb4, 0x40, 0x1915, 0x2234, 0xcf9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb28, 0x3, 0x7, 0x1, 0x80, 0x80, [{{0x9, 0x4, 0xbb, 0x81, 0x5, 0x4d, 0xcf, 0x5, 0x1, [@generic={0x1a, 0x4, "a2fa5528efd9c608b6aa7ef66354af5312e2b4d57265c148"}, @uac_control={{0xa, 0x24, 0x1, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x1, 0x4, [0x7, 0x7, 0x6, 0x6], 0xa6}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0xe42, 0x4f, "d4"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x8, 0xa, 0x3, 0x7, 0x5, 0x5], 0x1}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x4212, 0x86, "82a7"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xfff, 0x1, '{'}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x1f, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xff, 0x6a, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x81f}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x1f, 0xb3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}, @generic={0x8b, 0x4, "cacf266f9d17208e7583a3ff98e6ba0bbc25af92e412a4299288395b3497edcbfc7c2c04d925ff10d279a088aa317da895f30bfc67b91ce83bd09d8ccd1ecfd5512875670274b692693fad7f4c07dfe94a69a830c139d78cd33d9e12ea74bff65d594f93a0d3bd91ba3d55e0e6a3c1e55d9227e1cb9425c5b6ffdc64cc51224dcd7bab1cddb53ba50a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x1f, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x68, 0x7, [@generic={0x68, 0x0, "b7285d1e3d73056196b1853bb0b5163d61a602ecc413152caa40f9c6901ba9470099fe806db7a0c2404bcfdef7d0d34cb13191e0abf5e1a0cb8cf21406bdc93f2d3ea9999b2d74cd66e22fda0a4498e569ffd1eb9fdbed0374c8d7babfeb541f7cae196f165f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x3}]}}]}}, {{0x9, 0x4, 0x4e, 0x81, 0x6, 0x24, 0xcb, 0xf1, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xc8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x4, 0x6, 0x3}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x2, 0x1f, "65ce7d59110a"}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x7f, "240719"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfa3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x20, 0x7f, 0x1f, [@generic={0x9a, 0x7, "72695b4bce6aaa0899ca334036abf8cf3aa2425754d4ba40098423c90e26a60863a3630cdc9553205dc88f63d64ba29abc38525e884b9f9663a274071cfca9b8fdd0aa9c8f73b48bdfc39a570a6707f9be4590366f938ed36fd8c6f3445ed4a013e2d25dfd10dc7e6fac15d98e73b76b5a2519ea9d262a2029cee666e5748a99ad06d3adf303e145552386584eb9d47bc4d4a32a9b4eb288"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0xaf, 0x1f, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x81, 0x2, 0x40, [@generic={0xf2, 0x21, "fe93265ceb8cbd383a439f3ef7b9ca5b14eb2c8d999bc794565e119ef96d482ebc653c9a746f45d23d16202e398a5d997a02b238a50f84100c1e73a0bf1311bbe41d7b3526ea2540a7bb2d445fb7a64a31850a7b3a9dfe7ad67a2cfa135e522de1de2712e51e0c193e1f963348d93b94957fac03ebe494ae54b7bbe844eaff6d3a7aaa655edc8f785f27ae4518128e5e190e1f02b309858ca54e2f100b034cc9ada663c3970527fe61c7bdff412640e24fcd86a08426f1c3ad3b48571f338809e6448f6a00f8eced3146b4e61e8d512eb56e309fe201c2b8bd9a1e42ef348409a8c8bc231505a8cea33294a7624d2320"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xfabd}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x2, 0xc6, 0x3f, [@generic={0x16, 0xf, "25894d5ef63670f6e66c78727725ff237bb9fc20"}, @generic={0x8e, 0x31, "d83391362a9f46c7a78f45700f126635dd29eae680dc7dd9b6dcdf56ceab346c0398821c3c07843075888119f5d373b69110689e6ae02247c02336f237a056524ce65f078a362462632e872b07d3db3925dcace569811618c0f899bbfc38dd037fe4c9400d0b7b04d67ad785fc71a33c6fed3c1a71c284f2fbaa40db61d3666880ee19efee5ace291806cc9a"}]}}]}}, {{0x9, 0x4, 0x89, 0x3, 0xc, 0x35, 0x36, 0xee, 0x0, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a7a2536c"}, {0x5, 0x24, 0x0, 0x8b1}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0xffff, 0x1, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm_detail={0x9e, 0x24, 0x13, 0x9, "a22f0edd6d59120f40f3ae7653ec3fb1cf78975a300cd054e67d997038e35c83464544d3079f3583e68f5b9816037fae56afb01726681360af710d233a8da1a37631c9e739a9a68fc950fc315364c880b4ae505defa885fed2ac6917757d7136b5e0492ed94cc63e8178a1f99fbb5bbf2f1601ad41eea9e3a11c18c85745344310ab4015655da24325066b4b4c886f2ee735173bf0cb26de6a73"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xc0, 0x654}]}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x64, 0x1, 0x3, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x101, 0x1f, "aaee"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x2}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x31, 0x8, "56152c6bbf"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x9, 0x6, "15781da3a1af75e0b1"}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x81, 0x3f, 0x9, [@generic={0xf5, 0x30, "e2b9131305568f5c13b3c72b38f15daf335896875e823cd6e514103290115497c244ebc8cfd7983010b1412ba78979d24012259c9e3ddb6f4dfa47d96f011848f694cce36bce12da92f97e404d6af465dbb2a7bae84db32d9515411b6a943689e4ee4db2a36493e9a4fc89e9194936fc7e49edb2bc6486930e829034e86e0791b388e6898ffb235b8dd387fe9cc89f1db8af09aed0b332ef4ea53f8318879a3c742e2a25c29e9abe8dd3eab6d2444108f3ddca31e80fa752174deafcea02791f68b2ca7c3c594a527b76b76e5b4f516e806a0337c11df6471d01f90898955ddbfb564c79ca54c79e5947fcd28f6b701d40c256"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x81, 0x37, [@generic={0x89, 0x31, "8240c293226980883f1421ceba1f32685b56766419f4cc462a7b2467ed9cafbe08f1dcbfafe1e6a1c296aac1786811f07078a3563bc2ef855d1ddf9d2177a212ad2c91aa5a9cebda84542400c2309fcbca2164996e824f236fc6549c044f44642ca0eac68a25a662ea0acb84bbcbc751933c75fed36533f7adecf5da48accbbcbbbc15d7b86a43"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x8, 0x40, 0x3f, [@generic={0x1c, 0x2, "e637acace007b89555fa7bbb1d633d695ff2d1a63746e89b5a1b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x2, 0x8, 0xc3, [@generic={0xbc, 0xf, "8174298ea35fdb39d0a9214d57d151f167da59987b2db9aa8cc980018a706c9952f3be20991270fb4a22d87ff9a5e3b5d0449bd0321e36431d8544b477fb15b16364808c4d4c47167bbae862dd71362480fa84297641f0ccc4061d7c029963736ef9352a6a3ee61eee5a8df58161e2d660d6a845affd5b32b83031c73beb3e9eeccc14018690d4296499cb38ccff8948a7f409c60e2b033d8d47caf900da18ba08b5daa649fd0927093d941dea5103ca5e4fff06a3da46fced91"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4a, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0xaed3695f1bc67969, 0x26, 0xa6, 0x1, [@generic={0x19, 0x2, "7b223b6186d8ce98e875544849e7b3151241df0f8109d4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x81, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x7ff}]}}, {{0x9, 0x5, 0x80, 0x4, 0x5ff, 0x8, 0x4, 0x21, [@generic={0x7f, 0x21, "95fbacaa00794158db15359582b191800910a00674bf4cacfc77f2b710a68b887bd309786c93d8467f6cfa63a94ac00f05f93686cf5979503650571dbab5dc7f57ed54768eb382a6286ea13f75038d8feecad1c53edf6a6fe1f0ca62258dc82752caa87d765850b8623a208243b80949b2464d7856c7492659ff2f4e3a"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x56, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x8, 0xe1, 0x12, [@generic={0x4e, 0x23, "f53bfbd9b8ab46b62e180e40537fe3a2add3da0a2f0d1ca64a9b19d8d4ba184a53f62c513b2ed6499144906173720868730a0b14c920518ee74dc0a95dde3187294544397c3b2753936096cc"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x1, 0x88, 0x30, [@generic={0xdf, 0x5, "a7dbf11bf02e39aacbeaac1210c07150b6e40e141f5ada4809423c82b3d9a78b3dc4e95b10e7fae8606764bbd3acbaa82e8fefbc8617a5ba455792add2fec6f2b942c37c09b652bd7755525cfabd1a20f61a053b2fcd139dda713cf8f6e5a1dba45bdd77e2235502f8458f7df7f064509c83c9f9223f6f2e3a884ddb797090a01b910bd8fbf3533e009929b309702104877bac5d69511c2b80cbaf91ca29a2344fb22962f94614b16c3348e49a23d0b922006fb948a4472b51c7c1940f1e41dc78fecb09986ca046bad1dce866e2580cf302d43e0c2cf96b92296b81c2"}, @generic={0xc1, 0xa, "4342449aad13450e576d2cb3d6d6e925d03e5335a756e24675a43beb44a40c1329d4ecaf8c9ad5b03251c61080227088ea91e3f58bf9b10b464740aa2f344564767794fde5c2946f074f363ebf6a11c9b12670ebeef65386a572f98899ffd1ac507acb470d7ee4777a7b3d4b09fa25b72a399575809f04a2473570e83f405f3b5e1b4d25817fcca378fa5c876b4fda20c7b95e17b512985d592206ad8aae45ccebc0efb482de6f16da633fa7bf6549b3841e2ba668daaaec61f17ae4ba2817"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x9, 0x9, 0x2, [@generic={0x32, 0x23, "58bcd067efeb353ce77d7dc7ea309ce163d36a218c20c83e980e8629018861ce2445396e0c3e0b8ef0137c2626e5f16d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x8, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x7, 0x0, 0x6, 0x10, 0x6}, 0x2e, &(0x7f0000000040)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "180251959d47345c72a50646462fb16d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xb, 0x5, 0x400, 0x6}]}, 0x4, [{0xb3, &(0x7f0000000140)=@string={0xb3, 0x3, "362bac58b10ae3c52a459c5ec2e657181f60c8cc5d45927ff870d22c60080a7d4015e271d106eac9c6946d448b26139b759c0160a35482531060ef6edca25cf135f1ea5991d793193952224145d59613e7083953060b3a5068c0e3c56052c5ec99396e7220ccec0e3ca3fe92f8dc77e2839c4df7c7d2ae4278bc93f9b624e37ca6346d44c191cbb5d0f306c3c3c8f4bc8a37f4d6f9ed6be49ca86b41968abdaf95a34960c375090778779bd80e9907a33a"}}, {0xc2, &(0x7f0000000200)=@string={0xc2, 0x3, "d4c99079d39ef60c55411c893cb7d631a9a40a52f57339f68142f88b829111e88b9b08bccff78bb8118aeb946ef485d73dec13c42aa72be91a18257c90f3993a9bb71620fe681c9d776a27d44930b6008b1d281eac28691b8c35d021104c74110f2298d7c3a3f581c994e2c6642cb48d4cf9145e6787ad8fa0b0c9e38ac86790fdad52a37080cf35060acdc48dc65c2cd1f60e4e4beec12e52fb10bb6a4df24410725bbea7b0b8fcda2afdba74f550abfdb5cfa924914bb54b8701d317b7365c"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc1a}}, {0x29, &(0x7f0000000300)=@string={0x29, 0x3, "a5b67a922376f950337d67bef60106f52f726dbab0936ba782393cee672237d73f43ac39f5d4bf"}}]}) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "e08e8457", {0x3, 0x106, 0x0, 0x1, 0xd0a, 0x80, 0x4}}) (async) 15:11:54 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:11:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000164c"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0x102, {0x102, 0x8, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x66, "6dee63a96b9b008247103635e7ec558c68b04a7c1b6447cc569c62d87f6e810ddda7c36e22f8c60f92df93c3a395a3d1f74af969dd5a5879be526a7d30291f9826f8040ec002e3bd93252f025041530b49a445db531ca4cb8422625a6e32cb7d5a331b1bc919"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7e}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x5, 0x1, 0x2, 0xfff, 0x5, 0xff, 0x2, 0x7, 0x1, 0x200}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x10000}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000164c"], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x1, 0x102, {0x102, 0x8, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x66, "6dee63a96b9b008247103635e7ec558c68b04a7c1b6447cc569c62d87f6e810ddda7c36e22f8c60f92df93c3a395a3d1f74af969dd5a5879be526a7d30291f9826f8040ec002e3bd93252f025041530b49a445db531ca4cb8422625a6e32cb7d5a331b1bc919"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7e}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x5, 0x1, 0x2, 0xfff, 0x5, 0xff, 0x2, 0x7, 0x1, 0x200}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x10000}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) [ 3068.639094][ T2746] UDC core: couldn't find an available UDC or it's busy: -16 [ 3068.652956][ T2746] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3068.693918][ T2747] UDC core: couldn't find an available UDC or it's busy: -16 [ 3068.713445][ T2762] UDC core: couldn't find an available UDC or it's busy: -16 [ 3068.751047][ T2747] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3068.760031][ T2762] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:11:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="dcff04e9ffffffff0b5399e9db97901d2e2f66696c653000"]) (async, rerun: 32) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000001440)={0x2, 0x0, [{0x80000019, 0x8000, 0x0, 0x5, 0x6}, {0x7, 0x1, 0x7, 0x1000, 0x80}]}) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r4) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000664000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="66b9d40b000066b8c46c81b266ba000000000f300f1bed2e660f3803be00000f78ec0f20e06635004000000f22e066b9410800000f3267f30faef765660f3a412c0066b9160100000f320fc22b58", 0x4e}], 0x1, 0x21, &(0x7f0000000180), 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x108, &(0x7f0000001000)=@generic={0x5, 0x0, 0x100, "8aa66e93", "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"}) (async) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(r5, 0xf8, 0x100, &(0x7f0000001480)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b1975716cf055bd1dbca74fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0eac4bc0a021c2e22d46418595dbe113e85dd6697b07cbe01217e6c62869955aab522dce5c1426fd041925d98ad34c19752757c3c08b3cf683b9231603adf450c919adb1158f7aede02f3e46d04d55c6e6f44eb6fd2ed642b9ce9c1fa185e96c78c7d97b3e483a2fb1d5e7236ad97a8512169f169a7200"/256) (async) r6 = syz_usb_connect$cdc_ecm(0x2, 0x140, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12e, 0x1, 0x1, 0x5, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x8260, 0x0, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0x1}, @obex={0x5, 0x24, 0x15, 0xe3}, @dmm={0x7, 0x24, 0x14, 0x0, 0x97}, @ncm={0x6, 0x24, 0x1a, 0xf7}, @mdlm_detail={0xca, 0x24, 0x13, 0x4, "47f96787bbe395dcf02e4fb392173d04c862df18ac819bea777be2ce7ca281126ec1f8d3f32a84b7c7f92a168f1387dc04f910484b10615c005983f6cfcc451d6beeb55e8b0ababb24616776c9555f53f240c10aea14f6c1aad07b632b0997cf0492dc5e91398a735a486e20c8f29640d64c5dc814d3fdac8f60d266d0c613960f243668a0383f545d82f6da3586319c4ae9a6ffc17f9dd67408cd5922b8e3b167e6f9150efeb40000ed9166ab93fdc05204ff4c3e410f0017749fc86cf1eb0b86dedf02b1ab"}, @mdlm_detail={0x8, 0x24, 0x13, 0x1f, "9031625d"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1f, 0xc4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x4, 0x1f}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0xc1, 0x84, 0x4d, 0x10, 0x7}, 0x25, &(0x7f00000003c0)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x1, 0x70, 0x5, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x0, 0x80, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x40, 0x8, 0x0, 0x6}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x422}}, {0x5c, &(0x7f0000000480)=@string={0x5c, 0x3, "b99c3a1f85d377bde71fd2de4660e24e8bea738b9edac14f377f5c764cd8ddd008f22c2388e3d7520058fa46167252a27fb3b1cc9276e70893595bb4e0e979eb274a85a813c481208f8a24c7b248eb88fa664863b230eedf3332"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}]}) uselib(&(0x7f0000000780)='./file0\x00') (async) syz_usb_control_io(r6, &(0x7f0000000a40)={0x2c, &(0x7f0000000640)={0x0, 0xd, 0xab, {0xab, 0x5d80823698dcd490, "0eb279aaead6260613a25ad8e6861ad9adb54372308db1cca20dda556b50ce7c3662b4693e44c2ebaaca686ff9f0d3a0612f428bde9322111c90469ca559257ceb4da6ea3adda2682a5970c5128d57e083ca4d094e887b1334a1359ae8861dbba4fdb844428b681d0838a5dc4b14c4d31bf5a60489f5bf13950698dbaa6d38809796a3b131e130a4f221122869ad4af3bfad1d24fdfef923306f0071f2b723253b991cc62acf1844aa"}}, &(0x7f0000000880)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "2596880b20ecf120f0f9dde3c8e08d502ad220eae8c9227e87cd4e7ab24308791a2fe59d0964fc63b21d8045dec6f6021c7118f884f74f71f71d6ea31cfe62f63f3600a81f1e4b30059572678f20d0b69afec0f676e5a95022efc8ec1b5ca27a76ac9b14ceafeb2e6af1b61d2bf4b28c05ce8ce6c4ef823a67e6f56437cd5ec46ba05d3dfee1c18ec53d3ae5375bfe997b9527a165fbe8ed7a1533ede6527811fb769aa9e15c0fc628e2fcd85482cbaa79b01048b76ff124c4fbe7f456db0351e8193ac165d2fe4e3088765eea3a68f30e6b5ac33f5d356bc29cc61a6eed"}}, &(0x7f0000001300)={0x0, 0xf, 0x65, {0x5, 0xf, 0x65, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x2, 0xfb89}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "add50b71e6d7ca42de4582ed40de6ee5"}, @generic={0x2e, 0x10, 0x1, "a15512cee0ed790b24a78033484a1ec79e6215d548e1b5b45aecb1c1170e28ccc24300b93086260a7b1ef8"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "844597205e1c06e2d07f27a77db558a3"}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x10, 0x80, 0x7, "a6b11342", "2a084296"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xec, 0x60, 0x3, 0x0, 0x1, 0x3, 0x7}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x20, 0x10, 0xc6, "3b8556b13a09e584266654bbe7fca2f16608c14ac22bd1ce1f7bee2ba316c03ada53dfcde42b3c936f9a9c4f1df1587ddf2d0db614475e4065bb20ea6f737f87541408dbc31a6868bb0c99a7c575522b3d24fe52b930a86ff0d54bb3bdd7960c5c93bf970bdd3bc75eb25786634f46b6e4875f3fd8505e4ebd4d2f6f57ea8099e966c696b63ed45c1a16d8f40d93fcfb54715571930c35f31b8695d14f769977f303efe5ac403a6cd1edd5a04b0ca1baf5f2f1ac50942b8b50710fd49e9d7f3b20bd31961a5c"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x28}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x4, 0x40}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x1738}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "c33f"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x4b02}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @random="38cd4623e36c"}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "e6cb"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x668}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_connect$cdc_ncm(0x6, 0x80, &(0x7f0000001140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x1, 0xf0, 0xf0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "7ded"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x9b54, 0xfffb, 0x19, 0x2}, {0x6, 0x24, 0x1a, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x3, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x81, 0xfff}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xfb, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xa0, 0x8e, 0x78}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x4, 0x65, 0x0, 0x0, 0x63}, 0xfb, &(0x7f00000011c0)={0x5, 0xf, 0xfb, 0x1, [@generic={0xf6, 0x10, 0x4, "0d4d6c4157aa191183fdbe23e9e530d7abb83d2366a128d62e8195b9c4804a022a2136e54cf93c766d640b209eb306496561f81df0f0cbc0b4cde1044a44cd823e8a04992a95fb9151213fa0301195effc3436b20dc96315df5f7b420acc00770a888b3775dddf75e6f01bcbe30a0cbc0455f64f7f9b5b8048b190d80e80d1d9489d865ca8634f8363e1a63b04801066ac25a78f17bab9d7df94d5237c4f4e9e4eb1542080500377512253a7a6dc56ddab1bf8379f4a51f7ec16e010e705f9e081efee79c98b7a2229c02cd82b2e044b2853f24c15b7c88005e4676d2dec909173d109e41ed6fc7a35a0f29fb62fc4da620759"}]}, 0x2, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}]}) [ 3068.877687][ T2743] UDC core: couldn't find an available UDC or it's busy: -16 [ 3068.888504][ T2784] UDC core: couldn't find an available UDC or it's busy: -16 [ 3068.905855][ T2743] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3068.926630][ T2784] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3068.971587][ T2720] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3069.040865][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 3069.047506][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 3069.058599][ T2747] UDC core: couldn't find an available UDC or it's busy: -16 [ 3069.073679][ T2747] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3069.081948][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 3069.088562][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 3069.143798][ T2747] UDC core: couldn't find an available UDC or it's busy: -16 [ 3069.158558][ T2747] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:11:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40041c1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000740)=0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x10, 0x18, {0x9, @bearer=@l2={'eth', 0x3a, '\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:11:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40041c1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000740)=0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x10, 0x18, {0x9, @bearer=@l2={'eth', 0x3a, '\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) (async) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:11:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x501400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x10000969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) ioctl$KVM_NMI(r2, 0xae9a) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x50803, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000065f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="c4e161e423c744240000200000c744240200000080c7442406000000000f0114240f01cfb805000000b9006000000f01c1c4c1f92f34d40fec8f000000000f320f9d230f3065650fc7af00800000", 0x4e}], 0x1, 0x10, &(0x7f00000001c0), 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:11:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x60008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:11:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = syz_usb_connect(0x2, 0xb3a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x41, 0xe5, 0xb4, 0x40, 0x1915, 0x2234, 0xcf9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb28, 0x3, 0x7, 0x1, 0x80, 0x80, [{{0x9, 0x4, 0xbb, 0x81, 0x5, 0x4d, 0xcf, 0x5, 0x1, [@generic={0x1a, 0x4, "a2fa5528efd9c608b6aa7ef66354af5312e2b4d57265c148"}, @uac_control={{0xa, 0x24, 0x1, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x1, 0x4, [0x7, 0x7, 0x6, 0x6], 0xa6}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0xe42, 0x4f, "d4"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x8, 0xa, 0x3, 0x7, 0x5, 0x5], 0x1}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x4212, 0x86, "82a7"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xfff, 0x1, '{'}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x1f, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xff, 0x6a, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x81f}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x1f, 0xb3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}, @generic={0x8b, 0x4, "cacf266f9d17208e7583a3ff98e6ba0bbc25af92e412a4299288395b3497edcbfc7c2c04d925ff10d279a088aa317da895f30bfc67b91ce83bd09d8ccd1ecfd5512875670274b692693fad7f4c07dfe94a69a830c139d78cd33d9e12ea74bff65d594f93a0d3bd91ba3d55e0e6a3c1e55d9227e1cb9425c5b6ffdc64cc51224dcd7bab1cddb53ba50a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x1f, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x68, 0x7, [@generic={0x68, 0x0, "b7285d1e3d73056196b1853bb0b5163d61a602ecc413152caa40f9c6901ba9470099fe806db7a0c2404bcfdef7d0d34cb13191e0abf5e1a0cb8cf21406bdc93f2d3ea9999b2d74cd66e22fda0a4498e569ffd1eb9fdbed0374c8d7babfeb541f7cae196f165f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x3}]}}]}}, {{0x9, 0x4, 0x4e, 0x81, 0x6, 0x24, 0xcb, 0xf1, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xc8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x4, 0x6, 0x3}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x2, 0x1f, "65ce7d59110a"}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x7f, "240719"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfa3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x20, 0x7f, 0x1f, [@generic={0x9a, 0x7, "72695b4bce6aaa0899ca334036abf8cf3aa2425754d4ba40098423c90e26a60863a3630cdc9553205dc88f63d64ba29abc38525e884b9f9663a274071cfca9b8fdd0aa9c8f73b48bdfc39a570a6707f9be4590366f938ed36fd8c6f3445ed4a013e2d25dfd10dc7e6fac15d98e73b76b5a2519ea9d262a2029cee666e5748a99ad06d3adf303e145552386584eb9d47bc4d4a32a9b4eb288"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0xaf, 0x1f, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x81, 0x2, 0x40, [@generic={0xf2, 0x21, "fe93265ceb8cbd383a439f3ef7b9ca5b14eb2c8d999bc794565e119ef96d482ebc653c9a746f45d23d16202e398a5d997a02b238a50f84100c1e73a0bf1311bbe41d7b3526ea2540a7bb2d445fb7a64a31850a7b3a9dfe7ad67a2cfa135e522de1de2712e51e0c193e1f963348d93b94957fac03ebe494ae54b7bbe844eaff6d3a7aaa655edc8f785f27ae4518128e5e190e1f02b309858ca54e2f100b034cc9ada663c3970527fe61c7bdff412640e24fcd86a08426f1c3ad3b48571f338809e6448f6a00f8eced3146b4e61e8d512eb56e309fe201c2b8bd9a1e42ef348409a8c8bc231505a8cea33294a7624d2320"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xfabd}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x2, 0xc6, 0x3f, [@generic={0x16, 0xf, "25894d5ef63670f6e66c78727725ff237bb9fc20"}, @generic={0x8e, 0x31, "d83391362a9f46c7a78f45700f126635dd29eae680dc7dd9b6dcdf56ceab346c0398821c3c07843075888119f5d373b69110689e6ae02247c02336f237a056524ce65f078a362462632e872b07d3db3925dcace569811618c0f899bbfc38dd037fe4c9400d0b7b04d67ad785fc71a33c6fed3c1a71c284f2fbaa40db61d3666880ee19efee5ace291806cc9a"}]}}]}}, {{0x9, 0x4, 0x89, 0x3, 0xc, 0x35, 0x36, 0xee, 0x0, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a7a2536c"}, {0x5, 0x24, 0x0, 0x8b1}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0xffff, 0x1, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm_detail={0x9e, 0x24, 0x13, 0x9, "a22f0edd6d59120f40f3ae7653ec3fb1cf78975a300cd054e67d997038e35c83464544d3079f3583e68f5b9816037fae56afb01726681360af710d233a8da1a37631c9e739a9a68fc950fc315364c880b4ae505defa885fed2ac6917757d7136b5e0492ed94cc63e8178a1f99fbb5bbf2f1601ad41eea9e3a11c18c85745344310ab4015655da24325066b4b4c886f2ee735173bf0cb26de6a73"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xc0, 0x654}]}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x64, 0x1, 0x3, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x101, 0x1f, "aaee"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x2}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x31, 0x8, "56152c6bbf"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x9, 0x6, "15781da3a1af75e0b1"}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x81, 0x3f, 0x9, [@generic={0xf5, 0x30, "e2b9131305568f5c13b3c72b38f15daf335896875e823cd6e514103290115497c244ebc8cfd7983010b1412ba78979d24012259c9e3ddb6f4dfa47d96f011848f694cce36bce12da92f97e404d6af465dbb2a7bae84db32d9515411b6a943689e4ee4db2a36493e9a4fc89e9194936fc7e49edb2bc6486930e829034e86e0791b388e6898ffb235b8dd387fe9cc89f1db8af09aed0b332ef4ea53f8318879a3c742e2a25c29e9abe8dd3eab6d2444108f3ddca31e80fa752174deafcea02791f68b2ca7c3c594a527b76b76e5b4f516e806a0337c11df6471d01f90898955ddbfb564c79ca54c79e5947fcd28f6b701d40c256"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x81, 0x37, [@generic={0x89, 0x31, "8240c293226980883f1421ceba1f32685b56766419f4cc462a7b2467ed9cafbe08f1dcbfafe1e6a1c296aac1786811f07078a3563bc2ef855d1ddf9d2177a212ad2c91aa5a9cebda84542400c2309fcbca2164996e824f236fc6549c044f44642ca0eac68a25a662ea0acb84bbcbc751933c75fed36533f7adecf5da48accbbcbbbc15d7b86a43"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x8, 0x40, 0x3f, [@generic={0x1c, 0x2, "e637acace007b89555fa7bbb1d633d695ff2d1a63746e89b5a1b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x2, 0x8, 0xc3, [@generic={0xbc, 0xf, "8174298ea35fdb39d0a9214d57d151f167da59987b2db9aa8cc980018a706c9952f3be20991270fb4a22d87ff9a5e3b5d0449bd0321e36431d8544b477fb15b16364808c4d4c47167bbae862dd71362480fa84297641f0ccc4061d7c029963736ef9352a6a3ee61eee5a8df58161e2d660d6a845affd5b32b83031c73beb3e9eeccc14018690d4296499cb38ccff8948a7f409c60e2b033d8d47caf900da18ba08b5daa649fd0927093d941dea5103ca5e4fff06a3da46fced91"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4a, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0xaed3695f1bc67969, 0x26, 0xa6, 0x1, [@generic={0x19, 0x2, "7b223b6186d8ce98e875544849e7b3151241df0f8109d4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x81, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x7ff}]}}, {{0x9, 0x5, 0x80, 0x4, 0x5ff, 0x8, 0x4, 0x21, [@generic={0x7f, 0x21, "95fbacaa00794158db15359582b191800910a00674bf4cacfc77f2b710a68b887bd309786c93d8467f6cfa63a94ac00f05f93686cf5979503650571dbab5dc7f57ed54768eb382a6286ea13f75038d8feecad1c53edf6a6fe1f0ca62258dc82752caa87d765850b8623a208243b80949b2464d7856c7492659ff2f4e3a"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x56, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x8, 0xe1, 0x12, [@generic={0x4e, 0x23, "f53bfbd9b8ab46b62e180e40537fe3a2add3da0a2f0d1ca64a9b19d8d4ba184a53f62c513b2ed6499144906173720868730a0b14c920518ee74dc0a95dde3187294544397c3b2753936096cc"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x1, 0x88, 0x30, [@generic={0xdf, 0x5, "a7dbf11bf02e39aacbeaac1210c07150b6e40e141f5ada4809423c82b3d9a78b3dc4e95b10e7fae8606764bbd3acbaa82e8fefbc8617a5ba455792add2fec6f2b942c37c09b652bd7755525cfabd1a20f61a053b2fcd139dda713cf8f6e5a1dba45bdd77e2235502f8458f7df7f064509c83c9f9223f6f2e3a884ddb797090a01b910bd8fbf3533e009929b309702104877bac5d69511c2b80cbaf91ca29a2344fb22962f94614b16c3348e49a23d0b922006fb948a4472b51c7c1940f1e41dc78fecb09986ca046bad1dce866e2580cf302d43e0c2cf96b92296b81c2"}, @generic={0xc1, 0xa, "4342449aad13450e576d2cb3d6d6e925d03e5335a756e24675a43beb44a40c1329d4ecaf8c9ad5b03251c61080227088ea91e3f58bf9b10b464740aa2f344564767794fde5c2946f074f363ebf6a11c9b12670ebeef65386a572f98899ffd1ac507acb470d7ee4777a7b3d4b09fa25b72a399575809f04a2473570e83f405f3b5e1b4d25817fcca378fa5c876b4fda20c7b95e17b512985d592206ad8aae45ccebc0efb482de6f16da633fa7bf6549b3841e2ba668daaaec61f17ae4ba2817"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x9, 0x9, 0x2, [@generic={0x32, 0x23, "58bcd067efeb353ce77d7dc7ea309ce163d36a218c20c83e980e8629018861ce2445396e0c3e0b8ef0137c2626e5f16d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x8, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x7, 0x0, 0x6, 0x10, 0x6}, 0x2e, &(0x7f0000000040)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "180251959d47345c72a50646462fb16d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xb, 0x5, 0x400, 0x6}]}, 0x4, [{0xb3, &(0x7f0000000140)=@string={0xb3, 0x3, "362bac58b10ae3c52a459c5ec2e657181f60c8cc5d45927ff870d22c60080a7d4015e271d106eac9c6946d448b26139b759c0160a35482531060ef6edca25cf135f1ea5991d793193952224145d59613e7083953060b3a5068c0e3c56052c5ec99396e7220ccec0e3ca3fe92f8dc77e2839c4df7c7d2ae4278bc93f9b624e37ca6346d44c191cbb5d0f306c3c3c8f4bc8a37f4d6f9ed6be49ca86b41968abdaf95a34960c375090778779bd80e9907a33a"}}, {0xc2, &(0x7f0000000200)=@string={0xc2, 0x3, "d4c99079d39ef60c55411c893cb7d631a9a40a52f57339f68142f88b829111e88b9b08bccff78bb8118aeb946ef485d73dec13c42aa72be91a18257c90f3993a9bb71620fe681c9d776a27d44930b6008b1d281eac28691b8c35d021104c74110f2298d7c3a3f581c994e2c6642cb48d4cf9145e6787ad8fa0b0c9e38ac86790fdad52a37080cf35060acdc48dc65c2cd1f60e4e4beec12e52fb10bb6a4df24410725bbea7b0b8fcda2afdba74f550abfdb5cfa924914bb54b8701d317b7365c"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc1a}}, {0x29, &(0x7f0000000300)=@string={0x29, 0x3, "a5b67a922376f950337d67bef60106f52f726dbab0936ba782393cee672237d73f43ac39f5d4bf"}}]}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "e08e8457", {0x3, 0x106, 0x0, 0x1, 0xd0a, 0x80, 0x4}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) syz_usb_connect(0x2, 0xb3a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x41, 0xe5, 0xb4, 0x40, 0x1915, 0x2234, 0xcf9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb28, 0x3, 0x7, 0x1, 0x80, 0x80, [{{0x9, 0x4, 0xbb, 0x81, 0x5, 0x4d, 0xcf, 0x5, 0x1, [@generic={0x1a, 0x4, "a2fa5528efd9c608b6aa7ef66354af5312e2b4d57265c148"}, @uac_control={{0xa, 0x24, 0x1, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x1, 0x4, [0x7, 0x7, 0x6, 0x6], 0xa6}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0xe42, 0x4f, "d4"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x6, 0x6, [0x8, 0xa, 0x3, 0x7, 0x5, 0x5], 0x1}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x4212, 0x86, "82a7"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xfff, 0x1, '{'}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x1f, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xff, 0x6a, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x81f}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x1f, 0xb3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}, @generic={0x8b, 0x4, "cacf266f9d17208e7583a3ff98e6ba0bbc25af92e412a4299288395b3497edcbfc7c2c04d925ff10d279a088aa317da895f30bfc67b91ce83bd09d8ccd1ecfd5512875670274b692693fad7f4c07dfe94a69a830c139d78cd33d9e12ea74bff65d594f93a0d3bd91ba3d55e0e6a3c1e55d9227e1cb9425c5b6ffdc64cc51224dcd7bab1cddb53ba50a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x1f, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x68, 0x7, [@generic={0x68, 0x0, "b7285d1e3d73056196b1853bb0b5163d61a602ecc413152caa40f9c6901ba9470099fe806db7a0c2404bcfdef7d0d34cb13191e0abf5e1a0cb8cf21406bdc93f2d3ea9999b2d74cd66e22fda0a4498e569ffd1eb9fdbed0374c8d7babfeb541f7cae196f165f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x3}]}}]}}, {{0x9, 0x4, 0x4e, 0x81, 0x6, 0x24, 0xcb, 0xf1, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xc8}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x4, 0x6, 0x3}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x2, 0x1f, "65ce7d59110a"}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x7f, "240719"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfa3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x20, 0x7f, 0x1f, [@generic={0x9a, 0x7, "72695b4bce6aaa0899ca334036abf8cf3aa2425754d4ba40098423c90e26a60863a3630cdc9553205dc88f63d64ba29abc38525e884b9f9663a274071cfca9b8fdd0aa9c8f73b48bdfc39a570a6707f9be4590366f938ed36fd8c6f3445ed4a013e2d25dfd10dc7e6fac15d98e73b76b5a2519ea9d262a2029cee666e5748a99ad06d3adf303e145552386584eb9d47bc4d4a32a9b4eb288"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0xaf, 0x1f, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x81, 0x2, 0x40, [@generic={0xf2, 0x21, "fe93265ceb8cbd383a439f3ef7b9ca5b14eb2c8d999bc794565e119ef96d482ebc653c9a746f45d23d16202e398a5d997a02b238a50f84100c1e73a0bf1311bbe41d7b3526ea2540a7bb2d445fb7a64a31850a7b3a9dfe7ad67a2cfa135e522de1de2712e51e0c193e1f963348d93b94957fac03ebe494ae54b7bbe844eaff6d3a7aaa655edc8f785f27ae4518128e5e190e1f02b309858ca54e2f100b034cc9ada663c3970527fe61c7bdff412640e24fcd86a08426f1c3ad3b48571f338809e6448f6a00f8eced3146b4e61e8d512eb56e309fe201c2b8bd9a1e42ef348409a8c8bc231505a8cea33294a7624d2320"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xfabd}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x2, 0xc6, 0x3f, [@generic={0x16, 0xf, "25894d5ef63670f6e66c78727725ff237bb9fc20"}, @generic={0x8e, 0x31, "d83391362a9f46c7a78f45700f126635dd29eae680dc7dd9b6dcdf56ceab346c0398821c3c07843075888119f5d373b69110689e6ae02247c02336f237a056524ce65f078a362462632e872b07d3db3925dcace569811618c0f899bbfc38dd037fe4c9400d0b7b04d67ad785fc71a33c6fed3c1a71c284f2fbaa40db61d3666880ee19efee5ace291806cc9a"}]}}]}}, {{0x9, 0x4, 0x89, 0x3, 0xc, 0x35, 0x36, 0xee, 0x0, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a7a2536c"}, {0x5, 0x24, 0x0, 0x8b1}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0xffff, 0x1, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm_detail={0x9e, 0x24, 0x13, 0x9, "a22f0edd6d59120f40f3ae7653ec3fb1cf78975a300cd054e67d997038e35c83464544d3079f3583e68f5b9816037fae56afb01726681360af710d233a8da1a37631c9e739a9a68fc950fc315364c880b4ae505defa885fed2ac6917757d7136b5e0492ed94cc63e8178a1f99fbb5bbf2f1601ad41eea9e3a11c18c85745344310ab4015655da24325066b4b4c886f2ee735173bf0cb26de6a73"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xc0, 0x654}]}, @uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x64, 0x1, 0x3, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x101, 0x1f, "aaee"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x2}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x31, 0x8, "56152c6bbf"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x9, 0x6, "15781da3a1af75e0b1"}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x81, 0x3f, 0x9, [@generic={0xf5, 0x30, "e2b9131305568f5c13b3c72b38f15daf335896875e823cd6e514103290115497c244ebc8cfd7983010b1412ba78979d24012259c9e3ddb6f4dfa47d96f011848f694cce36bce12da92f97e404d6af465dbb2a7bae84db32d9515411b6a943689e4ee4db2a36493e9a4fc89e9194936fc7e49edb2bc6486930e829034e86e0791b388e6898ffb235b8dd387fe9cc89f1db8af09aed0b332ef4ea53f8318879a3c742e2a25c29e9abe8dd3eab6d2444108f3ddca31e80fa752174deafcea02791f68b2ca7c3c594a527b76b76e5b4f516e806a0337c11df6471d01f90898955ddbfb564c79ca54c79e5947fcd28f6b701d40c256"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x4, 0x81, 0x37, [@generic={0x89, 0x31, "8240c293226980883f1421ceba1f32685b56766419f4cc462a7b2467ed9cafbe08f1dcbfafe1e6a1c296aac1786811f07078a3563bc2ef855d1ddf9d2177a212ad2c91aa5a9cebda84542400c2309fcbca2164996e824f236fc6549c044f44642ca0eac68a25a662ea0acb84bbcbc751933c75fed36533f7adecf5da48accbbcbbbc15d7b86a43"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x8, 0x40, 0x3f, [@generic={0x1c, 0x2, "e637acace007b89555fa7bbb1d633d695ff2d1a63746e89b5a1b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x2, 0x8, 0xc3, [@generic={0xbc, 0xf, "8174298ea35fdb39d0a9214d57d151f167da59987b2db9aa8cc980018a706c9952f3be20991270fb4a22d87ff9a5e3b5d0449bd0321e36431d8544b477fb15b16364808c4d4c47167bbae862dd71362480fa84297641f0ccc4061d7c029963736ef9352a6a3ee61eee5a8df58161e2d660d6a845affd5b32b83031c73beb3e9eeccc14018690d4296499cb38ccff8948a7f409c60e2b033d8d47caf900da18ba08b5daa649fd0927093d941dea5103ca5e4fff06a3da46fced91"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4a, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0xaed3695f1bc67969, 0x26, 0xa6, 0x1, [@generic={0x19, 0x2, "7b223b6186d8ce98e875544849e7b3151241df0f8109d4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x80, 0x81, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x7ff}]}}, {{0x9, 0x5, 0x80, 0x4, 0x5ff, 0x8, 0x4, 0x21, [@generic={0x7f, 0x21, "95fbacaa00794158db15359582b191800910a00674bf4cacfc77f2b710a68b887bd309786c93d8467f6cfa63a94ac00f05f93686cf5979503650571dbab5dc7f57ed54768eb382a6286ea13f75038d8feecad1c53edf6a6fe1f0ca62258dc82752caa87d765850b8623a208243b80949b2464d7856c7492659ff2f4e3a"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x56, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x35, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x8, 0xe1, 0x12, [@generic={0x4e, 0x23, "f53bfbd9b8ab46b62e180e40537fe3a2add3da0a2f0d1ca64a9b19d8d4ba184a53f62c513b2ed6499144906173720868730a0b14c920518ee74dc0a95dde3187294544397c3b2753936096cc"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x1, 0x88, 0x30, [@generic={0xdf, 0x5, "a7dbf11bf02e39aacbeaac1210c07150b6e40e141f5ada4809423c82b3d9a78b3dc4e95b10e7fae8606764bbd3acbaa82e8fefbc8617a5ba455792add2fec6f2b942c37c09b652bd7755525cfabd1a20f61a053b2fcd139dda713cf8f6e5a1dba45bdd77e2235502f8458f7df7f064509c83c9f9223f6f2e3a884ddb797090a01b910bd8fbf3533e009929b309702104877bac5d69511c2b80cbaf91ca29a2344fb22962f94614b16c3348e49a23d0b922006fb948a4472b51c7c1940f1e41dc78fecb09986ca046bad1dce866e2580cf302d43e0c2cf96b92296b81c2"}, @generic={0xc1, 0xa, "4342449aad13450e576d2cb3d6d6e925d03e5335a756e24675a43beb44a40c1329d4ecaf8c9ad5b03251c61080227088ea91e3f58bf9b10b464740aa2f344564767794fde5c2946f074f363ebf6a11c9b12670ebeef65386a572f98899ffd1ac507acb470d7ee4777a7b3d4b09fa25b72a399575809f04a2473570e83f405f3b5e1b4d25817fcca378fa5c876b4fda20c7b95e17b512985d592206ad8aae45ccebc0efb482de6f16da633fa7bf6549b3841e2ba668daaaec61f17ae4ba2817"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x9, 0x9, 0x2, [@generic={0x32, 0x23, "58bcd067efeb353ce77d7dc7ea309ce163d36a218c20c83e980e8629018861ce2445396e0c3e0b8ef0137c2626e5f16d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x8, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x7, 0x0, 0x6, 0x10, 0x6}, 0x2e, &(0x7f0000000040)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "180251959d47345c72a50646462fb16d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xb, 0x5, 0x400, 0x6}]}, 0x4, [{0xb3, &(0x7f0000000140)=@string={0xb3, 0x3, "362bac58b10ae3c52a459c5ec2e657181f60c8cc5d45927ff870d22c60080a7d4015e271d106eac9c6946d448b26139b759c0160a35482531060ef6edca25cf135f1ea5991d793193952224145d59613e7083953060b3a5068c0e3c56052c5ec99396e7220ccec0e3ca3fe92f8dc77e2839c4df7c7d2ae4278bc93f9b624e37ca6346d44c191cbb5d0f306c3c3c8f4bc8a37f4d6f9ed6be49ca86b41968abdaf95a34960c375090778779bd80e9907a33a"}}, {0xc2, &(0x7f0000000200)=@string={0xc2, 0x3, "d4c99079d39ef60c55411c893cb7d631a9a40a52f57339f68142f88b829111e88b9b08bccff78bb8118aeb946ef485d73dec13c42aa72be91a18257c90f3993a9bb71620fe681c9d776a27d44930b6008b1d281eac28691b8c35d021104c74110f2298d7c3a3f581c994e2c6642cb48d4cf9145e6787ad8fa0b0c9e38ac86790fdad52a37080cf35060acdc48dc65c2cd1f60e4e4beec12e52fb10bb6a4df24410725bbea7b0b8fcda2afdba74f550abfdb5cfa924914bb54b8701d317b7365c"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc1a}}, {0x29, &(0x7f0000000300)=@string={0x29, 0x3, "a5b67a922376f950337d67bef60106f52f726dbab0936ba782393cee672237d73f43ac39f5d4bf"}}]}) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "e08e8457", {0x3, 0x106, 0x0, 0x1, 0xd0a, 0x80, 0x4}}) (async) 15:11:59 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3073.703067][ T5313] usb 5-1: USB disconnect, device number 124 [ 3073.752808][ T2796] UDC core: couldn't find an available UDC or it's busy: -16 [ 3073.790921][ T2796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3073.821657][ T2815] UDC core: couldn't find an available UDC or it's busy: -16 [ 3073.856310][ T2816] UDC core: couldn't find an available UDC or it's busy: -16 [ 3073.869328][ T2815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3073.891848][ T2816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3073.921777][ T2822] UDC core: couldn't find an available UDC or it's busy: -16 [ 3073.929839][ T2822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:11:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x45a4, &(0x7f00000000c0)={0x0, 0x20c8e0, 0x1, 0x1}, &(0x7f000003c000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendfile(r6, r3, &(0x7f0000000040)=0x718, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) [ 3074.004246][ T2796] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.019046][ T2796] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.142570][ T2800] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.150519][ T2800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.160150][ T2800] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.165625][ T2802] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.168485][ T2800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.183817][ T5313] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 3074.187098][ T2802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.341129][T13827] usb 3-1: new low-speed USB device number 86 using dummy_hcd 15:12:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="c7442400cf377600c7442402e45a0000c7442406000000000f011c240f01c9c482790eec660f388193357f84c40f3266b8ae008ec047f466b8dd008ee866baf80cb890273f85ef66bafc0cb800000100ef66baf80cb8602da886ef66bafc0ced", 0x60}], 0x1, 0x40, &(0x7f0000000180)=[@cstype3={0x5, 0xe}, @flags={0x3, 0x200}], 0x2) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:00 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x206900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3074.445847][ T2841] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.454483][ T2841] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x501400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x10000969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) ioctl$KVM_NMI(r2, 0xae9a) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x50803, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000065f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="c4e161e423c744240000200000c744240200000080c7442406000000000f0114240f01cfb805000000b9006000000f01c1c4c1f92f34d40fec8f000000000f320f9d230f3065650fc7af00800000", 0x4e}], 0x1, 0x10, &(0x7f00000001c0), 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3074.551387][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3074.563991][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 15:12:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x60008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x60008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) [ 3074.598666][ T2845] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.612853][ T2850] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.621212][ T2845] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.635627][ T2850] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.651259][ T5313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3074.668401][ T2841] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.677178][ T2841] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.701318][ T5313] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3074.712186][T13827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3074.731061][T13827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3074.750932][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.761759][T13827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3074.789642][T13827] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 15:12:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x501400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x10000969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) (async) ioctl$KVM_NMI(r2, 0xae9a) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x50803, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f000065f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="c4e161e423c744240000200000c744240200000080c7442406000000000f0114240f01cfb805000000b9006000000f01c1c4c1f92f34d40fec8f000000000f320f9d230f3065650fc7af00800000", 0x4e}], 0x1, 0x10, &(0x7f00000001c0), 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3074.800327][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.809976][ T2823] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3074.831570][ T2855] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.856618][ T2855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.881516][ T2826] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3074.890793][ T5313] hub 5-1:1.0: bad descriptor, ignoring hub [ 3074.897568][ T5313] hub: probe of 5-1:1.0 failed with error -5 [ 3074.906652][T13827] hub 3-1:1.0: bad descriptor, ignoring hub [ 3074.915624][ T2845] UDC core: couldn't find an available UDC or it's busy: -16 [ 3074.917341][T13827] hub: probe of 3-1:1.0 failed with error -5 [ 3074.941295][ T2845] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3074.960480][T13827] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3074.967883][T13827] cdc_wdm 3-1:1.0: Unknown control protocol [ 3074.974666][ T5313] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 3074.983169][ T5313] cdc_wdm 5-1:1.0: Unknown control protocol [ 3075.332466][T12997] usb 5-1: USB disconnect, device number 125 [ 3075.765915][ T2826] usb 3-1: reset low-speed USB device number 86 using dummy_hcd [ 3076.321584][ T2867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3076.679772][T17882] usb 3-1: USB disconnect, device number 86 15:12:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="c7442400cf377600c7442402e45a0000c7442406000000000f011c240f01c9c482790eec660f388193357f84c40f3266b8ae008ec047f466b8dd008ee866baf80cb890273f85ef66bafc0cb800000100ef66baf80cb8602da886ef66bafc0ced", 0x60}], 0x1, 0x40, &(0x7f0000000180)=[@cstype3={0x5, 0xe}, @flags={0x3, 0x200}], 0x2) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="c7442400cf377600c7442402e45a0000c7442406000000000f011c240f01c9c482790eec660f388193357f84c40f3266b8ae008ec047f466b8dd008ee866baf80cb890273f85ef66bafc0cb800000100ef66baf80cb8602da886ef66bafc0ced", 0x60}], 0x1, 0x40, &(0x7f0000000180)=[@cstype3={0x5, 0xe}, @flags={0x3, 0x200}], 0x2) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x6ab5, &(0x7f00000000c0)={0x0, 0x509a, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000001140)="0f01c98fe878c1e400c4c18e2a9df50000000fc777000f07eaa70000002f0066baf80cb864f63e8aef66bafc0c66b8ab0066ef650f01cab9610b00000f320f01c5", 0x41}], 0x1, 0x20, &(0x7f00000011c0)=[@cstype3={0x5, 0x2}, @cstype3={0x5, 0xe}], 0x2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x163, &(0x7f0000001000)=@generic={0x0, 0x2, 0x100, '\x00', "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"}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/206, 0xce}], 0x5, &(0x7f0000000080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/89, 0x59}, {&(0x7f0000000a00)=""/91, 0x5b}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/5, 0x5}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f0000000c80)=""/3, 0x3}, {&(0x7f0000000cc0)=""/10, 0xa}, {&(0x7f0000000d00)=""/129, 0x81}], 0xa, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x2, 0x100, &(0x7f0000000fc0)={0x77359400}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000040)={&(0x7f0000000140)=""/178, 0xb2, 0x8001, 0x1}) 15:12:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x60008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x60008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) 15:12:02 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x206900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x60008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3076.941131][T12997] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 3076.985284][ T2887] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.000690][ T2889] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.009190][ T2880] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.012263][ T2887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.028710][ T2889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.031796][ T2890] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.054705][ T2880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.085933][ T2890] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:03 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x206900, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x206900, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x45a4, &(0x7f00000000c0)={0x0, 0x20c8e0, 0x1, 0x1}, &(0x7f000003c000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendfile(r6, r3, &(0x7f0000000040)=0x718, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x45a4, &(0x7f00000000c0)={0x0, 0x20c8e0, 0x1, 0x1}, &(0x7f000003c000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendfile(r6, r3, &(0x7f0000000040)=0x718, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) [ 3077.300586][ T2900] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.311087][ T2879] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.313361][ T2874] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.319110][ T2879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.327083][ T2900] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.378643][ T2874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.412783][T12997] usb 5-1: device descriptor read/64, error -71 15:12:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private0, 0x4e20, 0x3, 0x4e21, 0x6, 0x2, 0x80, 0xa0, 0x6c, 0x0, r2}, {0x2, 0x1, 0x100000001, 0x1, 0x400000008, 0x8, 0x20, 0x4}, {0x8000000000000000, 0xfffffffffffffff8, 0x200, 0x5}, 0x3cd, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in=@remote, 0x3500, 0x2, 0x2, 0x80, 0x7, 0x1, 0x200035e}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x4b, 0xe5a}}, './file0\x00'}) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x3f, 0x400, 0x5, 0x20b}, 0x14) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="c7442400cf377600c7442402e45a0000c7442406000000000f011c240f01c9c482790eec660f388193357f84c40f3266b8ae008ec047f466b8dd008ee866baf80cb890273f85ef66bafc0cb800000100ef66baf80cb8602da886ef66bafc0ced", 0x60}], 0x1, 0x40, &(0x7f0000000180)=[@cstype3={0x5, 0xe}, @flags={0x3, 0x200}], 0x2) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="c7442400cf377600c7442402e45a0000c7442406000000000f011c240f01c9c482790eec660f388193357f84c40f3266b8ae008ec047f466b8dd008ee866baf80cb890273f85ef66bafc0cb800000100ef66baf80cb8602da886ef66bafc0ced", 0x60}], 0x1, 0x40, &(0x7f0000000180)=[@cstype3={0x5, 0xe}, @flags={0x3, 0x200}], 0x2) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3077.592377][ T2900] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.600437][ T2900] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.628368][ T2923] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.649961][ T2933] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.666167][ T2933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.675004][T13827] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 3077.685475][T12997] usb 5-1: new low-speed USB device number 127 using dummy_hcd 15:12:03 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000880)={0xf}) [ 3077.706094][ T2923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3077.814172][ T2936] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.822735][ T2936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x6ab5, &(0x7f00000000c0)={0x0, 0x509a, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000001140)="0f01c98fe878c1e400c4c18e2a9df50000000fc777000f07eaa70000002f0066baf80cb864f63e8aef66bafc0c66b8ab0066ef650f01cab9610b00000f320f01c5", 0x41}], 0x1, 0x20, &(0x7f00000011c0)=[@cstype3={0x5, 0x2}, @cstype3={0x5, 0xe}], 0x2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x163, &(0x7f0000001000)=@generic={0x0, 0x2, 0x100, '\x00', "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"}) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/206, 0xce}], 0x5, &(0x7f0000000080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/89, 0x59}, {&(0x7f0000000a00)=""/91, 0x5b}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/5, 0x5}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f0000000c80)=""/3, 0x3}, {&(0x7f0000000cc0)=""/10, 0xa}, {&(0x7f0000000d00)=""/129, 0x81}], 0xa, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x2, 0x100, &(0x7f0000000fc0)={0x77359400}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000040)={&(0x7f0000000140)=""/178, 0xb2, 0x8001, 0x1}) [ 3077.980060][ T2946] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.989447][ T2918] UDC core: couldn't find an available UDC or it's busy: -16 [ 3077.997975][ T2918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3078.035592][ T2946] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3078.041419][ T2936] UDC core: couldn't find an available UDC or it's busy: -16 [ 3078.052982][ T2936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3078.071343][T13827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.082547][T12997] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.095607][T12997] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3078.106377][T13827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3078.116536][T12997] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3078.127917][T13827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3078.156780][T12997] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3078.168189][T13827] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3078.194581][T12997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:12:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private0, 0x4e20, 0x3, 0x4e21, 0x6, 0x2, 0x80, 0xa0, 0x6c, 0x0, r2}, {0x2, 0x1, 0x100000001, 0x1, 0x400000008, 0x8, 0x20, 0x4}, {0x8000000000000000, 0xfffffffffffffff8, 0x200, 0x5}, 0x3cd, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in=@remote, 0x3500, 0x2, 0x2, 0x80, 0x7, 0x1, 0x200035e}}, 0xe8) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x4b, 0xe5a}}, './file0\x00'}) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x3f, 0x400, 0x5, 0x20b}, 0x14) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3078.208461][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.243379][ T2893] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3078.251131][ T2907] raw-gadget gadget: fail, usb_ep_enable returned -22 15:12:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3078.285010][T12997] hub 5-1:1.0: bad descriptor, ignoring hub [ 3078.293339][T13827] hub 3-1:1.0: bad descriptor, ignoring hub [ 3078.299663][T13827] hub: probe of 3-1:1.0 failed with error -5 [ 3078.319069][T12997] hub: probe of 5-1:1.0 failed with error -5 15:12:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x6ab5, &(0x7f00000000c0)={0x0, 0x509a, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000001140)="0f01c98fe878c1e400c4c18e2a9df50000000fc777000f07eaa70000002f0066baf80cb864f63e8aef66bafc0c66b8ab0066ef650f01cab9610b00000f320f01c5", 0x41}], 0x1, 0x20, &(0x7f00000011c0)=[@cstype3={0x5, 0x2}, @cstype3={0x5, 0xe}], 0x2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x163, &(0x7f0000001000)=@generic={0x0, 0x2, 0x100, '\x00', "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"}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/206, 0xce}], 0x5, &(0x7f0000000080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/89, 0x59}, {&(0x7f0000000a00)=""/91, 0x5b}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/5, 0x5}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f0000000c80)=""/3, 0x3}, {&(0x7f0000000cc0)=""/10, 0xa}, {&(0x7f0000000d00)=""/129, 0x81}], 0xa, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x2, 0x100, &(0x7f0000000fc0)={0x77359400}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000040)={&(0x7f0000000140)=""/178, 0xb2, 0x8001, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x6ab5, &(0x7f00000000c0)={0x0, 0x509a, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000001140)="0f01c98fe878c1e400c4c18e2a9df50000000fc777000f07eaa70000002f0066baf80cb864f63e8aef66bafc0c66b8ab0066ef650f01cab9610b00000f320f01c5", 0x41}], 0x1, 0x20, &(0x7f00000011c0)=[@cstype3={0x5, 0x2}, @cstype3={0x5, 0xe}], 0x2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x163, &(0x7f0000001000)=@generic={0x0, 0x2, 0x100, '\x00', "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"}) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/206, 0xce}], 0x5, &(0x7f0000000080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/89, 0x59}, {&(0x7f0000000a00)=""/91, 0x5b}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/5, 0x5}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f0000000c80)=""/3, 0x3}, {&(0x7f0000000cc0)=""/10, 0xa}, {&(0x7f0000000d00)=""/129, 0x81}], 0xa, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x2, 0x100, &(0x7f0000000fc0)={0x77359400}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000040)={&(0x7f0000000140)=""/178, 0xb2, 0x8001, 0x1}) (async) [ 3078.337244][T13827] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3078.346973][T12997] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 3078.384532][T13827] cdc_wdm 3-1:1.0: Unknown control protocol [ 3078.391673][ T2971] UDC core: couldn't find an available UDC or it's busy: -16 [ 3078.392275][T12997] cdc_wdm 5-1:1.0: Unknown control protocol [ 3078.439688][ T2971] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3078.482390][ T2976] UDC core: couldn't find an available UDC or it's busy: -16 [ 3078.519761][ T2975] UDC core: couldn't find an available UDC or it's busy: -16 [ 3078.555570][ T2976] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3078.569459][ T2975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:04 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async, rerun: 32) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000880)={0xf}) [ 3078.870345][ T2981] UDC core: couldn't find an available UDC or it's busy: -16 [ 3078.880402][ T2981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3078.894862][ T2976] UDC core: couldn't find an available UDC or it's busy: -16 15:12:04 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000880)={0xf}) [ 3078.926543][ T2976] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3079.024787][ T3005] UDC core: couldn't find an available UDC or it's busy: -16 [ 3079.033681][ T3005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3079.087081][ T3005] UDC core: couldn't find an available UDC or it's busy: -16 [ 3079.095956][ T3005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3079.131963][ T2904] usb 3-1: reset low-speed USB device number 87 using dummy_hcd [ 3079.612396][ T2907] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3079.991605][T13827] usb 5-1: USB disconnect, device number 127 15:12:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private0, 0x4e20, 0x3, 0x4e21, 0x6, 0x2, 0x80, 0xa0, 0x6c, 0x0, r2}, {0x2, 0x1, 0x100000001, 0x1, 0x400000008, 0x8, 0x20, 0x4}, {0x8000000000000000, 0xfffffffffffffff8, 0x200, 0x5}, 0x3cd, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in=@remote, 0x3500, 0x2, 0x2, 0x80, 0x7, 0x1, 0x200035e}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x4b, 0xe5a}}, './file0\x00'}) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x3f, 0x400, 0x5, 0x20b}, 0x14) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800120d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x3e, {0x3e, 0x26, "4fbd39542f648e31f3968e945bdd200d4e03cc87de35e264f2b2c225b8a669f37fa15713555bfa297818bc4884e3152b378cbbb00c265bac108adfdf"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000440)={0x26c82160fb993a29, 0xc, 0x2a, "cd9844765ae1145b77cac26ba4c0d377df460b82d9b31ad7a601d0ecdd34642141d8f809d3b36465d964"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x2bda, 0x4, 0x7, 0x8, 0x3, 0x7, 0x6, 0x101, 0x4796, 0x9, 0xfc0}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private0, 0x4e20, 0x3, 0x4e21, 0x6, 0x2, 0x80, 0xa0, 0x6c, 0x0, r2}, {0x2, 0x1, 0x100000001, 0x1, 0x400000008, 0x8, 0x20, 0x4}, {0x8000000000000000, 0xfffffffffffffff8, 0x200, 0x5}, 0x3cd, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in=@remote, 0x3500, 0x2, 0x2, 0x80, 0x7, 0x1, 0x200035e}}, 0xe8) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x4b, 0xe5a}}, './file0\x00'}) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x3f, 0x400, 0x5, 0x20b}, 0x14) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) socket$caif_seqpacket(0x25, 0x5, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:06 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000600), 0xc42, 0x28c041) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000065f000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000540)="d0e6ba610066b8d300000066ef640f01c366b9800000c00f326635002000000f3066b8010000000f01c166b8260000000f23d80f21f86635c00000600f23f80f0017b8cb000f00d00f01d10f22da", 0x4e}], 0x1, 0x0, &(0x7f00000005c0)=[@efer={0x2, 0xc800}], 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000663000/0x2000)=nil, 0x2000, 0x3000008, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x68) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000640)="37ad", 0x2) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x45a4, &(0x7f00000000c0)={0x0, 0x20c8e0, 0x1, 0x1}, &(0x7f000003c000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendfile(r6, r3, &(0x7f0000000040)=0x718, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x45a4, &(0x7f00000000c0)={0x0, 0x20c8e0, 0x1, 0x1}, &(0x7f000003c000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendfile(r6, r3, &(0x7f0000000040)=0x718, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) [ 3080.411430][T27183] usb 3-1: USB disconnect, device number 87 15:12:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3080.505264][ T3027] UDC core: couldn't find an available UDC or it's busy: -16 [ 3080.537761][ T3026] UDC core: couldn't find an available UDC or it's busy: -16 [ 3080.560990][ T3026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3080.591079][ T3027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3080.653803][ T3053] UDC core: couldn't find an available UDC or it's busy: -16 [ 3080.665689][ T3053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3080.771891][ T3025] UDC core: couldn't find an available UDC or it's busy: -16 [ 3080.779996][ T3025] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) listen(r2, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3080.819369][ T3026] UDC core: couldn't find an available UDC or it's busy: -16 [ 3080.841129][ T5618] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 3080.850961][T13827] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 3080.858130][ T3026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3080.989825][ T3060] UDC core: couldn't find an available UDC or it's busy: -16 [ 3081.014773][ T3060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3081.041060][T13827] usb 5-1: device descriptor read/64, error 18 15:12:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000580)=0x2, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/105, 0x69}], 0x3, 0x400, 0xaa) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) syz_io_uring_setup(0x568, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1278}, &(0x7f0000799000/0x3000)=nil, &(0x7f0000eda000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0xd1d724b399305b44, 0xfffffffd}, &(0x7f0000fe1000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r8}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x4) [ 3081.231181][ T5618] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3081.250984][ T3057] UDC core: couldn't find an available UDC or it's busy: -16 [ 3081.258849][ T3057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3081.269358][ T5618] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3081.281203][ T5618] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3081.297770][ T5618] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3081.307618][ T5618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3081.331139][T13827] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 3081.361649][ T3030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3081.402575][ T5618] hub 3-1:1.0: bad descriptor, ignoring hub [ 3081.408927][ T5618] hub: probe of 3-1:1.0 failed with error -5 [ 3081.438157][ T5618] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device 15:12:07 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async, rerun: 32) r0 = syz_open_dev$sndpcmp(&(0x7f0000000600), 0xc42, 0x28c041) (rerun: 32) dup(r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000065f000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000540)="d0e6ba610066b8d300000066ef640f01c366b9800000c00f326635002000000f3066b8010000000f01c166b8260000000f23d80f21f86635c00000600f23f80f0017b8cb000f00d00f01d10f22da", 0x4e}], 0x1, 0x0, &(0x7f00000005c0)=[@efer={0x2, 0xc800}], 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000663000/0x2000)=nil, 0x2000, 0x3000008, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x68) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) write$char_usb(r3, &(0x7f0000000640)="37ad", 0x2) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 32) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3081.455662][ T5618] cdc_wdm 3-1:1.0: Unknown control protocol 15:12:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800120d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x3e, {0x3e, 0x26, "4fbd39542f648e31f3968e945bdd200d4e03cc87de35e264f2b2c225b8a669f37fa15713555bfa297818bc4884e3152b378cbbb00c265bac108adfdf"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000440)={0x26c82160fb993a29, 0xc, 0x2a, "cd9844765ae1145b77cac26ba4c0d377df460b82d9b31ad7a601d0ecdd34642141d8f809d3b36465d964"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x2bda, 0x4, 0x7, 0x8, 0x3, 0x7, 0x6, 0x101, 0x4796, 0x9, 0xfc0}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (rerun: 64) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000666000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="470f1d57fd470fc72cafc482e1baf20fae84d2918f00002e430f78372e0f785300b805000000b9000000000f01d9643c00660f2b7d80440f20c03502000000440f22c0", 0x43}], 0x1, 0x9, &(0x7f0000000180)=[@cstype3={0x5, 0x1}], 0x1) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3081.530953][T13827] usb 5-1: device descriptor read/64, error 18 [ 3081.651579][T13827] usb usb5-port1: attempt power cycle [ 3081.663484][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.670263][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.768092][T17882] usb 3-1: USB disconnect, device number 88 [ 3081.781194][ T3080] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3081.787001][ T3084] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3081.826613][ T3083] UDC core: couldn't find an available UDC or it's busy: -16 [ 3081.859282][ T3083] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800120d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x3e, {0x3e, 0x26, "4fbd39542f648e31f3968e945bdd200d4e03cc87de35e264f2b2c225b8a669f37fa15713555bfa297818bc4884e3152b378cbbb00c265bac108adfdf"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000440)={0x26c82160fb993a29, 0xc, 0x2a, "cd9844765ae1145b77cac26ba4c0d377df460b82d9b31ad7a601d0ecdd34642141d8f809d3b36465d964"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x2bda, 0x4, 0x7, 0x8, 0x3, 0x7, 0x6, 0x101, 0x4796, 0x9, 0xfc0}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800120d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x3e, {0x3e, 0x26, "4fbd39542f648e31f3968e945bdd200d4e03cc87de35e264f2b2c225b8a669f37fa15713555bfa297818bc4884e3152b378cbbb00c265bac108adfdf"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000440)={0x26c82160fb993a29, 0xc, 0x2a, "cd9844765ae1145b77cac26ba4c0d377df460b82d9b31ad7a601d0ecdd34642141d8f809d3b36465d964"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x8, 0x2bda, 0x4, 0x7, 0x8, 0x3, 0x7, 0x6, 0x101, 0x4796, 0x9, 0xfc0}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3082.090951][T13827] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 3082.138642][ T3096] UDC core: couldn't find an available UDC or it's busy: -16 [ 3082.147772][ T3096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3082.167412][ T3083] UDC core: couldn't find an available UDC or it's busy: -16 [ 3082.181259][ T3083] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3082.271361][T13827] usb 5-1: device descriptor read/8, error -61 [ 3082.363040][ T3096] UDC core: couldn't find an available UDC or it's busy: -16 [ 3082.398460][ T3096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3082.421020][T17882] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 3082.541063][T13827] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 3082.711015][T13827] usb 5-1: device descriptor read/8, error -61 [ 3082.831276][T17882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3082.831281][T13827] usb usb5-port1: unable to enumerate USB device [ 3082.860690][T17882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3082.870779][T17882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3082.882034][T17882] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3082.908470][T17882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3082.942485][ T3030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3082.973884][T17882] hub 3-1:1.0: bad descriptor, ignoring hub [ 3082.980506][T17882] hub: probe of 3-1:1.0 failed with error -5 [ 3082.991912][T17882] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3082.998584][T17882] cdc_wdm 3-1:1.0: Unknown control protocol [ 3083.371969][T13827] usb 3-1: USB disconnect, device number 89 15:12:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private0, 0x4e20, 0x3, 0x4e21, 0x6, 0x2, 0x80, 0xa0, 0x6c, 0x0, r2}, {0x2, 0x1, 0x100000001, 0x1, 0x400000008, 0x8, 0x20, 0x4}, {0x8000000000000000, 0xfffffffffffffff8, 0x200, 0x5}, 0x3cd, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in=@remote, 0x3500, 0x2, 0x2, 0x80, 0x7, 0x1, 0x200035e}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x4b, 0xe5a}}, './file0\x00'}) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x3f, 0x400, 0x5, 0x20b}, 0x14) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async, rerun: 64) r0 = syz_open_dev$sndpcmp(&(0x7f0000000600), 0xc42, 0x28c041) dup(r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f000065f000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000540)="d0e6ba610066b8d300000066ef640f01c366b9800000c00f326635002000000f3066b8010000000f01c166b8260000000f23d80f21f86635c00000600f23f80f0017b8cb000f00d00f01d10f22da", 0x4e}], 0x1, 0x0, &(0x7f00000005c0)=[@efer={0x2, 0xc800}], 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000663000/0x2000)=nil, 0x2000, 0x3000008, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x68) (async, rerun: 64) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) write$char_usb(r3, &(0x7f0000000640)="37ad", 0x2) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 64) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x8000000000000001, 0x0, 0xc7f9, 0x5bcb, 0x80000000, 0x401, 0x8, 0x41, 0x7, 0x4, 0xfffffffffffffffd, 0x12000000000, 0x101, 0x5, 0x8000], 0x6000, 0xc000}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000580)=0x2, 0x4) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/105, 0x69}], 0x3, 0x400, 0xaa) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async, rerun: 32) bind$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async, rerun: 64) syz_io_uring_setup(0x568, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1278}, &(0x7f0000799000/0x3000)=nil, &(0x7f0000eda000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) (rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0xd1d724b399305b44, 0xfffffffd}, &(0x7f0000fe1000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r8}}, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x4) 15:12:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000666000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="470f1d57fd470fc72cafc482e1baf20fae84d2918f00002e430f78372e0f785300b805000000b9000000000f01d9643c00660f2b7d80440f20c03502000000440f22c0", 0x43}], 0x1, 0x9, &(0x7f0000000180)=[@cstype3={0x5, 0x1}], 0x1) (async) syz_usb_disconnect(r4) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x14, 0x2, 0x5, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@generic="1f3b6a95647c526e8c5eca1183d24e9ac904ea046ef82e77f5eebaf63b644ef75fba7d690e83f7042dd5f7330c24167b0f56ea45ef367068f026730d37cf", @nested={0x120, 0x58, 0x0, 0x1, [@generic="18fd6799f6b5d6bef3bca4ea423c6737936d59f4ac1a245cab9a33fbdfed512eed70fb17ddd29c0262d94254a2a696bd1901166d2253ebfbbcf6640001c7d81b2fb0734209a650a52a3dbf62e63c39109400bf38a13cd2c2d0ed0ff3fd0437607283f841ecd10200623b58f1504a3fd4", @generic="a64b77131bb4f8bcd4eefade2a6344f1856b377fd8a248b39b1d19a08b5f13cba55c101240d41aa718358cc6baabbad343123dba0f581a23e2405cdc046863074598046b9c8e28498a1759a1e96d48c4b35daade05f34adec3accab86a49452a9009d4d20bbd21388efc5f7f500c84b61b717709b93ec1bea7584e75b766a01844440f22569d4142fe1f0859ecc74a8592e8eecbd174ca42973ac6369419b883df16cc4b", @typed={0x8, 0x61, 0x0, 0x0, @uid=r3}]}, @generic="4d7755c2533c67610f45aa394cea0d"]}, 0x184}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000040) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3083.613249][ T3116] UDC core: couldn't find an available UDC or it's busy: -16 15:12:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000580)=0x2, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/105, 0x69}], 0x3, 0x400, 0xaa) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) syz_io_uring_setup(0x568, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1278}, &(0x7f0000799000/0x3000)=nil, &(0x7f0000eda000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0xd1d724b399305b44, 0xfffffffd}, &(0x7f0000fe1000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x1, {0x0, r8}}, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x4) [ 3083.667723][ T3116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000666000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="470f1d57fd470fc72cafc482e1baf20fae84d2918f00002e430f78372e0f785300b805000000b9000000000f01d9643c00660f2b7d80440f20c03502000000440f22c0", 0x43}], 0x1, 0x9, &(0x7f0000000180)=[@cstype3={0x5, 0x1}], 0x1) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000666000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="470f1d57fd470fc72cafc482e1baf20fae84d2918f00002e430f78372e0f785300b805000000b9000000000f01d9643c00660f2b7d80440f20c03502000000440f22c0", 0x43}], 0x1, 0x9, &(0x7f0000000180)=[@cstype3={0x5, 0x1}], 0x1) (async) syz_usb_disconnect(r4) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3083.841352][ T5617] usb 3-1: new low-speed USB device number 90 using dummy_hcd 15:12:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r3, 0x0, &(0x7f0000000580)='./file0\x00', 0x100, 0x408200, 0x12345}, 0x7) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3083.931647][ T144] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 3084.036912][ T3116] UDC core: couldn't find an available UDC or it's busy: -16 [ 3084.045099][ T3116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3084.089121][ T3150] UDC core: couldn't find an available UDC or it's busy: -16 [ 3084.121227][ T144] usb 5-1: device descriptor read/64, error 18 [ 3084.130680][ T3159] UDC core: couldn't find an available UDC or it's busy: -16 [ 3084.149466][ T3150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3084.183010][ T3159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3084.211575][ T5617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3084.229575][ T5617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3084.240606][ T5617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3084.259153][ T5617] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3084.269745][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3084.341854][ T3117] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3084.366846][ T5617] hub 3-1:1.0: bad descriptor, ignoring hub [ 3084.373774][ T5617] hub: probe of 3-1:1.0 failed with error -5 [ 3084.384723][ T5617] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3084.391469][ T5617] cdc_wdm 3-1:1.0: Unknown control protocol [ 3084.411091][ T144] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 3084.429988][ T3150] UDC core: couldn't find an available UDC or it's busy: -16 [ 3084.441648][ T3150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3084.513526][ T3156] UDC core: couldn't find an available UDC or it's busy: -16 [ 3084.530191][ T3156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x4000969, &(0x7f00000000c0)={0x0, 0x706a, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3084.644027][ T144] usb 5-1: device descriptor read/64, error 18 [ 3084.781442][ T144] usb usb5-port1: attempt power cycle 15:12:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x8000000000000001, 0x0, 0xc7f9, 0x5bcb, 0x80000000, 0x401, 0x8, 0x41, 0x7, 0x4, 0xfffffffffffffffd, 0x12000000000, 0x101, 0x5, 0x8000], 0x6000, 0xc000}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x8000000000000001, 0x0, 0xc7f9, 0x5bcb, 0x80000000, 0x401, 0x8, 0x41, 0x7, 0x4, 0xfffffffffffffffd, 0x12000000000, 0x101, 0x5, 0x8000], 0x6000, 0xc000}) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3084.850386][ T3171] UDC core: couldn't find an available UDC or it's busy: -16 [ 3084.871656][ T3171] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3084.979103][ T3184] UDC core: couldn't find an available UDC or it's busy: -16 [ 3085.007416][ T3184] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0xfff3, 0x6}, {0xffff, 0xfff2}}, [{0x8, 0xb, 0x97e}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3085.164514][ T3187] UDC core: couldn't find an available UDC or it's busy: -16 [ 3085.183059][ T3187] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3085.211076][ T144] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 3085.223674][ T3117] usb 3-1: reset low-speed USB device number 90 using dummy_hcd [ 3085.244447][ T3196] UDC core: couldn't find an available UDC or it's busy: -16 [ 3085.281013][ T3196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3085.386086][ T3188] UDC core: couldn't find an available UDC or it's busy: -16 [ 3085.411114][ T144] usb 5-1: device descriptor read/8, error -61 [ 3085.417953][ T3188] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3085.701893][ T144] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 3085.721580][ T3169] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3085.894815][ T144] usb 5-1: device descriptor read/8, error -61 [ 3086.033387][ T144] usb usb5-port1: unable to enumerate USB device [ 3086.083086][ T5617] usb 3-1: USB disconnect, device number 90 15:12:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@private0, 0x4e20, 0x3, 0x4e21, 0x6, 0x2, 0x80, 0xa0, 0x6c, 0x0, r2}, {0x2, 0x1, 0x100000001, 0x1, 0x400000008, 0x8, 0x20, 0x4}, {0x8000000000000000, 0xfffffffffffffff8, 0x200, 0x5}, 0x3cd, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in=@remote, 0x3500, 0x2, 0x2, 0x80, 0x7, 0x1, 0x200035e}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0x4b, 0xe5a}}, './file0\x00'}) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x3f, 0x400, 0x5, 0x20b}, 0x14) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:12 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r3, 0x0, &(0x7f0000000580)='./file0\x00', 0x100, 0x408200, 0x12345}, 0x7) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x8000000000000001, 0x0, 0xc7f9, 0x5bcb, 0x80000000, 0x401, 0x8, 0x41, 0x7, 0x4, 0xfffffffffffffffd, 0x12000000000, 0x101, 0x5, 0x8000], 0x6000, 0xc000}) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0xfff3, 0x6}, {0xffff, 0xfff2}}, [{0x8, 0xb, 0x97e}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0xfff3, 0x6}, {0xffff, 0xfff2}}, [{0x8, 0xb, 0x97e}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x80) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) 15:12:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x14, 0x2, 0x5, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@generic="1f3b6a95647c526e8c5eca1183d24e9ac904ea046ef82e77f5eebaf63b644ef75fba7d690e83f7042dd5f7330c24167b0f56ea45ef367068f026730d37cf", @nested={0x120, 0x58, 0x0, 0x1, [@generic="18fd6799f6b5d6bef3bca4ea423c6737936d59f4ac1a245cab9a33fbdfed512eed70fb17ddd29c0262d94254a2a696bd1901166d2253ebfbbcf6640001c7d81b2fb0734209a650a52a3dbf62e63c39109400bf38a13cd2c2d0ed0ff3fd0437607283f841ecd10200623b58f1504a3fd4", @generic="a64b77131bb4f8bcd4eefade2a6344f1856b377fd8a248b39b1d19a08b5f13cba55c101240d41aa718358cc6baabbad343123dba0f581a23e2405cdc046863074598046b9c8e28498a1759a1e96d48c4b35daade05f34adec3accab86a49452a9009d4d20bbd21388efc5f7f500c84b61b717709b93ec1bea7584e75b766a01844440f22569d4142fe1f0859ecc74a8592e8eecbd174ca42973ac6369419b883df16cc4b", @typed={0x8, 0x61, 0x0, 0x0, @uid=r3}]}, @generic="4d7755c2533c67610f45aa394cea0d"]}, 0x184}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000040) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3086.636668][ T3213] UDC core: couldn't find an available UDC or it's busy: -16 [ 3086.647182][ T3206] UDC core: couldn't find an available UDC or it's busy: -16 15:12:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x4000969, &(0x7f00000000c0)={0x0, 0x706a, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x4000969, &(0x7f00000000c0)={0x0, 0x706a, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r3) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, r4, 0x8000000) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x4) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3086.752058][ T3206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3086.766412][ T3213] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3086.814826][ T3230] UDC core: couldn't find an available UDC or it's busy: -16 [ 3086.823219][ T3230] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:12 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r3, 0x0, &(0x7f0000000580)='./file0\x00', 0x100, 0x408200, 0x12345}, 0x7) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3087.053690][ T3260] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.074708][ T3255] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.122924][ T5617] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 3087.127898][ T3260] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3087.131178][ T5313] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 3087.153543][ T3255] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x14, 0x2, 0x5, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@generic="1f3b6a95647c526e8c5eca1183d24e9ac904ea046ef82e77f5eebaf63b644ef75fba7d690e83f7042dd5f7330c24167b0f56ea45ef367068f026730d37cf", @nested={0x120, 0x58, 0x0, 0x1, [@generic="18fd6799f6b5d6bef3bca4ea423c6737936d59f4ac1a245cab9a33fbdfed512eed70fb17ddd29c0262d94254a2a696bd1901166d2253ebfbbcf6640001c7d81b2fb0734209a650a52a3dbf62e63c39109400bf38a13cd2c2d0ed0ff3fd0437607283f841ecd10200623b58f1504a3fd4", @generic="a64b77131bb4f8bcd4eefade2a6344f1856b377fd8a248b39b1d19a08b5f13cba55c101240d41aa718358cc6baabbad343123dba0f581a23e2405cdc046863074598046b9c8e28498a1759a1e96d48c4b35daade05f34adec3accab86a49452a9009d4d20bbd21388efc5f7f500c84b61b717709b93ec1bea7584e75b766a01844440f22569d4142fe1f0859ecc74a8592e8eecbd174ca42973ac6369419b883df16cc4b", @typed={0x8, 0x61, 0x0, 0x0, @uid=r3}]}, @generic="4d7755c2533c67610f45aa394cea0d"]}, 0x184}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000040) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private2, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x184, 0x14, 0x2, 0x5, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@generic="1f3b6a95647c526e8c5eca1183d24e9ac904ea046ef82e77f5eebaf63b644ef75fba7d690e83f7042dd5f7330c24167b0f56ea45ef367068f026730d37cf", @nested={0x120, 0x58, 0x0, 0x1, [@generic="18fd6799f6b5d6bef3bca4ea423c6737936d59f4ac1a245cab9a33fbdfed512eed70fb17ddd29c0262d94254a2a696bd1901166d2253ebfbbcf6640001c7d81b2fb0734209a650a52a3dbf62e63c39109400bf38a13cd2c2d0ed0ff3fd0437607283f841ecd10200623b58f1504a3fd4", @generic="a64b77131bb4f8bcd4eefade2a6344f1856b377fd8a248b39b1d19a08b5f13cba55c101240d41aa718358cc6baabbad343123dba0f581a23e2405cdc046863074598046b9c8e28498a1759a1e96d48c4b35daade05f34adec3accab86a49452a9009d4d20bbd21388efc5f7f500c84b61b717709b93ec1bea7584e75b766a01844440f22569d4142fe1f0859ecc74a8592e8eecbd174ca42973ac6369419b883df16cc4b", @typed={0x8, 0x61, 0x0, 0x0, @uid=r3}]}, @generic="4d7755c2533c67610f45aa394cea0d"]}, 0x184}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000040) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:13 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000057d06000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x71b082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900000000000000000006241a200000090581164c00"/70], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000656000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f20c035040000000f22c0c482712d8d041f0000f045f7970f000000c744240045000000c744240200400000ff2c24c744240000000000c74424021500c0fec7442406000000000f01142466b82d010f00d066baf80cb8589a4984ef66bafc0c66edf3430fc7300fae3036430f01c4", 0x6f}], 0x1, 0x17, &(0x7f0000000280), 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, '\x00', {0x3, 0x2, 0x0, 0x0, 0x4, 0x0, 0x20}}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3087.338386][ T3283] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.347085][ T3283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3087.351048][ T5617] usb 5-1: device descriptor read/64, error 18 [ 3087.366764][ T3237] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.376653][ T3285] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.386431][ T3237] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3087.395700][ T3285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3087.593603][ T3283] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.601784][ T3283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3087.610792][ T3283] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.624328][ T3283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3087.627321][ T3281] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.656486][ T3281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3087.661050][ T5617] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 3087.676931][ T3283] UDC core: couldn't find an available UDC or it's busy: -16 [ 3087.700217][ T3283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = syz_io_uring_setup(0x4000969, &(0x7f00000000c0)={0x0, 0x706a, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r3) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3087.871169][ T5617] usb 5-1: device descriptor read/64, error 18 [ 3087.877985][ T5313] usb 3-1: device descriptor read/64, error -71 [ 3088.002347][ T5617] usb usb5-port1: attempt power cycle 15:12:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x8, 0x931, &(0x7f0000000000)="3a962882", &(0x7f0000000140)="91e95d3bf2776fa613a5966968ab20722236d9e62193f3284275118bcd3d0bdbd554588053910509e9971c6a8046030da5a062e1bb10fac723a3f2d9b26a9dfa44f6050f29cf23800de35ceced42d97edb9a62aa62f89ede51fe2b57105f23a7ec3ff76b36c6bc42713969b78f263d8a4c2fa8ba9536fd4b23d62dab2cb5af78658cf695e246d6872cac65d3bdaee7b1fb1f4339ef450312b58f8744c625303939824c0ac263ef392f", 0x4, 0xa9}) [ 3088.151057][ T5313] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 3088.264835][ T3307] UDC core: couldn't find an available UDC or it's busy: -16 [ 3088.280248][ T3307] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3088.451255][ T5617] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 3088.511215][ T5313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3088.520688][ T3307] UDC core: couldn't find an available UDC or it's busy: -16 [ 3088.528767][ T5313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3088.529598][ T3307] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3088.549561][ T5313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3088.560579][ T5313] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3088.579108][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3088.611578][ T3275] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3088.621612][ T5617] usb 5-1: device descriptor read/8, error -61 [ 3088.632316][ T5313] hub 3-1:1.0: bad descriptor, ignoring hub [ 3088.650955][ T5313] hub: probe of 3-1:1.0 failed with error -5 [ 3088.671281][ T5313] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3088.677651][ T5313] cdc_wdm 3-1:1.0: Unknown control protocol [ 3088.891110][ T5617] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 3089.061325][ T5617] usb 5-1: device descriptor read/8, error -61 [ 3089.181383][ T5617] usb usb5-port1: unable to enumerate USB device [ 3089.411578][ T3275] usb 3-1: reset low-speed USB device number 92 using dummy_hcd 15:12:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x8, 0x931, &(0x7f0000000000)="3a962882", &(0x7f0000000140)="91e95d3bf2776fa613a5966968ab20722236d9e62193f3284275118bcd3d0bdbd554588053910509e9971c6a8046030da5a062e1bb10fac723a3f2d9b26a9dfa44f6050f29cf23800de35ceced42d97edb9a62aa62f89ede51fe2b57105f23a7ec3ff76b36c6bc42713969b78f263d8a4c2fa8ba9536fd4b23d62dab2cb5af78658cf695e246d6872cac65d3bdaee7b1fb1f4339ef450312b58f8744c625303939824c0ac263ef392f", 0x4, 0xa9}) 15:12:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x71b082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900000000000000000006241a200000090581164c00"/70], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000656000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f20c035040000000f22c0c482712d8d041f0000f045f7970f000000c744240045000000c744240200400000ff2c24c744240000000000c74424021500c0fec7442406000000000f01142466b82d010f00d066baf80cb8589a4984ef66bafc0c66edf3430fc7300fae3036430f01c4", 0x6f}], 0x1, 0x17, &(0x7f0000000280), 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, '\x00', {0x3, 0x2, 0x0, 0x0, 0x4, 0x0, 0x20}}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0xfff3, 0x6}, {0xffff, 0xfff2}}, [{0x8, 0xb, 0x97e}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {0xfff3, 0x6}, {0xffff, 0xfff2}}, [{0x8, 0xb, 0x97e}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x80) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) 15:12:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000057d06000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000057d06000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x8, 0x931, &(0x7f0000000000)="3a962882", &(0x7f0000000140)="91e95d3bf2776fa613a5966968ab20722236d9e62193f3284275118bcd3d0bdbd554588053910509e9971c6a8046030da5a062e1bb10fac723a3f2d9b26a9dfa44f6050f29cf23800de35ceced42d97edb9a62aa62f89ede51fe2b57105f23a7ec3ff76b36c6bc42713969b78f263d8a4c2fa8ba9536fd4b23d62dab2cb5af78658cf695e246d6872cac65d3bdaee7b1fb1f4339ef450312b58f8744c625303939824c0ac263ef392f", 0x4, 0xa9}) [ 3089.748503][ T3317] UDC core: couldn't find an available UDC or it's busy: -16 [ 3089.778308][ T3325] UDC core: couldn't find an available UDC or it's busy: -16 [ 3089.790454][ T3317] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3089.802922][ T3326] UDC core: couldn't find an available UDC or it's busy: -16 [ 3089.819325][ T3327] UDC core: couldn't find an available UDC or it's busy: -16 [ 3089.825823][ T3325] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3089.842594][ T3327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3089.849218][ T3326] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3089.931586][ T3310] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3090.122298][ T3326] UDC core: couldn't find an available UDC or it's busy: -16 [ 3090.130407][ T3326] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x71b082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a0904000001020900000000000000000006241a200000090581164c00"/70], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000656000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="0f20c035040000000f22c0c482712d8d041f0000f045f7970f000000c744240045000000c744240200400000ff2c24c744240000000000c74424021500c0fec7442406000000000f01142466b82d010f00d066baf80cb8589a4984ef66bafc0c66edf3430fc7300fae3036430f01c4", 0x6f}], 0x1, 0x17, &(0x7f0000000280), 0x0) (async) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, '\x00', {0x3, 0x2, 0x0, 0x0, 0x4, 0x0, 0x20}}) (async, rerun: 32) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3090.221197][ T5313] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 3090.240882][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 3090.241095][T27183] usb 3-1: USB disconnect, device number 92 [ 3090.247513][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 3090.247541][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3090.366460][ T3353] UDC core: couldn't find an available UDC or it's busy: -16 15:12:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000040)=""/121, 0x79) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:16 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000057d06000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3090.430999][ T3353] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (rerun: 64) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x8, 0x931, &(0x7f0000000000)="3a962882", &(0x7f0000000140)="91e95d3bf2776fa613a5966968ab20722236d9e62193f3284275118bcd3d0bdbd554588053910509e9971c6a8046030da5a062e1bb10fac723a3f2d9b26a9dfa44f6050f29cf23800de35ceced42d97edb9a62aa62f89ede51fe2b57105f23a7ec3ff76b36c6bc42713969b78f263d8a4c2fa8ba9536fd4b23d62dab2cb5af78658cf695e246d6872cac65d3bdaee7b1fb1f4339ef450312b58f8744c625303939824c0ac263ef392f", 0x4, 0xa9}) [ 3090.641348][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3090.674962][ T3352] UDC core: couldn't find an available UDC or it's busy: -16 [ 3090.697017][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3090.714731][ T3353] UDC core: couldn't find an available UDC or it's busy: -16 [ 3090.722512][ T3367] UDC core: couldn't find an available UDC or it's busy: -16 [ 3090.722556][ T3367] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3090.722687][ T3352] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_clone(0x9096000, &(0x7f0000000000)="5036018bfa6788a53bf789b40d5e61aff6f74605ddf9afd516d53f1fd41c13feb496b2c63063ad95e4e3dc6cfea6065c27969bf780d2243193f6169b6f593b5c0b637895982a02b6bc0878810f9b8ed05b25954ce824cd239067a7dd233cbe4cc7d25851017de2db4bfac53029034652df732e7c43bd5cc01fe4e3b9569ccd71e6242418fd81a8203eed9f942ac5de77feac0af016d8c0d4727806dfbc0e2f74eb83e90026b8ed403573cb22ad8c6096bf6912", 0xb3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9e4b75578ba19d5b6cab190f3f687c7462c4b14f9bd0b234dd022d0a051f3924efd5077bdcbb1f5cbbd573944bdbfe2b87964ba6fafc4ec0b1240a81a3d25650b1960132df393b6ae439b666b160386a857d50aadd06954ccb827f9957baf06824d8bc") r2 = msgget(0x2, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x442, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, 0x0, 0xee00, 0x0, 0x30, 0x9}, 0x0, 0x0, 0x3, 0x100000, 0x101, 0x3, 0x7ff, 0x8, 0x40, 0x7f, r1, r1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:16 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000667000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="c74424007f000000c744240227210000ff2c243dd5470000410f01c20d04000000c4e1fa2d09c7442400bca00000c7442402000011d4c7442406000000000f011424d2d39ec462f934ab00809c5c440f01f8", 0x52}], 0x1, 0x849a0816aebce031, &(0x7f0000000600)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @cstype0], 0x2) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0x4, 0x100000}) [ 3090.746982][ T5313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt 15:12:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3090.821121][ T3353] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3090.840898][ T144] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 3090.857595][ T5313] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3090.906722][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3090.933935][ T3381] UDC core: couldn't find an available UDC or it's busy: -16 [ 3090.998377][ T3381] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3091.013180][ T3330] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3091.042084][ T3381] fuse: Bad value for 'fd' [ 3091.052392][ T5313] hub 5-1:1.0: bad descriptor, ignoring hub [ 3091.082928][ T5313] hub: probe of 5-1:1.0 failed with error -5 [ 3091.125890][ T3383] UDC core: couldn't find an available UDC or it's busy: -16 [ 3091.138274][ T5313] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3091.146968][ T5313] cdc_wdm 5-1:1.0: Unknown control protocol [ 3091.201832][ T3383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3091.212228][ T3386] UDC core: couldn't find an available UDC or it's busy: -16 [ 3091.291202][ T144] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3091.325519][ T3386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3091.334508][ T144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3091.347050][ T144] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3091.362278][ T144] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3091.373292][ T144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3091.411357][ T3359] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3091.432599][ T144] hub 3-1:1.0: bad descriptor, ignoring hub [ 3091.439311][ T144] hub: probe of 3-1:1.0 failed with error -5 [ 3091.587247][ T3383] UDC core: couldn't find an available UDC or it's busy: -16 [ 3091.613005][ T3391] UDC core: couldn't find an available UDC or it's busy: -16 [ 3091.631630][ T3383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3091.639690][ T3391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3091.952082][ T3378] usb 5-1: reset low-speed USB device number 14 using dummy_hcd [ 3092.451625][ T3335] raw-gadget gadget: fail, usb_ep_enable returned -22 15:12:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_clone(0x9096000, &(0x7f0000000000)="5036018bfa6788a53bf789b40d5e61aff6f74605ddf9afd516d53f1fd41c13feb496b2c63063ad95e4e3dc6cfea6065c27969bf780d2243193f6169b6f593b5c0b637895982a02b6bc0878810f9b8ed05b25954ce824cd239067a7dd233cbe4cc7d25851017de2db4bfac53029034652df732e7c43bd5cc01fe4e3b9569ccd71e6242418fd81a8203eed9f942ac5de77feac0af016d8c0d4727806dfbc0e2f74eb83e90026b8ed403573cb22ad8c6096bf6912", 0xb3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9e4b75578ba19d5b6cab190f3f687c7462c4b14f9bd0b234dd022d0a051f3924efd5077bdcbb1f5cbbd573944bdbfe2b87964ba6fafc4ec0b1240a81a3d25650b1960132df393b6ae439b666b160386a857d50aadd06954ccb827f9957baf06824d8bc") r2 = msgget(0x2, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x442, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, 0x0, 0xee00, 0x0, 0x30, 0x9}, 0x0, 0x0, 0x3, 0x100000, 0x101, 0x3, 0x7ff, 0x8, 0x40, 0x7f, r1, r1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200002090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:23 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000667000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="c74424007f000000c744240227210000ff2c243dd5470000410f01c20d04000000c4e1fa2d09c7442400bca00000c7442402000011d4c7442406000000000f011424d2d39ec462f934ab00809c5c440f01f8", 0x52}], 0x1, 0x849a0816aebce031, &(0x7f0000000600)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @cstype0], 0x2) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r4) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0x4, 0x100000}) 15:12:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_clone(0x9096000, &(0x7f0000000000)="5036018bfa6788a53bf789b40d5e61aff6f74605ddf9afd516d53f1fd41c13feb496b2c63063ad95e4e3dc6cfea6065c27969bf780d2243193f6169b6f593b5c0b637895982a02b6bc0878810f9b8ed05b25954ce824cd239067a7dd233cbe4cc7d25851017de2db4bfac53029034652df732e7c43bd5cc01fe4e3b9569ccd71e6242418fd81a8203eed9f942ac5de77feac0af016d8c0d4727806dfbc0e2f74eb83e90026b8ed403573cb22ad8c6096bf6912", 0xb3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9e4b75578ba19d5b6cab190f3f687c7462c4b14f9bd0b234dd022d0a051f3924efd5077bdcbb1f5cbbd573944bdbfe2b87964ba6fafc4ec0b1240a81a3d25650b1960132df393b6ae439b666b160386a857d50aadd06954ccb827f9957baf06824d8bc") (async) r2 = msgget(0x2, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x442, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) (async) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, 0x0, 0xee00, 0x0, 0x30, 0x9}, 0x0, 0x0, 0x3, 0x100000, 0x101, 0x3, 0x7ff, 0x8, 0x40, 0x7f, r1, r1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3097.035012][ T3386] cdc_wdm 5-1:1.0: Error autopm - -16 [ 3097.035317][T27183] usb 5-1: USB disconnect, device number 14 [ 3097.052676][ T144] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3097.052852][ T3355] cdc_wdm 5-1:1.0: Error autopm - -16 [ 3097.059177][ T144] cdc_wdm 3-1:1.0: Unknown control protocol [ 3097.170739][ T3401] UDC core: couldn't find an available UDC or it's busy: -16 [ 3097.195626][ T3405] UDC core: couldn't find an available UDC or it's busy: -16 [ 3097.211294][ T3405] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3097.254885][ T3401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000040)=""/121, 0x79) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) readahead(r3, 0x0, 0x0) (async) read$char_usb(r3, &(0x7f0000000040)=""/121, 0x79) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3097.453885][ T3403] UDC core: couldn't find an available UDC or it's busy: -16 [ 3097.484412][ T3403] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:23 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000667000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="c74424007f000000c744240227210000ff2c243dd5470000410f01c20d04000000c4e1fa2d09c7442400bca00000c7442402000011d4c7442406000000000f011424d2d39ec462f934ab00809c5c440f01f8", 0x52}], 0x1, 0x849a0816aebce031, &(0x7f0000000600)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @cstype0], 0x2) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r4) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0x4, 0x100000}) 15:12:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_clone(0x9096000, &(0x7f0000000000)="5036018bfa6788a53bf789b40d5e61aff6f74605ddf9afd516d53f1fd41c13feb496b2c63063ad95e4e3dc6cfea6065c27969bf780d2243193f6169b6f593b5c0b637895982a02b6bc0878810f9b8ed05b25954ce824cd239067a7dd233cbe4cc7d25851017de2db4bfac53029034652df732e7c43bd5cc01fe4e3b9569ccd71e6242418fd81a8203eed9f942ac5de77feac0af016d8c0d4727806dfbc0e2f74eb83e90026b8ed403573cb22ad8c6096bf6912", 0xb3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9e4b75578ba19d5b6cab190f3f687c7462c4b14f9bd0b234dd022d0a051f3924efd5077bdcbb1f5cbbd573944bdbfe2b87964ba6fafc4ec0b1240a81a3d25650b1960132df393b6ae439b666b160386a857d50aadd06954ccb827f9957baf06824d8bc") r2 = msgget(0x2, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x442, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, 0x0, 0xee00, 0x0, 0x30, 0x9}, 0x0, 0x0, 0x3, 0x100000, 0x101, 0x3, 0x7ff, 0x8, 0x40, 0x7f, r1, r1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x4208, r1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_clone(0x9096000, &(0x7f0000000000)="5036018bfa6788a53bf789b40d5e61aff6f74605ddf9afd516d53f1fd41c13feb496b2c63063ad95e4e3dc6cfea6065c27969bf780d2243193f6169b6f593b5c0b637895982a02b6bc0878810f9b8ed05b25954ce824cd239067a7dd233cbe4cc7d25851017de2db4bfac53029034652df732e7c43bd5cc01fe4e3b9569ccd71e6242418fd81a8203eed9f942ac5de77feac0af016d8c0d4727806dfbc0e2f74eb83e90026b8ed403573cb22ad8c6096bf6912", 0xb3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9e4b75578ba19d5b6cab190f3f687c7462c4b14f9bd0b234dd022d0a051f3924efd5077bdcbb1f5cbbd573944bdbfe2b87964ba6fafc4ec0b1240a81a3d25650b1960132df393b6ae439b666b160386a857d50aadd06954ccb827f9957baf06824d8bc") (async) msgget(0x2, 0x30) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x4000) (async) mount$fuse(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x442, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) (async) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, 0x0, 0xee00, 0x0, 0x30, 0x9}, 0x0, 0x0, 0x3, 0x100000, 0x101, 0x3, 0x7ff, 0x8, 0x40, 0x7f, r1, r1}) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) [ 3097.743200][T27183] usb 5-1: new low-speed USB device number 15 using dummy_hcd 15:12:23 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x82, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xb, 0x24, 0x6, 0x0, 0x0, "852cf0eb6fd6"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x81, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x81}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x7f, 0x4e, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xa2, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3f, 0x1c, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x8, 0xf4, 0x20, 0x40, 0x6}, 0x87, &(0x7f00000005c0)={0x5, 0xf, 0x87, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x1, 0xf, 0x9, [0xffc0, 0xff3fcf, 0xc030, 0xff3f30, 0xff0000]}, @generic={0x4c, 0x10, 0x4, "aee437e173191f7c4c6c17b15fed6445baa48aa93a4c1294b89ebcbdf7d5f015b36496909ff0b0ca7e01c159d93a5462301016c2aaf33d0f784f3906668296c79c35be1a783ecaecc5"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xdb, 0x5, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x51, 0x40, 0x1, 0xa0, 0x3}]}, 0x2, [{0xc6, &(0x7f0000000880)=@string={0xc6, 0x3, "2eb829e4e8941c283ce82aa11d7742dd6548f379bd31326d1b254cc7ab4b08120361e8a3b425a2d6e5ffff7b3da21d3096659b3ba4f7fa0101380254e296a6a98e1ce8273921c566d797217200dc10019e372e3d543a6f5fc98217cf48f1d232d1edee3b034f71534c506651ebe869afee15833f0a0efd7d650bc131db0732247b95f2137dbf03b6f6c6e72f24479897f2ca206d9b0128facd35d59215a5bf33576d069de2be0d74bf1d3d3c836ba715207ee3d1e99a0df7f8b789f97c269319cabb8d8b"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3097.933889][ T3454] UDC core: couldn't find an available UDC or it's busy: -16 [ 3097.943301][ T3454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.001776][ T144] usb 3-1: reset low-speed USB device number 93 using dummy_hcd [ 3098.021452][T27183] usb 5-1: device descriptor read/64, error 18 [ 3098.048622][ T3454] fuse: Bad value for 'fd' [ 3098.063695][ T3456] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.079461][ T3456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.103451][ T3456] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.111721][ T3456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200002090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3098.209641][ T3474] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.228312][ T3474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.248915][ T3482] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.257380][ T3482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.311247][T27183] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 3098.321212][ T3456] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.340744][ T3456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200002090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200002090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3098.469925][ T3474] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.482811][ T3474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.531058][ T3507] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.531283][T27183] usb 5-1: device descriptor read/64, error 18 [ 3098.540479][ T3507] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.561791][ T3428] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3098.691250][T27183] usb usb5-port1: attempt power cycle [ 3098.757768][ T3491] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.766633][ T3491] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.836848][ T3508] UDC core: couldn't find an available UDC or it's busy: -16 [ 3098.892051][ T3508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3098.923118][T24570] usb 3-1: USB disconnect, device number 93 [ 3099.121102][T27183] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 3099.280969][ T5617] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 3099.341817][T27183] usb 5-1: device descriptor read/8, error -61 [ 3099.631116][T27183] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 3099.641046][ T5617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3099.651996][ T5617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3099.661568][ T5617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3099.672317][ T5617] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3099.682010][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3099.721399][ T3425] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3099.743745][ T5617] hub 3-1:1.0: bad descriptor, ignoring hub [ 3099.750185][ T5617] hub: probe of 3-1:1.0 failed with error -5 [ 3099.759619][ T5617] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3099.766203][ T5617] cdc_wdm 3-1:1.0: Unknown control protocol [ 3099.821227][T27183] usb 5-1: device descriptor read/8, error -61 [ 3099.941408][T27183] usb usb5-port1: unable to enumerate USB device [ 3100.101405][T27183] usb 3-1: USB disconnect, device number 94 15:12:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_clone(0x9096000, &(0x7f0000000000)="5036018bfa6788a53bf789b40d5e61aff6f74605ddf9afd516d53f1fd41c13feb496b2c63063ad95e4e3dc6cfea6065c27969bf780d2243193f6169b6f593b5c0b637895982a02b6bc0878810f9b8ed05b25954ce824cd239067a7dd233cbe4cc7d25851017de2db4bfac53029034652df732e7c43bd5cc01fe4e3b9569ccd71e6242418fd81a8203eed9f942ac5de77feac0af016d8c0d4727806dfbc0e2f74eb83e90026b8ed403573cb22ad8c6096bf6912", 0xb3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9e4b75578ba19d5b6cab190f3f687c7462c4b14f9bd0b234dd022d0a051f3924efd5077bdcbb1f5cbbd573944bdbfe2b87964ba6fafc4ec0b1240a81a3d25650b1960132df393b6ae439b666b160386a857d50aadd06954ccb827f9957baf06824d8bc") r2 = msgget(0x2, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x442, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, 0x0, 0xee00, 0x0, 0x30, 0x9}, 0x0, 0x0, 0x3, 0x100000, 0x101, 0x3, 0x7ff, 0x8, 0x40, 0x7f, r1, r1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:26 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x82, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xb, 0x24, 0x6, 0x0, 0x0, "852cf0eb6fd6"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x81, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x81}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x7f, 0x4e, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xa2, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3f, 0x1c, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x8, 0xf4, 0x20, 0x40, 0x6}, 0x87, &(0x7f00000005c0)={0x5, 0xf, 0x87, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x1, 0xf, 0x9, [0xffc0, 0xff3fcf, 0xc030, 0xff3f30, 0xff0000]}, @generic={0x4c, 0x10, 0x4, "aee437e173191f7c4c6c17b15fed6445baa48aa93a4c1294b89ebcbdf7d5f015b36496909ff0b0ca7e01c159d93a5462301016c2aaf33d0f784f3906668296c79c35be1a783ecaecc5"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xdb, 0x5, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x51, 0x40, 0x1, 0xa0, 0x3}]}, 0x2, [{0xc6, &(0x7f0000000880)=@string={0xc6, 0x3, "2eb829e4e8941c283ce82aa11d7742dd6548f379bd31326d1b254cc7ab4b08120361e8a3b425a2d6e5ffff7b3da21d3096659b3ba4f7fa0101380254e296a6a98e1ce8273921c566d797217200dc10019e372e3d543a6f5fc98217cf48f1d232d1edee3b034f71534c506651ebe869afee15833f0a0efd7d650bc131db0732247b95f2137dbf03b6f6c6e72f24479897f2ca206d9b0128facd35d59215a5bf33576d069de2be0d74bf1d3d3c836ba715207ee3d1e99a0df7f8b789f97c269319cabb8d8b"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}]}) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xcb, 0xe8, 0x6e, 0x10, 0x40d, 0x3801, 0x4bda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x7, 0x80, 0x3f, [{{0x9, 0x4, 0x9f, 0x9a, 0x1, 0x68, 0xb7, 0x1b, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x81}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xfa, 0xe0, 0xf7, 0x40, 0x2}, 0xe4, &(0x7f0000000140)={0x5, 0xf, 0xe4, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x75, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x42, 0x1, 0x401}, @ptm_cap={0x3}, @generic={0xc8, 0x10, 0xa, "f78e0ea4213c0f7c39f4f04a40715d13feca7de5f4cec47d3740496d118b4c66047446208d5472144629c4b89ddfc0267aa3137c07d93dc2f21820cca5045ceabbb80b59bd7e38098cb516aa43860561142bbb4a234cc212934b2f7af92c238ae20de411f63615d59797a6015fa40dbdc3523a81774b03f80a76ff981eae5b6a002c22a24d6c847c16e15e1f27a996d3c46d30d1249c61694713e9eb3a40721d8e6a3074e9b4cd4e6eb6a142532d9a91a89a8eb0f9b8a3ffb045bd474858bfa2262d7fbd41"}]}, 0x1, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "63ae07e1455a1546820e23c47782c6c62e6d2e3ed2cf72bc219e4398d15a677df40aef139cda9842f275dbec80f7c927b3664f637d2f269e56b2a305a9336a"}}]}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ptrace$setopts(0x4206, 0x0, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c0c223632b092dbf6cddfe43e8bd10e61bc91ee6520a3859582fa129ca77478328747c957c811f82894905917276e1c5d1cf3b4d400da3617763ac3e6cade1a5f5acdea54eb564422b5d83e2e303448336e669da0369d711707777afbceee52cd30d6e80f7ab9668733a2d63f4ed6692ced2d75d779a5b895e7d2d6c5e3b38bf3ff4b8dd2e693febbd6f87a5ba24257d43525c656fc4bd1eae56140eaeb76296e0478a104"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000040), 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) (async) read$char_usb(r3, &(0x7f0000000040)=""/121, 0x79) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3100.324914][ T3550] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.372849][ T3558] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.380720][ T3558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3100.422860][ T3550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3100.447932][ T3544] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.464580][ T3544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:26 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x82, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xb, 0x24, 0x6, 0x0, 0x0, "852cf0eb6fd6"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x81, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x81}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x7f, 0x4e, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xa2, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3f, 0x1c, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x8, 0xf4, 0x20, 0x40, 0x6}, 0x87, &(0x7f00000005c0)={0x5, 0xf, 0x87, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x1, 0xf, 0x9, [0xffc0, 0xff3fcf, 0xc030, 0xff3f30, 0xff0000]}, @generic={0x4c, 0x10, 0x4, "aee437e173191f7c4c6c17b15fed6445baa48aa93a4c1294b89ebcbdf7d5f015b36496909ff0b0ca7e01c159d93a5462301016c2aaf33d0f784f3906668296c79c35be1a783ecaecc5"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xdb, 0x5, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x51, 0x40, 0x1, 0xa0, 0x3}]}, 0x2, [{0xc6, &(0x7f0000000880)=@string={0xc6, 0x3, "2eb829e4e8941c283ce82aa11d7742dd6548f379bd31326d1b254cc7ab4b08120361e8a3b425a2d6e5ffff7b3da21d3096659b3ba4f7fa0101380254e296a6a98e1ce8273921c566d797217200dc10019e372e3d543a6f5fc98217cf48f1d232d1edee3b034f71534c506651ebe869afee15833f0a0efd7d650bc131db0732247b95f2137dbf03b6f6c6e72f24479897f2ca206d9b0128facd35d59215a5bf33576d069de2be0d74bf1d3d3c836ba715207ee3d1e99a0df7f8b789f97c269319cabb8d8b"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_connect$cdc_ecm(0x3, 0x6f, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x82, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xb, 0x24, 0x6, 0x0, 0x0, "852cf0eb6fd6"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x81, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x81}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x7f, 0x4e, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xa2, 0x400}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3f, 0x1c, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x8, 0xf4, 0x20, 0x40, 0x6}, 0x87, &(0x7f00000005c0)={0x5, 0xf, 0x87, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x1, 0xf, 0x9, [0xffc0, 0xff3fcf, 0xc030, 0xff3f30, 0xff0000]}, @generic={0x4c, 0x10, 0x4, "aee437e173191f7c4c6c17b15fed6445baa48aa93a4c1294b89ebcbdf7d5f015b36496909ff0b0ca7e01c159d93a5462301016c2aaf33d0f784f3906668296c79c35be1a783ecaecc5"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xdb, 0x5, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x51, 0x40, 0x1, 0xa0, 0x3}]}, 0x2, [{0xc6, &(0x7f0000000880)=@string={0xc6, 0x3, "2eb829e4e8941c283ce82aa11d7742dd6548f379bd31326d1b254cc7ab4b08120361e8a3b425a2d6e5ffff7b3da21d3096659b3ba4f7fa0101380254e296a6a98e1ce8273921c566d797217200dc10019e372e3d543a6f5fc98217cf48f1d232d1edee3b034f71534c506651ebe869afee15833f0a0efd7d650bc131db0732247b95f2137dbf03b6f6c6e72f24479897f2ca206d9b0128facd35d59215a5bf33576d069de2be0d74bf1d3d3c836ba715207ee3d1e99a0df7f8b789f97c269319cabb8d8b"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}]}) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3100.631474][T17882] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 3100.687932][ T3564] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.697003][ T3537] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.700333][ T3564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3100.705139][ T3537] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3100.729698][ T3564] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.734086][T12997] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 3100.738232][ T3564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3100.766394][ T3544] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.779508][ T3544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3100.792269][ T3544] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.813532][ T3544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3100.941716][T12997] usb 5-1: device descriptor read/64, error 18 [ 3100.960498][ T3564] UDC core: couldn't find an available UDC or it's busy: -16 [ 3100.985360][ T3564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3101.031641][T17882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3101.043245][T17882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3101.053991][T17882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3101.076044][T17882] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3101.091722][T17882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.121530][ T3557] raw-gadget gadget: fail, usb_ep_enable returned -22 15:12:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ptrace$setopts(0x4206, 0x0, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) (async, rerun: 32) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3101.142591][T17882] hub 3-1:1.0: bad descriptor, ignoring hub [ 3101.149173][T17882] hub: probe of 3-1:1.0 failed with error -5 [ 3101.168487][T17882] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3101.175306][T17882] cdc_wdm 3-1:1.0: Unknown control protocol [ 3101.210937][T12997] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 3101.259504][ T3580] UDC core: couldn't find an available UDC or it's busy: -16 15:12:27 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") syz_usb_ep_write(r2, 0x0, 0xc7, &(0x7f0000000540)="0fbece4d73c6aa28ff8ff7348b0ff147dcc23bbdde527eddeffa73b06aafd2e90a0fcd95392c55f7375c709afe2985159cad2d90441c973e394ec155c78015193cf633dc77f55e2bd3d8c442136a034f47cee9b132048976a3a9bf9c4aad136c485639dbee3db2a4c1e5371b04d03d63356fd4432079b2896ba95abbed13a368a5512b82dc3546851a5fdb6af986cc865f716f17be1daeffefe0f35f52735df68ffe92c1b2ea59abe6aea161ab31a4de5e34361cead5c43226933b6aa95435ca95796538885c93") [ 3101.318814][ T3580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3101.411748][T12997] usb 5-1: device descriptor read/64, error 18 [ 3101.421035][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 3101.427659][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes 15:12:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xcb, 0xe8, 0x6e, 0x10, 0x40d, 0x3801, 0x4bda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x7, 0x80, 0x3f, [{{0x9, 0x4, 0x9f, 0x9a, 0x1, 0x68, 0xb7, 0x1b, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x81}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xfa, 0xe0, 0xf7, 0x40, 0x2}, 0xe4, &(0x7f0000000140)={0x5, 0xf, 0xe4, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x75, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x42, 0x1, 0x401}, @ptm_cap={0x3}, @generic={0xc8, 0x10, 0xa, "f78e0ea4213c0f7c39f4f04a40715d13feca7de5f4cec47d3740496d118b4c66047446208d5472144629c4b89ddfc0267aa3137c07d93dc2f21820cca5045ceabbb80b59bd7e38098cb516aa43860561142bbb4a234cc212934b2f7af92c238ae20de411f63615d59797a6015fa40dbdc3523a81774b03f80a76ff981eae5b6a002c22a24d6c847c16e15e1f27a996d3c46d30d1249c61694713e9eb3a40721d8e6a3074e9b4cd4e6eb6a142532d9a91a89a8eb0f9b8a3ffb045bd474858bfa2262d7fbd41"}]}, 0x1, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "63ae07e1455a1546820e23c47782c6c62e6d2e3ed2cf72bc219e4398d15a677df40aef139cda9842f275dbec80f7c927b3664f637d2f269e56b2a305a9336a"}}]}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3101.472518][ T3598] UDC core: couldn't find an available UDC or it's busy: -16 15:12:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c0c223632b092dbf6cddfe43e8bd10e61bc91ee6520a3859582fa129ca77478328747c957c811f82894905917276e1c5d1cf3b4d400da3617763ac3e6cade1a5f5acdea54eb564422b5d83e2e303448336e669da0369d711707777afbceee52cd30d6e80f7ab9668733a2d63f4ed6692ced2d75d779a5b895e7d2d6c5e3b38bf3ff4b8dd2e693febbd6f87a5ba24257d43525c656fc4bd1eae56140eaeb76296e0478a104"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000040), 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c0c223632b092dbf6cddfe43e8bd10e61bc91ee6520a3859582fa129ca77478328747c957c811f82894905917276e1c5d1cf3b4d400da3617763ac3e6cade1a5f5acdea54eb564422b5d83e2e303448336e669da0369d711707777afbceee52cd30d6e80f7ab9668733a2d63f4ed6692ced2d75d779a5b895e7d2d6c5e3b38bf3ff4b8dd2e693febbd6f87a5ba24257d43525c656fc4bd1eae56140eaeb76296e0478a104"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) pipe2(&(0x7f0000000000), 0x800) (async) pipe2(&(0x7f0000000040), 0x80) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3101.517940][ T3598] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3101.535163][T12997] usb usb5-port1: attempt power cycle [ 3101.555871][T24570] usb 3-1: USB disconnect, device number 95 15:12:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ptrace$setopts(0x4206, 0x0, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ptrace$setopts(0x4206, 0x0, 0x3, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) [ 3101.651173][ T3607] UDC core: couldn't find an available UDC or it's busy: -16 [ 3101.693486][ T3607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3101.731898][ T3609] UDC core: couldn't find an available UDC or it's busy: -16 [ 3101.764755][ T3609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3101.807444][ T3621] UDC core: couldn't find an available UDC or it's busy: -16 [ 3101.821790][ T3595] UDC core: couldn't find an available UDC or it's busy: -16 [ 3101.844378][ T3595] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3101.872178][ T3621] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3101.991055][T12997] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 3102.044448][ T3602] UDC core: couldn't find an available UDC or it's busy: -16 [ 3102.067361][ T3602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3102.099811][ T3602] UDC core: couldn't find an available UDC or it's busy: -16 [ 3102.126600][ T3602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3102.171335][T12997] usb 5-1: device descriptor read/8, error -61 [ 3102.451183][T12997] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 3102.631351][T12997] usb 5-1: device descriptor read/8, error -61 [ 3102.751567][T12997] usb usb5-port1: unable to enumerate USB device 15:12:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_clone(0x9096000, &(0x7f0000000000)="5036018bfa6788a53bf789b40d5e61aff6f74605ddf9afd516d53f1fd41c13feb496b2c63063ad95e4e3dc6cfea6065c27969bf780d2243193f6169b6f593b5c0b637895982a02b6bc0878810f9b8ed05b25954ce824cd239067a7dd233cbe4cc7d25851017de2db4bfac53029034652df732e7c43bd5cc01fe4e3b9569ccd71e6242418fd81a8203eed9f942ac5de77feac0af016d8c0d4727806dfbc0e2f74eb83e90026b8ed403573cb22ad8c6096bf6912", 0xb3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9e4b75578ba19d5b6cab190f3f687c7462c4b14f9bd0b234dd022d0a051f3924efd5077bdcbb1f5cbbd573944bdbfe2b87964ba6fafc4ec0b1240a81a3d25650b1960132df393b6ae439b666b160386a857d50aadd06954ccb827f9957baf06824d8bc") r2 = msgget(0x2, 0x30) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x442, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffff}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, r3, 0x0, 0xee00, 0x0, 0x30, 0x9}, 0x0, 0x0, 0x3, 0x100000, 0x101, 0x3, 0x7ff, 0x8, 0x40, 0x7f, r1, r1}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xd5, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x5f, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0xb3, 0x2, 0x20, 0x41}, 0x114, &(0x7f0000000140)={0x5, 0xf, 0x114, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x100, 0xf007, 0x3a16}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x7, 0xd, 0x9}, @ptm_cap={0x3}, @generic={0xe4, 0x10, 0xa, "4d98400fe7459d5a12bf271de1ae448ede159c99f1859dc0aabe15dfdbc9ef120ac8be9d019c6ae7792f3b37d4336fcaa8f2fa506b9a6b3dcdd2338714d41ba9e0a46c0e3d588e608dec8b92e681f95ae66cd4ad56ca9af0e08cc2c820cf68ba29040d7f2b41579bd5fc477c954e4cefd1905eedb9e69b5133a1fe7943f9a87e68d124c8bb67ac9b9dfa91f0f756c3f39b4f613c4a4b9c02f870e7ae80d92f7b3bb0b5fa35c86faac86936a62da7a80ff8260a3b8abb0a399630419041a771191208965074137dac9c9811a3397e91f0d86d064189b76562b55c585d6cca6b517b"}, @wireless={0xb, 0x10, 0x1, 0xfb241a7f5dbead63, 0x0, 0x40, 0x4, 0x5, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x3a, 0x400}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x816}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xcb, 0xe8, 0x6e, 0x10, 0x40d, 0x3801, 0x4bda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x7, 0x80, 0x3f, [{{0x9, 0x4, 0x9f, 0x9a, 0x1, 0x68, 0xb7, 0x1b, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x81}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xfa, 0xe0, 0xf7, 0x40, 0x2}, 0xe4, &(0x7f0000000140)={0x5, 0xf, 0xe4, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x75, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x42, 0x1, 0x401}, @ptm_cap={0x3}, @generic={0xc8, 0x10, 0xa, "f78e0ea4213c0f7c39f4f04a40715d13feca7de5f4cec47d3740496d118b4c66047446208d5472144629c4b89ddfc0267aa3137c07d93dc2f21820cca5045ceabbb80b59bd7e38098cb516aa43860561142bbb4a234cc212934b2f7af92c238ae20de411f63615d59797a6015fa40dbdc3523a81774b03f80a76ff981eae5b6a002c22a24d6c847c16e15e1f27a996d3c46d30d1249c61694713e9eb3a40721d8e6a3074e9b4cd4e6eb6a142532d9a91a89a8eb0f9b8a3ffb045bd474858bfa2262d7fbd41"}]}, 0x1, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "63ae07e1455a1546820e23c47782c6c62e6d2e3ed2cf72bc219e4398d15a677df40aef139cda9842f275dbec80f7c927b3664f637d2f269e56b2a305a9336a"}}]}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xcb, 0xe8, 0x6e, 0x10, 0x40d, 0x3801, 0x4bda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x7, 0x80, 0x3f, [{{0x9, 0x4, 0x9f, 0x9a, 0x1, 0x68, 0xb7, 0x1b, 0x1, [], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x81}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xfa, 0xe0, 0xf7, 0x40, 0x2}, 0xe4, &(0x7f0000000140)={0x5, 0xf, 0xe4, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x75, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x42, 0x1, 0x401}, @ptm_cap={0x3}, @generic={0xc8, 0x10, 0xa, "f78e0ea4213c0f7c39f4f04a40715d13feca7de5f4cec47d3740496d118b4c66047446208d5472144629c4b89ddfc0267aa3137c07d93dc2f21820cca5045ceabbb80b59bd7e38098cb516aa43860561142bbb4a234cc212934b2f7af92c238ae20de411f63615d59797a6015fa40dbdc3523a81774b03f80a76ff981eae5b6a002c22a24d6c847c16e15e1f27a996d3c46d30d1249c61694713e9eb3a40721d8e6a3074e9b4cd4e6eb6a142532d9a91a89a8eb0f9b8a3ffb045bd474858bfa2262d7fbd41"}]}, 0x1, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "63ae07e1455a1546820e23c47782c6c62e6d2e3ed2cf72bc219e4398d15a677df40aef139cda9842f275dbec80f7c927b3664f637d2f269e56b2a305a9336a"}}]}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:29 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") syz_usb_ep_write(r2, 0x0, 0xc7, &(0x7f0000000540)="0fbece4d73c6aa28ff8ff7348b0ff147dcc23bbdde527eddeffa73b06aafd2e90a0fcd95392c55f7375c709afe2985159cad2d90441c973e394ec155c78015193cf633dc77f55e2bd3d8c442136a034f47cee9b132048976a3a9bf9c4aad136c485639dbee3db2a4c1e5371b04d03d63356fd4432079b2896ba95abbed13a368a5512b82dc3546851a5fdb6af986cc865f716f17be1daeffefe0f35f52735df68ffe92c1b2ea59abe6aea161ab31a4de5e34361cead5c43226933b6aa95435ca95796538885c93") 15:12:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000a20000000109026000020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c0c223632b092dbf6cddfe43e8bd10e61bc91ee6520a3859582fa129ca77478328747c957c811f82894905917276e1c5d1cf3b4d400da3617763ac3e6cade1a5f5acdea54eb564422b5d83e2e303448336e669da0369d711707777afbceee52cd30d6e80f7ab9668733a2d63f4ed6692ced2d75d779a5b895e7d2d6c5e3b38bf3ff4b8dd2e693febbd6f87a5ba24257d43525c656fc4bd1eae56140eaeb76296e0478a104"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) (async) pipe2(&(0x7f0000000040), 0x80) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3103.396716][ T3698] UDC core: couldn't find an available UDC or it's busy: -16 [ 3103.413396][ T3699] UDC core: couldn't find an available UDC or it's busy: -16 [ 3103.421040][ T3698] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3103.443260][ T3703] UDC core: couldn't find an available UDC or it's busy: -16 [ 3103.481678][ T3702] UDC core: couldn't find an available UDC or it's busy: -16 [ 3103.486154][ T3703] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3103.517987][ T3699] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3103.546569][ T3702] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x83340, &(0x7f00000000c0)={0x0, 0x6ef1, 0x4, 0x0, 0x13d}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x2, 0x60, 0xfff, 0x7, 0x0, [{0x0, 0x4d, 0x8, '\x00', 0x1}, {0x7, 0x3f, 0xff, '\x00', 0x7f}, {0x0, 0x81, 0x2, '\x00', 0x2}, {0x2, 0x20, 0x7, '\x00', 0x3}, {0x1, 0x7f, 0x4, '\x00', 0x5}, {0x9, 0x80, 0x1f, '\x00', 0x5}, {0x6, 0x1, 0xff, '\x00', 0x1f}, {0x51, 0xe3, 0x8, '\x00', 0x9}, {0xc2, 0x0, 0x2a, '\x00', 0xfe}, {0x0, 0x1, 0x3f, '\x00', 0x3f}, {0x7, 0x5, 0x81, '\x00', 0x2}, {0x9, 0x2, 0x8, '\x00', 0xff}, {0x3, 0x1, 0x5, '\x00', 0x1f}, {0xa3, 0x6, 0x8, '\x00', 0x80}, {0x8, 0x0, 0x0, '\x00', 0x20}, {0xfe, 0xa3, 0x4, '\x00', 0x1}, {0x3, 0x7, 0x7f, '\x00', 0x40}, {0x40, 0x2, 0x0, '\x00', 0x9}, {0xfe, 0x20, 0xff, '\x00', 0x79}, {0x59, 0x7, 0x3f, '\x00', 0xf3}, {0x3, 0x7f, 0x3, '\x00', 0x7}, {0x81, 0xfc, 0xfd, '\x00', 0x6}, {0x51, 0xf, 0x74, '\x00', 0x3}, {0x7, 0x3, 0x0, '\x00', 0xde}]}}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x2080, 0x40) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000040)={0xd183, 0x0, 0xf871, 0x600}) [ 3103.704739][ T3686] UDC core: couldn't find an available UDC or it's busy: -16 [ 3103.731147][T12997] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 3103.745925][ T3686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3103.783151][ T3686] UDC core: couldn't find an available UDC or it's busy: -16 [ 3103.841181][T17853] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 3103.858616][ T3686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3103.954372][ T3711] UDC core: couldn't find an available UDC or it's busy: -16 [ 3103.973613][ T3711] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.041016][T17853] usb 5-1: device descriptor read/64, error 18 15:12:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "fcce5aab", {0x1, 0x0, 0x4000, 0x7, 0x5b}}) [ 3104.092466][T12997] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3104.104014][T12997] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3104.114247][T12997] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3104.125274][T12997] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3104.138086][T12997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3104.188586][ T3711] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.201576][ T3685] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3104.218090][ T3711] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.222281][T12997] hub 3-1:1.0: bad descriptor, ignoring hub [ 3104.232516][T12997] hub: probe of 3-1:1.0 failed with error -5 [ 3104.243752][T12997] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3104.244685][ T3727] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.250363][T12997] cdc_wdm 3-1:1.0: Unknown control protocol 15:12:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000a20000000109026000020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3104.330995][T17853] usb 5-1: new low-speed USB device number 24 using dummy_hcd 15:12:30 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) syz_usb_ep_write(r2, 0x0, 0xc7, &(0x7f0000000540)="0fbece4d73c6aa28ff8ff7348b0ff147dcc23bbdde527eddeffa73b06aafd2e90a0fcd95392c55f7375c709afe2985159cad2d90441c973e394ec155c78015193cf633dc77f55e2bd3d8c442136a034f47cee9b132048976a3a9bf9c4aad136c485639dbee3db2a4c1e5371b04d03d63356fd4432079b2896ba95abbed13a368a5512b82dc3546851a5fdb6af986cc865f716f17be1daeffefe0f35f52735df68ffe92c1b2ea59abe6aea161ab31a4de5e34361cead5c43226933b6aa95435ca95796538885c93") [ 3104.401255][ T3727] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.438019][ T3685] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.451362][ T3685] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.510544][ T3736] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.561272][T17853] usb 5-1: device descriptor read/64, error 18 [ 3104.565520][ T3736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.600677][ T3744] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.609501][ T3744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x4}}, '.\x00'}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000500)) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r3], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3104.674370][ T3735] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.682492][ T3735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.691788][T17853] usb usb5-port1: attempt power cycle 15:12:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000a20000000109026000020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000a20000000109026000020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) [ 3104.726707][ T3735] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.761722][ T3735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.819788][ T3749] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.828049][ T3749] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3104.903246][ T3755] UDC core: couldn't find an available UDC or it's busy: -16 [ 3104.911617][ T3755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3105.071850][ T3727] usb 3-1: reset low-speed USB device number 96 using dummy_hcd [ 3105.121404][T17853] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 3105.164073][ T3754] UDC core: couldn't find an available UDC or it's busy: -16 [ 3105.172344][ T3754] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3105.331881][T17853] usb 5-1: device descriptor read/8, error -61 [ 3105.605679][ T3738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3105.641033][T17853] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 3105.661236][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 3105.667969][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 3105.881549][T17853] usb 5-1: device descriptor read/8, error -61 [ 3106.021992][T17853] usb usb5-port1: unable to enumerate USB device 15:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "fcce5aab", {0x1, 0x0, 0x4000, 0x7, 0x5b}}) [ 3106.861072][T12997] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 3107.221184][T12997] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3107.241012][T12997] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3107.250472][T12997] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3107.280678][T12997] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3107.290566][T12997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3107.321514][ T3767] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3107.342320][T12997] hub 5-1:1.0: bad descriptor, ignoring hub [ 3107.348609][T12997] hub: probe of 5-1:1.0 failed with error -5 [ 3107.357195][T12997] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 3107.363585][T12997] cdc_wdm 5-1:1.0: Unknown control protocol [ 3107.764023][T17853] usb 5-1: USB disconnect, device number 27 15:12:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (rerun: 64) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xd5, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x5f, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0xb3, 0x2, 0x20, 0x41}, 0x114, &(0x7f0000000140)={0x5, 0xf, 0x114, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x100, 0xf007, 0x3a16}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x7, 0xd, 0x9}, @ptm_cap={0x3}, @generic={0xe4, 0x10, 0xa, "4d98400fe7459d5a12bf271de1ae448ede159c99f1859dc0aabe15dfdbc9ef120ac8be9d019c6ae7792f3b37d4336fcaa8f2fa506b9a6b3dcdd2338714d41ba9e0a46c0e3d588e608dec8b92e681f95ae66cd4ad56ca9af0e08cc2c820cf68ba29040d7f2b41579bd5fc477c954e4cefd1905eedb9e69b5133a1fe7943f9a87e68d124c8bb67ac9b9dfa91f0f756c3f39b4f613c4a4b9c02f870e7ae80d92f7b3bb0b5fa35c86faac86936a62da7a80ff8260a3b8abb0a399630419041a771191208965074137dac9c9811a3397e91f0d86d064189b76562b55c585d6cca6b517b"}, @wireless={0xb, 0x10, 0x1, 0xfb241a7f5dbead63, 0x0, 0x40, 0x4, 0x5, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x3a, 0x400}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x816}}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffc0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async, rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000108000118000000", @ANYRES32=r5, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r6, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r4, &(0x7f0000000180)={r6, r3, 0x4800000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_clone(0x4000000, &(0x7f0000000000)="eea9cea647226f283843839a8502f44db1fef34e7e4db31f160d73f0d63f380ba575324174e42a999c29a01c29472737bc5019bde09b83f1f867ec0659bb595281f35647de4c7d3da32d83552d490c81eeea0f835bd07b444842e83aabf7e183e4563e73b3f662ee54bd1bca755e60b5510acc147cb512a25c5b59701b1fdb", 0x7f, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000240)="f92e84c3389f859cdf5aca20b4f0c6479a626f6331b3ff50fe3bcc9ca27f6853595e38a7ad1a9243877b5381c559826de99a611d5cbe67c3bd04f1eca10d6f6d78") 15:12:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 32) syz_io_uring_setup(0x83340, &(0x7f00000000c0)={0x0, 0x6ef1, 0x4, 0x0, 0x13d}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (rerun: 32) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x2, 0x60, 0xfff, 0x7, 0x0, [{0x0, 0x4d, 0x8, '\x00', 0x1}, {0x7, 0x3f, 0xff, '\x00', 0x7f}, {0x0, 0x81, 0x2, '\x00', 0x2}, {0x2, 0x20, 0x7, '\x00', 0x3}, {0x1, 0x7f, 0x4, '\x00', 0x5}, {0x9, 0x80, 0x1f, '\x00', 0x5}, {0x6, 0x1, 0xff, '\x00', 0x1f}, {0x51, 0xe3, 0x8, '\x00', 0x9}, {0xc2, 0x0, 0x2a, '\x00', 0xfe}, {0x0, 0x1, 0x3f, '\x00', 0x3f}, {0x7, 0x5, 0x81, '\x00', 0x2}, {0x9, 0x2, 0x8, '\x00', 0xff}, {0x3, 0x1, 0x5, '\x00', 0x1f}, {0xa3, 0x6, 0x8, '\x00', 0x80}, {0x8, 0x0, 0x0, '\x00', 0x20}, {0xfe, 0xa3, 0x4, '\x00', 0x1}, {0x3, 0x7, 0x7f, '\x00', 0x40}, {0x40, 0x2, 0x0, '\x00', 0x9}, {0xfe, 0x20, 0xff, '\x00', 0x79}, {0x59, 0x7, 0x3f, '\x00', 0xf3}, {0x3, 0x7f, 0x3, '\x00', 0x7}, {0x81, 0xfc, 0xfd, '\x00', 0x6}, {0x51, 0xf, 0x74, '\x00', 0x3}, {0x7, 0x3, 0x0, '\x00', 0xde}]}}) (async, rerun: 64) r5 = open(&(0x7f0000000000)='./file0\x00', 0x2080, 0x40) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000040)={0xd183, 0x0, 0xf871, 0x600}) 15:12:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "fcce5aab", {0x1, 0x0, 0x4000, 0x7, 0x5b}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "fcce5aab", {0x1, 0x0, 0x4000, 0x7, 0x5b}}) (async) 15:12:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x4}}, '.\x00'}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000500)) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r3], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x4}}, '.\x00'}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r3], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3110.323169][T24570] usb 3-1: USB disconnect, device number 96 [ 3110.330975][ T3767] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3110.453051][ T3790] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.458156][ T3787] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.475492][ T3791] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.484073][ T3787] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3110.511959][ T3790] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3110.521497][ T3791] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0xd5, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x5f, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0xb3, 0x2, 0x20, 0x41}, 0x114, &(0x7f0000000140)={0x5, 0xf, 0x114, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x100, 0xf007, 0x3a16}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x7, 0xd, 0x9}, @ptm_cap={0x3}, @generic={0xe4, 0x10, 0xa, "4d98400fe7459d5a12bf271de1ae448ede159c99f1859dc0aabe15dfdbc9ef120ac8be9d019c6ae7792f3b37d4336fcaa8f2fa506b9a6b3dcdd2338714d41ba9e0a46c0e3d588e608dec8b92e681f95ae66cd4ad56ca9af0e08cc2c820cf68ba29040d7f2b41579bd5fc477c954e4cefd1905eedb9e69b5133a1fe7943f9a87e68d124c8bb67ac9b9dfa91f0f756c3f39b4f613c4a4b9c02f870e7ae80d92f7b3bb0b5fa35c86faac86936a62da7a80ff8260a3b8abb0a399630419041a771191208965074137dac9c9811a3397e91f0d86d064189b76562b55c585d6cca6b517b"}, @wireless={0xb, 0x10, 0x1, 0xfb241a7f5dbead63, 0x0, 0x40, 0x4, 0x5, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x3a, 0x400}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x816}}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffc0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "fcce5aab", {0x1, 0x0, 0x4000, 0x7, 0x5b}}) 15:12:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x83340, &(0x7f00000000c0)={0x0, 0x6ef1, 0x4, 0x0, 0x13d}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x2, 0x60, 0xfff, 0x7, 0x0, [{0x0, 0x4d, 0x8, '\x00', 0x1}, {0x7, 0x3f, 0xff, '\x00', 0x7f}, {0x0, 0x81, 0x2, '\x00', 0x2}, {0x2, 0x20, 0x7, '\x00', 0x3}, {0x1, 0x7f, 0x4, '\x00', 0x5}, {0x9, 0x80, 0x1f, '\x00', 0x5}, {0x6, 0x1, 0xff, '\x00', 0x1f}, {0x51, 0xe3, 0x8, '\x00', 0x9}, {0xc2, 0x0, 0x2a, '\x00', 0xfe}, {0x0, 0x1, 0x3f, '\x00', 0x3f}, {0x7, 0x5, 0x81, '\x00', 0x2}, {0x9, 0x2, 0x8, '\x00', 0xff}, {0x3, 0x1, 0x5, '\x00', 0x1f}, {0xa3, 0x6, 0x8, '\x00', 0x80}, {0x8, 0x0, 0x0, '\x00', 0x20}, {0xfe, 0xa3, 0x4, '\x00', 0x1}, {0x3, 0x7, 0x7f, '\x00', 0x40}, {0x40, 0x2, 0x0, '\x00', 0x9}, {0xfe, 0x20, 0xff, '\x00', 0x79}, {0x59, 0x7, 0x3f, '\x00', 0xf3}, {0x3, 0x7f, 0x3, '\x00', 0x7}, {0x81, 0xfc, 0xfd, '\x00', 0x6}, {0x51, 0xf, 0x74, '\x00', 0x3}, {0x7, 0x3, 0x0, '\x00', 0xde}]}}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x2080, 0x40) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000040)={0xd183, 0x0, 0xf871, 0x600}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x83340, &(0x7f00000000c0)={0x0, 0x6ef1, 0x4, 0x0, 0x13d}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x2, 0x60, 0xfff, 0x7, 0x0, [{0x0, 0x4d, 0x8, '\x00', 0x1}, {0x7, 0x3f, 0xff, '\x00', 0x7f}, {0x0, 0x81, 0x2, '\x00', 0x2}, {0x2, 0x20, 0x7, '\x00', 0x3}, {0x1, 0x7f, 0x4, '\x00', 0x5}, {0x9, 0x80, 0x1f, '\x00', 0x5}, {0x6, 0x1, 0xff, '\x00', 0x1f}, {0x51, 0xe3, 0x8, '\x00', 0x9}, {0xc2, 0x0, 0x2a, '\x00', 0xfe}, {0x0, 0x1, 0x3f, '\x00', 0x3f}, {0x7, 0x5, 0x81, '\x00', 0x2}, {0x9, 0x2, 0x8, '\x00', 0xff}, {0x3, 0x1, 0x5, '\x00', 0x1f}, {0xa3, 0x6, 0x8, '\x00', 0x80}, {0x8, 0x0, 0x0, '\x00', 0x20}, {0xfe, 0xa3, 0x4, '\x00', 0x1}, {0x3, 0x7, 0x7f, '\x00', 0x40}, {0x40, 0x2, 0x0, '\x00', 0x9}, {0xfe, 0x20, 0xff, '\x00', 0x79}, {0x59, 0x7, 0x3f, '\x00', 0xf3}, {0x3, 0x7f, 0x3, '\x00', 0x7}, {0x81, 0xfc, 0xfd, '\x00', 0x6}, {0x51, 0xf, 0x74, '\x00', 0x3}, {0x7, 0x3, 0x0, '\x00', 0xde}]}}) (async) open(&(0x7f0000000000)='./file0\x00', 0x2080, 0x40) (async) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000040)={0xd183, 0x0, 0xf871, 0x600}) (async) [ 3110.681556][ T3773] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.709373][ T3773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3110.743457][ T3811] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.766019][ T3779] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.790390][ T3779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3110.791043][ T3811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3110.815474][ T3779] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.836406][ T3827] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.850978][ T3779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3110.863847][ T3778] UDC core: couldn't find an available UDC or it's busy: -16 [ 3110.881092][ T3778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3110.920328][ T3827] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3111.011152][T24570] usb 3-1: new low-speed USB device number 97 using dummy_hcd 15:12:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x2, 0x12, r3, 0x83000000) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "fcce5aab", {0x1, 0x0, 0x4000, 0x7, 0x5b}}) [ 3111.145483][ T3818] UDC core: couldn't find an available UDC or it's busy: -16 [ 3111.160321][ T3818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3111.216586][T17853] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 3111.304569][ T3856] UDC core: couldn't find an available UDC or it's busy: -16 15:12:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000108000118000000", @ANYRES32=r5, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r6, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r4, &(0x7f0000000180)={r6, r3, 0x4800000}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) syz_clone(0x4000000, &(0x7f0000000000)="eea9cea647226f283843839a8502f44db1fef34e7e4db31f160d73f0d63f380ba575324174e42a999c29a01c29472737bc5019bde09b83f1f867ec0659bb595281f35647de4c7d3da32d83552d490c81eeea0f835bd07b444842e83aabf7e183e4563e73b3f662ee54bd1bca755e60b5510acc147cb512a25c5b59701b1fdb", 0x7f, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000240)="f92e84c3389f859cdf5aca20b4f0c6479a626f6331b3ff50fe3bcc9ca27f6853595e38a7ad1a9243877b5381c559826de99a611d5cbe67c3bd04f1eca10d6f6d78") [ 3111.399737][ T3856] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x4}}, '.\x00'}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000500)) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r3], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x4}}, '.\x00'}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r3], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000740)=0x4) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3111.603149][ T3873] UDC core: couldn't find an available UDC or it's busy: -16 [ 3111.641489][T17853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3111.683279][T17853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3111.711220][ T3873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3111.715370][ T3876] UDC core: couldn't find an available UDC or it's busy: -16 [ 3111.727202][T24570] usb 3-1: device descriptor read/64, error -71 [ 3111.751750][T17853] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3111.768341][ T3876] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3111.781015][T17853] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3111.795586][ T3879] UDC core: couldn't find an available UDC or it's busy: -16 [ 3111.803876][T17853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3111.812097][ T3879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000108000118000000", @ANYRES32=r5, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r6, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r4, &(0x7f0000000180)={r6, r3, 0x4800000}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async, rerun: 64) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) syz_clone(0x4000000, &(0x7f0000000000)="eea9cea647226f283843839a8502f44db1fef34e7e4db31f160d73f0d63f380ba575324174e42a999c29a01c29472737bc5019bde09b83f1f867ec0659bb595281f35647de4c7d3da32d83552d490c81eeea0f835bd07b444842e83aabf7e183e4563e73b3f662ee54bd1bca755e60b5510acc147cb512a25c5b59701b1fdb", 0x7f, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000240)="f92e84c3389f859cdf5aca20b4f0c6479a626f6331b3ff50fe3bcc9ca27f6853595e38a7ad1a9243877b5381c559826de99a611d5cbe67c3bd04f1eca10d6f6d78") [ 3111.851445][ T3814] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3111.883616][T17853] hub 5-1:1.0: bad descriptor, ignoring hub [ 3111.890178][T17853] hub: probe of 5-1:1.0 failed with error -5 [ 3111.940407][T17853] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3111.949684][T17853] cdc_wdm 5-1:1.0: Unknown control protocol [ 3112.011178][T24570] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 3112.023777][ T3879] UDC core: couldn't find an available UDC or it's busy: -16 [ 3112.046598][ T3873] UDC core: couldn't find an available UDC or it's busy: -16 [ 3112.055510][ T3879] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3112.065021][ T3873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3112.371214][T24570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3112.382576][T24570] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3112.395256][T24570] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3112.408445][T24570] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3112.418597][T24570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3112.441598][ T3840] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3112.462938][T24570] hub 3-1:1.0: bad descriptor, ignoring hub [ 3112.469512][T24570] hub: probe of 3-1:1.0 failed with error -5 15:12:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async, rerun: 64) syz_usb_disconnect(r2) (rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3112.731629][ T3866] usb 5-1: reset low-speed USB device number 28 using dummy_hcd [ 3112.732543][ T3913] UDC core: couldn't find an available UDC or it's busy: -16 [ 3112.770955][ T3913] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000740)=0x4) (async) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100030000000000800006111a200800000000259125487068122967189222597552fa495b953a5994b2355055060c9bb2e53380adf5a0b7a83881b8e7c83bd4097cd3dc9471b3d4a3b3af3083027c70969252e2349d31ae369ee209fcd428d5cc5f758bd30ebacbfadcc4214b4ec4d2d6d4125fe2d9f0049496f28c7a5a7730f97891058e11b07d3c8a8e25c65368ad4303f3727c6b061e80e0860a5d37f5f0f2932eb73853362f1b8c3befa2ceea9a777a7e9c295d63dbcee8862eac6700000000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = getpid() r3 = syz_clone(0x40102000, &(0x7f0000000000)="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", 0xffe, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="d574ebb54360f7389f0f0578e0ca8ace36d66bad1decc029594c600694e1de9d646a60231e7aa6415b1ad0accda93210184d871264542108c2c56e37b391a49cb7f3e852a2e1496d48627a25f4118a9cf4d1093f94eec505406f42cb9f2f220670da4490acaa7da7bbf5329580658c5202") syz_open_procfs$namespace(r3, 0x0) process_vm_readv(r2, &(0x7f00000011c0), 0x0, &(0x7f0000005fc0)=[{&(0x7f00000014c0)=""/18, 0x12}, {&(0x7f0000001440)=""/6, 0x6}, {&(0x7f0000001480)=""/30, 0x1e}, {&(0x7f0000006080)=""/113, 0x71}, {&(0x7f0000005f40)=""/74, 0x4a}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000001980)=""/134, 0x86}, {&(0x7f0000001a40)=""/207, 0xcf}, {&(0x7f0000001340)}], 0x9, 0x0) r4 = gettid() tkill(r4, 0x7) syz_clone3(&(0x7f0000001540)={0x8000000, &(0x7f0000001140), &(0x7f0000001180), &(0x7f0000001100), {0x3f}, &(0x7f0000001380)=""/140, 0x8c, &(0x7f0000001200)=""/168, &(0x7f0000001500)=[r3, r2, r3, r3, r3, r2, r2, r4], 0x8}, 0x58) lstat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)) [ 3113.231450][ T3824] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3113.273460][T24570] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3113.290607][T24570] cdc_wdm 3-1:1.0: Unknown control protocol [ 3113.458358][ T3814] UDC core: couldn't find an available UDC or it's busy: -16 [ 3113.466948][ T3814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3113.651537][T24570] usb 3-1: reset low-speed USB device number 98 using dummy_hcd [ 3113.692956][T13827] usb 5-1: USB disconnect, device number 28 15:12:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100030000000000800006111a200800000000259125487068122967189222597552fa495b953a5994b2355055060c9bb2e53380adf5a0b7a83881b8e7c83bd4097cd3dc9471b3d4a3b3af3083027c70969252e2349d31ae369ee209fcd428d5cc5f758bd30ebacbfadcc4214b4ec4d2d6d4125fe2d9f0049496f28c7a5a7730f97891058e11b07d3c8a8e25c65368ad4303f3727c6b061e80e0860a5d37f5f0f2932eb73853362f1b8c3befa2ceea9a777a7e9c295d63dbcee8862eac6700000000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = getpid() r3 = syz_clone(0x40102000, &(0x7f0000000000)="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", 0xffe, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="d574ebb54360f7389f0f0578e0ca8ace36d66bad1decc029594c600694e1de9d646a60231e7aa6415b1ad0accda93210184d871264542108c2c56e37b391a49cb7f3e852a2e1496d48627a25f4118a9cf4d1093f94eec505406f42cb9f2f220670da4490acaa7da7bbf5329580658c5202") syz_open_procfs$namespace(r3, 0x0) process_vm_readv(r2, &(0x7f00000011c0), 0x0, &(0x7f0000005fc0)=[{&(0x7f00000014c0)=""/18, 0x12}, {&(0x7f0000001440)=""/6, 0x6}, {&(0x7f0000001480)=""/30, 0x1e}, {&(0x7f0000006080)=""/113, 0x71}, {&(0x7f0000005f40)=""/74, 0x4a}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000001980)=""/134, 0x86}, {&(0x7f0000001a40)=""/207, 0xcf}, {&(0x7f0000001340)}], 0x9, 0x0) r4 = gettid() tkill(r4, 0x7) syz_clone3(&(0x7f0000001540)={0x8000000, &(0x7f0000001140), &(0x7f0000001180), &(0x7f0000001100), {0x3f}, &(0x7f0000001380)=""/140, 0x8c, &(0x7f0000001200)=""/168, &(0x7f0000001500)=[r3, r2, r3, r3, r3, r2, r2, r4], 0x8}, 0x58) lstat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)) 15:12:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x2, 0x12, r3, 0x83000000) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) readahead(r3, 0x0, 0x0) (async) mmap$snddsp_control(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x2, 0x12, r3, 0x83000000) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100030000000000800006111a200800000000259125487068122967189222597552fa495b953a5994b2355055060c9bb2e53380adf5a0b7a83881b8e7c83bd4097cd3dc9471b3d4a3b3af3083027c70969252e2349d31ae369ee209fcd428d5cc5f758bd30ebacbfadcc4214b4ec4d2d6d4125fe2d9f0049496f28c7a5a7730f97891058e11b07d3c8a8e25c65368ad4303f3727c6b061e80e0860a5d37f5f0f2932eb73853362f1b8c3befa2ceea9a777a7e9c295d63dbcee8862eac6700000000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = getpid() r3 = syz_clone(0x40102000, &(0x7f0000000000)="60adea19fcc1fab5a02faa7628aa7e3f7181a83ca873df0f6b7b3913cdc90ebff913f576d31c767a6f35b03eccfa24c903dd44c8ebe76a014a9673ae4f633b560f9564887a4b019ba1666080e7be10f392fe4e03cf71fe7040031e14acae83b2bf6d8fee44b3893c0c361cad18846bd047a7fe6426bb9afebd72e109c1f81599053b40741ef09f50e9d129057678a7952f8ce0f2d0dccf2298dd9a166c9d8c553941bfd3bfafce7f1b656480104421dfc2e75cd9cd8533d93933b1a953e05fdd0b66eb49589afc97daa558e13065babd7b0f2bd63cdd355e5654fb121484d7c7bea4f5383e8076b616febb4388ba99db1bd2a115779ba2595e29595b67c2baab1af6b9efd750cf38b58ef17e259ce31e48cd870fbe9ab23bedfecd4867d13584057e561479b69f2964c2ab75c75460c4143d2f07ae49695b59f9f206403e36455d4c9b68b1a360124381201ccbeccbbf55911cbc1598fb2104948977e0c7c11c251b6904a55bbbb914a365b00d5c728a7ba82a5ba54ea520d22fc468b65ce52e7292d563554dc8c0d4d444fe49a6eb88d7a612aa22409605d0e7012aa87b218f0b729006f39802597b0edf98d4373299235c293639890aba3685d6d3000154b51113fbaab0a949c67c8325fef17b9d3051288c4185a70cf303fc7d6b9f81ee82eff7827e828d635deea94b5a75981bd7c343418f22a6e5313a35596b6d40a32c2e13e814ef86bb1aa3ceef142da64ec4ace199e30e1eb445f8d37d976d93bc9b1d8ca72c4edd42373ae848392cbf834881f6c63824022ddc0da2dda2d6cf7241f0e3e050a8bfdad4615fbb71e72aeeb9fd4eaa070e6e57bf9fb03f622ffd6c2c6c3fab197e104e9c50ae0ab2225e07329ecd571177846b26354db6327a1c1c6b9d711efd781cc81555826e9062da25e80bb75ac14ac04e13564782946285fcfb1d3c2e8cf623db376c3068e9e8b96fb38d59755f78f208425c9a228c4758e9f106b24a6eeac2c517f15233ef576cd29b5c107821664aa806385d8de7f60714a26c919dab3225f7f6c42d01f3e347171e0ecfea525b52affc3a88c0b7f801ed54198317013ff12500969fb56aaf8e1f66138bedb69a225ff54e547843f58d84592b982bf17e0bb68eeb51b4adfc285138aa4863e309833b998b36fa5dbe048641ed772e04b99bb944dac9e5665d70aa8d1492f958ec4a1838febaba2334a1d509b0b63e8257dea70c4d902e65ff121cb5f9f44f6ab3314b3c9a1ef7718457e30db1f5e2d1c817add0e8e1c37e87dae030a9cc78cd46e277220e4789afcf99208235a71f0c65abd2929477644e802e45528d3af84425f145e0cbf6a748b1a9d694cef65e1abb33ac1ce5c14b2fe9b9e26499300eefbc90e39747b5bae94b3c9a442e3273cd6e2e0b7cdb7c5cd78ee28feb487e3bbfebc82bc7ddc557aa6f04d623909fd6deea5dac2b0a1a2094ee2a9a10b042ba508a4aab5c866c72b66c034331790e359e5fe3e8db7874526abe93bed582b7d9b1998affba8a68bc542febaa41302cc7e6706de12943d69070f5dadb49852f0651aa9fccf37a343453a6009dd8a1fda7e8dea865bc06edcfe8ca826682eb499a4da10b24a0e0cb289cf8bcae3941a1209d47f6688525e358233007a06503772e07d3f5f3ba72c5839a4df91cd1148a1d218c21b7d882c9b971d9bd531dd1e0af2e7bbc6a7143d4da934bec5ab29238537754748d968fd6a8caa7b8dc75622608d69e2759e26a9cf4c54b052580d5b82d860b85a53819b5461dc47025a6fc89f3be8dbd4262c45e10bf5c8bddad27770b32e2c70097f845ae3f64deb7647d05ff4ed1f39f08c52ca668edd71ba1c3fbb0a41250629daeb95bca223e9fa041f2309be908ea2039065b4971d3352a661f620bd69180c3e78c5c9f9b4709b9101b7f2238206a1cb2038e8871e32ff5cd9c304543d0a062932f9ee4e1c666b1648eb4410b3e9db4107f31c4754edb911a163a1859579a0ff1957925c44af45881a4842a218290f4bb20401627b6498ddc327ce7a28d3ace84582ce10af88631640ee20a6ca55ab5933ceced12afc703d41062070c23c9b8027239d9a667a253a6e1a207a8a0b028b486472d218bc68e6a44f7d0ed4bf742c32e1a7ba02c36ce4c4e85746883a8b380a36515b7e5f35b4e1c9558696050d6d928ac91eda2dd6ae820bc302328a8cc8d9f8e60e93b72865adb20bb827d1085ca105c8f21cf3cb4d1d1ea6d35f6e7a95269a3a706bd83cdd2b5c09fcaf484c59d96dde92c01bf7ea8a2de4ed401585d893e37cca3726a9958e6f96a7fe44c7536d3987db20cf4e03787edbb90ef2c26ce05e60ae725f7e0c0992c1425f31a162863e9ef5733245d48f4c7d4a258112578ade9a8106f8b2584498af59802acd3cb4b9036f00200cfbde38327866e80b402b8abd2e1a8d1272f0bf6c1b2d26261a36224b66f7832b24c6e5e041330c3a9832a0e329554a1e3f5c77ee9fe1125d50b0da97834c2f0c906984bcbc6e106690747c86875bdfe4a596a7012961f5b2a7c39143ed30a02c53cfe4a1115d4d293abb3bcf77d47546fa33b9710a5b1be37a2366a3618c6b0d4ad63b1bfe2dc5f7b22bfd6a894464f126dff57f6f2da2e015f998767182c647f56c6744e5c0c564823ae553a7409afe7f6b4d5c116d59951a3387e9baa5bd6e79f5835ca5d1fed11a1dd3b8555cdaeb7dbe82c000bf28cdbe02acf094887c539d3f035151c0f14531c83ad5bc28d5d8b7dabff9e65221cf8b1d54c85ef1a289c40046bc315021f5ed75ad402191ff8ce6ced29c6f826d113e4a19c8c99485935b6e34d02ff4f8672e0d4279a054b0a4cc98787b75bad40b43efc50d37d89ad238879f29f6c8e06e1f64c23d02f7e50ccfb8380ee5800af8bc13428d360fbef62583c74dcb8f0d4ee66692627ee9a0ed7d59f055734df8cd505e48c635f1f9bfa50464340b056d973bdea638cc1de541b19a5339f0bd91e22a93d3a76d4cb159c60f274c0799a8dafa4c4ae3e4c0b88b29bec1fdeaface33071cf3f42dc52749807b2e5f8eabea126f1329867d71de231c2c013b7486da5b822fe6c5c5591827f89c55561f6f29cdf4483d1d6c6cc5498ef938fff0aa0d5b1eaf96dd95c820c062e5bfad4a0be80a537e8a1f0f859b381823a6eeaa8617755316fd7860e0dff305559a9b9b5244da019caab84b2902819cee3f773f51965afd6c9c37ecd29a85240915b29106dd2b96228a5614208af316c136e8aa21861d22d868214d3304d0daf7faa075cd9b5b2436c06097b32231e6e4ffd26af1b5177518b2096a0204d5b4633a31887f7881000141721b8000390c2cf2f4151d62ce5806662984eb1a85bb46570fa801243266a71a5af33d3166e06d0050adfd5c40ae9b90382494fd0c4b0e6fd35b281408ee32ec7bd8a30c117d39fc38aaaa8f5445d5b69b12d87f28f95737ff593a8e8c777f8a601a2a5a3ef7fe0bc483b25f4fb78cbeae9032a4bab5f63e1ec0c60e9f8603f34e2e30c6902ba031d11a9390f24ddb5844c4ccf4053d9b705cb0a967319336cf52c54bcc5da188159b5ab42002dcae9d3f40c77cafb0904f914830a6c82328324860c2bb426fe4030c14c2c66848eafae947b6aa4f035d7d6848cc176392c01889c33cbfeb9fbd946a22e2eed9954e0f99f51d467da02bb51fc76368d324b782525e1aa6d17e3cdebffc6c8acc70d50e794ab65238c09b46e9ccf58b72231a43792169f7ea4de3453c9fb309d045a924406ab23366eaa7badbefbb4c32b7410e0f21d5727a663b63d31143e564673709226dd252b125d17df74e0831cb32ec0e72a9082a30b34c8138bcfb2cb9205b26e7bccb74104e2f4a136e3c9d498c0270a37f58bdde7987f419199ef915bc89f82113457a471b59ffc07cf4b600057761d5b692e000313ec6e4d39af4e95189fc84bbed63c4ea06ee24fa8472144b09cc09ac16110ba8f990403b458bb567ca05c81081832e382f815d07fcdd29d6c30a0a6ee2feb272aa4c27ee50416a8a9038797a933fb5412a492fcc77bce06630065ab307aed36bdfa2e4715dce564fb0ff7f34f8afcada93ef7fb6c98810eefb2b1299d5b97909f783e11b4312ae4a8b4b80ac363ac2e23883cb0a2b0e2e171619cbf38cf42a4bea7a25dd94d2c15b794a680126bb36dda07cec5299c4f565b8a914a27e1b6ede28d58314b0c689d1a915936dc38dd5770a5c2939d12d83503aa61a24ee22548d4e8ff800ba8d4bd52c4a95487c6508ecd95b4f412d97e7489905d0d41f66f7810792aa6b0c590bd5bc0274ae35bbe957792e202f52277c58ebea16af061c5bc2f5db71e749c4399109b85c4c50c0c6f1e718510649e511c96b0823f8e721bede69f0abf0a8ef1b053f17cec752f82c5de3070cd14591e4a149e30dc546f0e14d56c5a3d3ec7a898f037f57123fb76f73ab60eb151825e18e82096031f04b0fbeed9ff4328d31c0fbe9d472c93424bcd6775fccbd22b6a56e63150ecd6c11da8076a2b6ade904937c26b01ee949faa446010a31893677f778ddcb9882a8082963bc506958dd6645ca7421f3db04b6dbfa2512a2889022f9a4151246fd55bdcbb8cc46ebdc33a1732c748b10dc68551d0c382a6fa35cfd348ce32b6c6acae6cb4450ac7c8326920f2e41bb73a326d08cd8ff0ed0b29cd79be7e43ebb7cd8667f25e8a1eb1b4c0b47c77fc3a6e223165a7b1d0939ae8493504c01ad27a50a2f4a5ef60021f00f5f91abb19c1b69732e3d18de2a7da0a6a8e4826704ce51b763295b14d7da97c63ef36e9dceaeeb291bdaf83b8bb02855f0c5934b0d1b6d334b505913ebac30a0dd9dbb844a29f1c51e732f403aa7f10fa7189405e44355b7f6976722af4e2d0e9d3135a6ec8fa20d215304d9966f2e5ac97ad372717316882d6683f8e58b9f578cc7b8785d00912272e2cd532c1732d0ee5540e586cbc9848db0c38e162df5ab4e7d74efa5ce7d381890044c874116ea61c89946308e9dd0829107866df804861e48bdc74b3c9315f1c46bb13cff16582c07b7c7666de1be95bea5be8223817926a9350d779c7f0aaded798211dbbc48df5b727d99f8951487a3a90b0519e43bc0687c86a6f5a40a031c13ba35415f87f6982aa192603ac06abf44ab788589f9a27ea084dbb3041da0caa28945073cbf4287df58b47da50784dec0c3ad7309ec9f91cf4ba7496c3e0a4d376174f1e615b296f8b3a843011383ecdd2fec2b40d02aac47bbc4ab965de4448a6e2f7093bef33e8b28a4a1c692ee6eb9ca7d7a5ba8e4587e42c993b2ddf7a101f4e40a93b5490b49c1d89ef0dc3221c06d576ea464a1ea3f2558500ffe416438134ad340ac40ace089ee633a8f029906a6f3253a2b7dddef495519c89884d89201c7f72e8c7d9726896fcde49b4f5570cc2a85cc7c9de68bd9cb3172a88a9fd3b8510ab3b462cace574464e22cd656a9c06dfe1f6dbc0bd00d8e7660ea3193ebc37ab866e1704d4ba7f301b08ad5576cc026b877e19714e9e61535970b5d43ae437c2b2261959a52df30588b6a8cc6a34464605338071a0792ff96a0cb51fffbca0d5bf79d3cdba37c734c439b785933378364f135a75e5894df01c63f509cbb07ad8cd1e9c4ad135c7a2662f9873f696248b746c2a251dc59c78fcad26de69a357a95d04c6e77938b5e26c6fe2e40b4fd9114bb7142f49f93ebda540f4f51720b05487e5b8d45e01368be17f695a886d76167d1dded8653cd1980605be21762ad16118ff396514060bc6ba1f5f", 0xffe, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="d574ebb54360f7389f0f0578e0ca8ace36d66bad1decc029594c600694e1de9d646a60231e7aa6415b1ad0accda93210184d871264542108c2c56e37b391a49cb7f3e852a2e1496d48627a25f4118a9cf4d1093f94eec505406f42cb9f2f220670da4490acaa7da7bbf5329580658c5202") syz_open_procfs$namespace(r3, 0x0) process_vm_readv(r2, &(0x7f00000011c0), 0x0, &(0x7f0000005fc0)=[{&(0x7f00000014c0)=""/18, 0x12}, {&(0x7f0000001440)=""/6, 0x6}, {&(0x7f0000001480)=""/30, 0x1e}, {&(0x7f0000006080)=""/113, 0x71}, {&(0x7f0000005f40)=""/74, 0x4a}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000001980)=""/134, 0x86}, {&(0x7f0000001a40)=""/207, 0xcf}, {&(0x7f0000001340)}], 0x9, 0x0) r4 = gettid() tkill(r4, 0x7) syz_clone3(&(0x7f0000001540)={0x8000000, &(0x7f0000001140), &(0x7f0000001180), &(0x7f0000001100), {0x3f}, &(0x7f0000001380)=""/140, 0x8c, &(0x7f0000001200)=""/168, &(0x7f0000001500)=[r3, r2, r3, r3, r3, r2, r2, r4], 0x8}, 0x58) lstat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100030000000000800006111a200800000000259125487068122967189222597552fa495b953a5994b2355055060c9bb2e53380adf5a0b7a83881b8e7c83bd4097cd3dc9471b3d4a3b3af3083027c70969252e2349d31ae369ee209fcd428d5cc5f758bd30ebacbfadcc4214b4ec4d2d6d4125fe2d9f0049496f28c7a5a7730f97891058e11b07d3c8a8e25c65368ad4303f3727c6b061e80e0860a5d37f5f0f2932eb73853362f1b8c3befa2ceea9a777a7e9c295d63dbcee8862eac6700000000000000"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) getpid() (async) syz_clone(0x40102000, &(0x7f0000000000)="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", 0xffe, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="d574ebb54360f7389f0f0578e0ca8ace36d66bad1decc029594c600694e1de9d646a60231e7aa6415b1ad0accda93210184d871264542108c2c56e37b391a49cb7f3e852a2e1496d48627a25f4118a9cf4d1093f94eec505406f42cb9f2f220670da4490acaa7da7bbf5329580658c5202") (async) syz_open_procfs$namespace(r3, 0x0) (async) process_vm_readv(r2, &(0x7f00000011c0), 0x0, &(0x7f0000005fc0)=[{&(0x7f00000014c0)=""/18, 0x12}, {&(0x7f0000001440)=""/6, 0x6}, {&(0x7f0000001480)=""/30, 0x1e}, {&(0x7f0000006080)=""/113, 0x71}, {&(0x7f0000005f40)=""/74, 0x4a}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000001980)=""/134, 0x86}, {&(0x7f0000001a40)=""/207, 0xcf}, {&(0x7f0000001340)}], 0x9, 0x0) (async) gettid() (async) tkill(r4, 0x7) (async) syz_clone3(&(0x7f0000001540)={0x8000000, &(0x7f0000001140), &(0x7f0000001180), &(0x7f0000001100), {0x3f}, &(0x7f0000001380)=""/140, 0x8c, &(0x7f0000001200)=""/168, &(0x7f0000001500)=[r3, r2, r3, r3, r3, r2, r2, r4], 0x8}, 0x58) (async) lstat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)) (async) 15:12:40 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000001000000006241a200000090550184c"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x40) write$char_usb(r5, &(0x7f0000000540)="12f8e114dd20e6ebc93ed6333d83af14f41cfab829cbad6f6bb3f384050d317297d60db427206be20bd8ddc2f8c9c0ade93705f8eb855e2b2a0b2009855af3ce1311cf11ba0c80535f61529ccab00d94d8e2f161a46d181ac843776a60f3489311060e14e1d393aa7bca6287220a727870a4fa7a074b6d31cf617339e008180a05ca1c7477ba769e572988009dc8a8ee36721982d93869127514dcfd", 0x9c) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xb2, 0x8}}, './file0\x00'}) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000740)=0x4) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000740)=0x4) (async) syz_usb_disconnect(r4) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3114.201346][T24570] usb 3-1: device firmware changed [ 3114.212918][ T3933] UDC core: couldn't find an available UDC or it's busy: -16 [ 3114.220735][ T3933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3114.244952][T24570] usb 3-1: USB disconnect, device number 98 [ 3114.401623][ T3943] UDC core: couldn't find an available UDC or it's busy: -16 [ 3114.406398][ T3948] UDC core: couldn't find an available UDC or it's busy: -16 [ 3114.419016][ T3948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3114.438522][ T3943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3114.477098][ T3933] UDC core: couldn't find an available UDC or it's busy: -16 [ 3114.516461][ T3933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3114.634697][ T3948] UDC core: couldn't find an available UDC or it's busy: -16 [ 3114.666613][ T3948] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x9, 0xe5b8, 0x7, 0x1, 0xffffffff}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00\x00\n\x00'}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xd4, &(0x7f0000000140)={[{0xc5, 0x4e00, "3c43bac825111cb15365d8703ebc3b9abc48252cfe4be8e4556416a169cf91c0d556f59a4f8d59c46983cfcc15095d108abbc6fb252b827c9495b80c6f45a24bc0db85869dc21ec816ba3b6425da32e62d30246dd99d796f0136139566f6d2319d0f9e28575ba8c8335c0fe012e6ab49e01b76a96a37b89b91be4b47363e32909c35cdd3ba65ece3b4ba2d3646a709baa763b22d71647d882d075bb1972e158915c22743469bd6bd30ce0c09a17199948ce0ac50506cdbdd914e3bc00cc733581f675091e2"}, {0x3, 0x4e00, "2ff92e"}]}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3114.721054][T24570] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 3114.729998][ T3943] UDC core: couldn't find an available UDC or it's busy: -16 [ 3114.751984][ T3943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3114.879322][ T3984] UDC core: couldn't find an available UDC or it's busy: -16 [ 3114.919629][ T3984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x80, &(0x7f0000000780)="24c256f5522b54cc52407f0bc3b18b905e9fa25a712214b909ec0fc73834000447ea3b4add9a5f38ecde89f8f7da805167ea7b19750f4bfb2a7f3dd5073d7281b46d2895adcabc4ede05c15ae9a46cfdb567c2d3b10edf6b5390074c5ff745f2213f0e00002f3b40f86bf160d4e76e122f00"/128) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0f7873000f01cb0fc79995a5360f01c30fc77d12f2abbaf80c66b8d3595d8066efbafc0cb000eebaf80c66b8e63e7a8266efbafc0cb09aee66b84607b08a0f23d80f21f86635800000a00f23f866b8770000000f23d00f21f86635100000070f23f8", 0x62}], 0x1, 0x5a, &(0x7f00000001c0), 0x0) [ 3115.101351][T24570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3115.122553][T24570] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3115.128840][ T3989] UDC core: couldn't find an available UDC or it's busy: -16 [ 3115.141351][T24570] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3115.144012][ T3989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3115.160134][T24570] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3115.170175][T24570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3115.199146][ T3984] UDC core: couldn't find an available UDC or it's busy: -16 [ 3115.201315][ T3957] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3115.212884][ T3984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3115.242327][T24570] hub 3-1:1.0: bad descriptor, ignoring hub [ 3115.248677][T24570] hub: probe of 3-1:1.0 failed with error -5 [ 3115.259112][T24570] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3115.263913][ T3984] UDC core: couldn't find an available UDC or it's busy: -16 [ 3115.266174][T24570] cdc_wdm 3-1:1.0: Unknown control protocol [ 3115.297102][ T3984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:41 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000001000000006241a200000090550184c"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x40) write$char_usb(r5, &(0x7f0000000540)="12f8e114dd20e6ebc93ed6333d83af14f41cfab829cbad6f6bb3f384050d317297d60db427206be20bd8ddc2f8c9c0ade93705f8eb855e2b2a0b2009855af3ce1311cf11ba0c80535f61529ccab00d94d8e2f161a46d181ac843776a60f3489311060e14e1d393aa7bca6287220a727870a4fa7a074b6d31cf617339e008180a05ca1c7477ba769e572988009dc8a8ee36721982d93869127514dcfd", 0x9c) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xb2, 0x8}}, './file0\x00'}) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000001000000006241a200000090550184c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x40) (async) write$char_usb(r5, &(0x7f0000000540)="12f8e114dd20e6ebc93ed6333d83af14f41cfab829cbad6f6bb3f384050d317297d60db427206be20bd8ddc2f8c9c0ade93705f8eb855e2b2a0b2009855af3ce1311cf11ba0c80535f61529ccab00d94d8e2f161a46d181ac843776a60f3489311060e14e1d393aa7bca6287220a727870a4fa7a074b6d31cf617339e008180a05ca1c7477ba769e572988009dc8a8ee36721982d93869127514dcfd", 0x9c) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xb2, 0x8}}, './file0\x00'}) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3115.488672][ T3989] UDC core: couldn't find an available UDC or it's busy: -16 [ 3115.498462][ T3989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3115.547460][ T3999] UDC core: couldn't find an available UDC or it's busy: -16 [ 3115.580933][ T3999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100030000000000800006111a200800000000259125487068122967189222597552fa495b953a5994b2355055060c9bb2e53380adf5a0b7a83881b8e7c83bd4097cd3dc9471b3d4a3b3af3083027c70969252e2349d31ae369ee209fcd428d5cc5f758bd30ebacbfadcc4214b4ec4d2d6d4125fe2d9f0049496f28c7a5a7730f97891058e11b07d3c8a8e25c65368ad4303f3727c6b061e80e0860a5d37f5f0f2932eb73853362f1b8c3befa2ceea9a777a7e9c295d63dbcee8862eac6700000000000000"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) socket$caif_seqpacket(0x25, 0x5, 0x0) (async, rerun: 64) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = getpid() (async) r3 = syz_clone(0x40102000, &(0x7f0000000000)="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", 0xffe, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="d574ebb54360f7389f0f0578e0ca8ace36d66bad1decc029594c600694e1de9d646a60231e7aa6415b1ad0accda93210184d871264542108c2c56e37b391a49cb7f3e852a2e1496d48627a25f4118a9cf4d1093f94eec505406f42cb9f2f220670da4490acaa7da7bbf5329580658c5202") syz_open_procfs$namespace(r3, 0x0) (async) process_vm_readv(r2, &(0x7f00000011c0), 0x0, &(0x7f0000005fc0)=[{&(0x7f00000014c0)=""/18, 0x12}, {&(0x7f0000001440)=""/6, 0x6}, {&(0x7f0000001480)=""/30, 0x1e}, {&(0x7f0000006080)=""/113, 0x71}, {&(0x7f0000005f40)=""/74, 0x4a}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000001980)=""/134, 0x86}, {&(0x7f0000001a40)=""/207, 0xcf}, {&(0x7f0000001340)}], 0x9, 0x0) (async) r4 = gettid() tkill(r4, 0x7) syz_clone3(&(0x7f0000001540)={0x8000000, &(0x7f0000001140), &(0x7f0000001180), &(0x7f0000001100), {0x3f}, &(0x7f0000001380)=""/140, 0x8c, &(0x7f0000001200)=""/168, &(0x7f0000001500)=[r3, r2, r3, r3, r3, r2, r2, r4], 0x8}, 0x58) (async) lstat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)) 15:12:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x2, 0x12, r3, 0x83000000) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x9, 0xe5b8, 0x7, 0x1, 0xffffffff}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00\x00\n\x00'}) (async) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xd4, &(0x7f0000000140)={[{0xc5, 0x4e00, "3c43bac825111cb15365d8703ebc3b9abc48252cfe4be8e4556416a169cf91c0d556f59a4f8d59c46983cfcc15095d108abbc6fb252b827c9495b80c6f45a24bc0db85869dc21ec816ba3b6425da32e62d30246dd99d796f0136139566f6d2319d0f9e28575ba8c8335c0fe012e6ab49e01b76a96a37b89b91be4b47363e32909c35cdd3ba65ece3b4ba2d3646a709baa763b22d71647d882d075bb1972e158915c22743469bd6bd30ce0c09a17199948ce0ac50506cdbdd914e3bc00cc733581f675091e2"}, {0x3, 0x4e00, "2ff92e"}]}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3115.916049][ T3999] UDC core: couldn't find an available UDC or it's busy: -16 [ 3115.931087][ T3999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3116.044619][ T3945] usb 3-1: reset low-speed USB device number 99 using dummy_hcd [ 3116.104478][ T4029] UDC core: couldn't find an available UDC or it's busy: -16 [ 3116.121373][ T4029] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3116.131008][T17882] usb 5-1: new low-speed USB device number 29 using dummy_hcd 15:12:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x80, &(0x7f0000000780)="24c256f5522b54cc52407f0bc3b18b905e9fa25a712214b909ec0fc73834000447ea3b4add9a5f38ecde89f8f7da805167ea7b19750f4bfb2a7f3dd5073d7281b46d2895adcabc4ede05c15ae9a46cfdb567c2d3b10edf6b5390074c5ff745f2213f0e00002f3b40f86bf160d4e76e122f00"/128) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0f7873000f01cb0fc79995a5360f01c30fc77d12f2abbaf80c66b8d3595d8066efbafc0cb000eebaf80c66b8e63e7a8266efbafc0cb09aee66b84607b08a0f23d80f21f86635800000a00f23f866b8770000000f23d00f21f86635100000070f23f8", 0x62}], 0x1, 0x5a, &(0x7f00000001c0), 0x0) [ 3116.359348][ T4033] UDC core: couldn't find an available UDC or it's busy: -16 [ 3116.367800][ T4033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3116.511048][T17882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3116.539607][T17882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 15:12:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="840e9d3b23f56f58000dfa2247e22ebc654cef9189ce4845d4d2ab6f319d717f21958656e4f532fe1b43759025d9a924a7714f10f038e33260b17388a04cf0cf71aa245c05b4342cb87e971efc3635d8c7cced2b5d1ae83640c5e4576f17e79b86bec7ce1e9bca23e2474491183a6d1aa0d719d179fbb550ff049cd8de50078630d3cdde8ba32e9e057cd734ef7e3d256638798932fdb3b98effceab962dc32e2aed3b70f94c90c1cc6870c12d845a1aeaa7475583faab28db0315c1daa394ae7b9ced8b221a8b539a58935df49e02fc04bd5b52d65426854d", 0xd9}, {&(0x7f0000000180)="a34f9429c835ef84956668c030a71c88cb78ee9e333b6397101d523296e6ea213f568f673100cb608aa4ca580d0544d26dcdbbecf3436e2304ae3108e52b5619613feb7d3f3d1e114cbe6422dfed0e67088c148e1e3203c6", 0x58}, {&(0x7f0000000200)="ea07a124ce9dd7fa77f88bc72e5213788196f9baf6aa82ee686391b62f80e2b222afb17e7a656d481a22bbeed4ab4cc9c3bd6ddeb7dda13a14bd8fe912d0939fbc0d151b1aa88d9bad1bee9d4a20d819df6de47d0b53e957c161d608fcb671dab8570505c115819e18e49d0cacca109023d798020b989ea4d6d0ffbf9f78a28fe45428f875fbacdf5a89fc0a0fa18ef86378235c50fb77cd288c", 0x9a}, {&(0x7f00000002c0)="378eefbcd3dd31286815b85c7c98e6f2af6b61d52efd7323273596d618d6ff39759a2babced4f8e4b9d1401aeeae7dd66778fcb25ec8e4e197fb0dc612a2ddbd3b22b11c56d869e79812085156fb487a8c006b4936740d58a2a4dd93abbca0c832137beb92690734b3a3d8ba49ff3844bc6445baaa50c3a5337c0ebb68acca1b57955a5780db12f6150e5b727700ccda25f03ab230aad3c55d9329ad66124d77a3f4929e9568dc10554f215ca944e5cd080391ba0083a540f451b1421e6bfe8e83040b7990e06c1e5843b9c96c85320db0ea9d9237ee2301f84b5966e4d1c96ac7b346d1e9bbef72237f3a2b", 0xec}, {&(0x7f00000003c0)="de3a43c6712b99ba10af69c77f31a2ce830b56dff76814fc3aa102fdfefb590d1b8f662df439aa1120a6a53b1f94f52219ef6324efd5fca90950eb64c1c45346f885055bf8143e96256914ec2bc1350301d012a0d8b6738abe842ca98962002dffd8c7754c75e9365d869a0f0c0fb14d1fcfb385b9b6cbccb1a837cea5c99a41352f9bd3ac92aef1d3ada1420bf6ad9748620f97dca1947202fbc3e33fbb330d54bf22ee675dc5ad7fc4d0fb4fb5e523d08857f81fde87c33405491168eb84239a360716718ba4d0e59d69dd3f8e", 0xce}, {&(0x7f00000004c0)="daa3ed995b24524218eec9a9cee69951a1fc86a1734bd717a046ac1c5a23b5b3ef620d4d43b569886f40657b22d3a574b69176043ec872cd145e94f8ba7eab9e71da00d48646b3629d4a16e26ecfedef5b24364cdce5204f24f9c45ed40455c48d6a1f84fa3f6c27a145be1fbca1a2ed298087fb87d80841a8f5c134c083f3be9b15e9b0200cb492d2", 0x89}, {&(0x7f0000000580)="28cc45a48fc87618fb13c48535525435b8f3ec658ec7844829a6119e733ef78ca5f6a4fc8a3088b4b729eef4e73e0de67bc8d4b6d05b46a2818a93aaa5edbc31ba7383fec15fc2f5a4857609fd098af6e199f14976713f4440c6ad4592cc21514afe5fb0d0f4a02e94ece066d9e2dcbc258b4d56ad", 0x75}], 0x7, &(0x7f0000000880)=[{0x68, 0x8, 0x7, "077c8542ec25fcb8231d26fedba32a153ef7167bc61c98edcb8d6f4b486849300c6d1bd8c71c36bb3e3ca04cb3a1039400582c87a7b44f8d354e6d5d71f4669ec62d48047892ddc231e4071106af2bfd56721d"}, {0x80, 0x10d, 0x3, "a0705170b7774a2cc1e32056cd8f612e0261861549da1c64fb99c89f18f74f50fb6ec0de2df74d65883350508fc50f7ccbbbbcbdf33bc7b844ae5e8c81c80f9360af205db160323fdf4bffd13ac2c05abc2b535ae118b0fcbf92197e67bd755311613779692e43fa36a7"}, {0x40, 0x84, 0xfffffffa, "762334e0a2d93003981d2e6356ad57f9609e889da788a65766c17df1815e8557cc678525cb801ad4d51055d684fc"}, {0x78, 0x10b, 0x4, "63ecc113d562b1cd290506bc214c6d0841f787329c4af4c5ba4b800f2e01d950b109824f7ebabbb03d007631fa7549ec472a27568f9cf025aa6e9f967df85b1ce8beff6d7a0812120460a4be3ffa1c549aba0169bc78410cdca6b0a4d777ce7595fac2fb1675"}, {0x18, 0x115, 0x959b, "03350d5cfd3dbaae"}], 0x1b8}}], 0x1, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3116.551609][T17882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3116.571527][ T3957] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3116.572040][T17882] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3116.632041][T17882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.681613][ T4008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3116.702677][T17882] hub 5-1:1.0: bad descriptor, ignoring hub [ 3116.705559][ T4042] UDC core: couldn't find an available UDC or it's busy: -16 [ 3116.710015][T17882] hub: probe of 5-1:1.0 failed with error -5 [ 3116.735268][ T4042] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3116.813218][T17882] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 3116.819798][T17882] cdc_wdm 5-1:1.0: Unknown control protocol [ 3117.202070][ T5313] usb 5-1: USB disconnect, device number 29 15:12:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) (async) mmap$snddsp_control(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x2, 0x12, r3, 0x83000000) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async, rerun: 32) syz_usb_disconnect(r3) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x9, 0xe5b8, 0x7, 0x1, 0xffffffff}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async, rerun: 32) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00\x00\n\x00'}) (async) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xd4, &(0x7f0000000140)={[{0xc5, 0x4e00, "3c43bac825111cb15365d8703ebc3b9abc48252cfe4be8e4556416a169cf91c0d556f59a4f8d59c46983cfcc15095d108abbc6fb252b827c9495b80c6f45a24bc0db85869dc21ec816ba3b6425da32e62d30246dd99d796f0136139566f6d2319d0f9e28575ba8c8335c0fe012e6ab49e01b76a96a37b89b91be4b47363e32909c35cdd3ba65ece3b4ba2d3646a709baa763b22d71647d882d075bb1972e158915c22743469bd6bd30ce0c09a17199948ce0ac50506cdbdd914e3bc00cc733581f675091e2"}, {0x3, 0x4e00, "2ff92e"}]}) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:43 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000001000000006241a200000090550184c"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x40) write$char_usb(r5, &(0x7f0000000540)="12f8e114dd20e6ebc93ed6333d83af14f41cfab829cbad6f6bb3f384050d317297d60db427206be20bd8ddc2f8c9c0ade93705f8eb855e2b2a0b2009855af3ce1311cf11ba0c80535f61529ccab00d94d8e2f161a46d181ac843776a60f3489311060e14e1d393aa7bca6287220a727870a4fa7a074b6d31cf617339e008180a05ca1c7477ba769e572988009dc8a8ee36721982d93869127514dcfd", 0x9c) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0xb2, 0x8}}, './file0\x00'}) (async, rerun: 32) syz_usb_disconnect(r3) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x80, &(0x7f0000000780)="24c256f5522b54cc52407f0bc3b18b905e9fa25a712214b909ec0fc73834000447ea3b4add9a5f38ecde89f8f7da805167ea7b19750f4bfb2a7f3dd5073d7281b46d2895adcabc4ede05c15ae9a46cfdb567c2d3b10edf6b5390074c5ff745f2213f0e00002f3b40f86bf160d4e76e122f00"/128) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0f7873000f01cb0fc79995a5360f01c30fc77d12f2abbaf80c66b8d3595d8066efbafc0cb000eebaf80c66b8e63e7a8266efbafc0cb09aee66b84607b08a0f23d80f21f86635800000a00f23f866b8770000000f23d00f21f86635100000070f23f8", 0x62}], 0x1, 0x5a, &(0x7f00000001c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x80, &(0x7f0000000780)="24c256f5522b54cc52407f0bc3b18b905e9fa25a712214b909ec0fc73834000447ea3b4add9a5f38ecde89f8f7da805167ea7b19750f4bfb2a7f3dd5073d7281b46d2895adcabc4ede05c15ae9a46cfdb567c2d3b10edf6b5390074c5ff745f2213f0e00002f3b40f86bf160d4e76e122f00"/128) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="0f7873000f01cb0fc79995a5360f01c30fc77d12f2abbaf80c66b8d3595d8066efbafc0cb000eebaf80c66b8e63e7a8266efbafc0cb09aee66b84607b08a0f23d80f21f86635800000a00f23f866b8770000000f23d00f21f86635100000070f23f8", 0x62}], 0x1, 0x5a, &(0x7f00000001c0), 0x0) (async) [ 3117.301548][T23633] usb 3-1: USB disconnect, device number 99 [ 3117.381407][ T4066] UDC core: couldn't find an available UDC or it's busy: -16 [ 3117.404271][ T4080] UDC core: couldn't find an available UDC or it's busy: -16 [ 3117.433973][ T4066] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3117.455488][ T4080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="840e9d3b23f56f58000dfa2247e22ebc654cef9189ce4845d4d2ab6f319d717f21958656e4f532fe1b43759025d9a924a7714f10f038e33260b17388a04cf0cf71aa245c05b4342cb87e971efc3635d8c7cced2b5d1ae83640c5e4576f17e79b86bec7ce1e9bca23e2474491183a6d1aa0d719d179fbb550ff049cd8de50078630d3cdde8ba32e9e057cd734ef7e3d256638798932fdb3b98effceab962dc32e2aed3b70f94c90c1cc6870c12d845a1aeaa7475583faab28db0315c1daa394ae7b9ced8b221a8b539a58935df49e02fc04bd5b52d65426854d", 0xd9}, {&(0x7f0000000180)="a34f9429c835ef84956668c030a71c88cb78ee9e333b6397101d523296e6ea213f568f673100cb608aa4ca580d0544d26dcdbbecf3436e2304ae3108e52b5619613feb7d3f3d1e114cbe6422dfed0e67088c148e1e3203c6", 0x58}, {&(0x7f0000000200)="ea07a124ce9dd7fa77f88bc72e5213788196f9baf6aa82ee686391b62f80e2b222afb17e7a656d481a22bbeed4ab4cc9c3bd6ddeb7dda13a14bd8fe912d0939fbc0d151b1aa88d9bad1bee9d4a20d819df6de47d0b53e957c161d608fcb671dab8570505c115819e18e49d0cacca109023d798020b989ea4d6d0ffbf9f78a28fe45428f875fbacdf5a89fc0a0fa18ef86378235c50fb77cd288c", 0x9a}, {&(0x7f00000002c0)="378eefbcd3dd31286815b85c7c98e6f2af6b61d52efd7323273596d618d6ff39759a2babced4f8e4b9d1401aeeae7dd66778fcb25ec8e4e197fb0dc612a2ddbd3b22b11c56d869e79812085156fb487a8c006b4936740d58a2a4dd93abbca0c832137beb92690734b3a3d8ba49ff3844bc6445baaa50c3a5337c0ebb68acca1b57955a5780db12f6150e5b727700ccda25f03ab230aad3c55d9329ad66124d77a3f4929e9568dc10554f215ca944e5cd080391ba0083a540f451b1421e6bfe8e83040b7990e06c1e5843b9c96c85320db0ea9d9237ee2301f84b5966e4d1c96ac7b346d1e9bbef72237f3a2b", 0xec}, {&(0x7f00000003c0)="de3a43c6712b99ba10af69c77f31a2ce830b56dff76814fc3aa102fdfefb590d1b8f662df439aa1120a6a53b1f94f52219ef6324efd5fca90950eb64c1c45346f885055bf8143e96256914ec2bc1350301d012a0d8b6738abe842ca98962002dffd8c7754c75e9365d869a0f0c0fb14d1fcfb385b9b6cbccb1a837cea5c99a41352f9bd3ac92aef1d3ada1420bf6ad9748620f97dca1947202fbc3e33fbb330d54bf22ee675dc5ad7fc4d0fb4fb5e523d08857f81fde87c33405491168eb84239a360716718ba4d0e59d69dd3f8e", 0xce}, {&(0x7f00000004c0)="daa3ed995b24524218eec9a9cee69951a1fc86a1734bd717a046ac1c5a23b5b3ef620d4d43b569886f40657b22d3a574b69176043ec872cd145e94f8ba7eab9e71da00d48646b3629d4a16e26ecfedef5b24364cdce5204f24f9c45ed40455c48d6a1f84fa3f6c27a145be1fbca1a2ed298087fb87d80841a8f5c134c083f3be9b15e9b0200cb492d2", 0x89}, {&(0x7f0000000580)="28cc45a48fc87618fb13c48535525435b8f3ec658ec7844829a6119e733ef78ca5f6a4fc8a3088b4b729eef4e73e0de67bc8d4b6d05b46a2818a93aaa5edbc31ba7383fec15fc2f5a4857609fd098af6e199f14976713f4440c6ad4592cc21514afe5fb0d0f4a02e94ece066d9e2dcbc258b4d56ad", 0x75}], 0x7, &(0x7f0000000880)=[{0x68, 0x8, 0x7, "077c8542ec25fcb8231d26fedba32a153ef7167bc61c98edcb8d6f4b486849300c6d1bd8c71c36bb3e3ca04cb3a1039400582c87a7b44f8d354e6d5d71f4669ec62d48047892ddc231e4071106af2bfd56721d"}, {0x80, 0x10d, 0x3, "a0705170b7774a2cc1e32056cd8f612e0261861549da1c64fb99c89f18f74f50fb6ec0de2df74d65883350508fc50f7ccbbbbcbdf33bc7b844ae5e8c81c80f9360af205db160323fdf4bffd13ac2c05abc2b535ae118b0fcbf92197e67bd755311613779692e43fa36a7"}, {0x40, 0x84, 0xfffffffa, "762334e0a2d93003981d2e6356ad57f9609e889da788a65766c17df1815e8557cc678525cb801ad4d51055d684fc"}, {0x78, 0x10b, 0x4, "63ecc113d562b1cd290506bc214c6d0841f787329c4af4c5ba4b800f2e01d950b109824f7ebabbb03d007631fa7549ec472a27568f9cf025aa6e9f967df85b1ce8beff6d7a0812120460a4be3ffa1c549aba0169bc78410cdca6b0a4d777ce7595fac2fb1675"}, {0x18, 0x115, 0x959b, "03350d5cfd3dbaae"}], 0x1b8}}], 0x1, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="840e9d3b23f56f58000dfa2247e22ebc654cef9189ce4845d4d2ab6f319d717f21958656e4f532fe1b43759025d9a924a7714f10f038e33260b17388a04cf0cf71aa245c05b4342cb87e971efc3635d8c7cced2b5d1ae83640c5e4576f17e79b86bec7ce1e9bca23e2474491183a6d1aa0d719d179fbb550ff049cd8de50078630d3cdde8ba32e9e057cd734ef7e3d256638798932fdb3b98effceab962dc32e2aed3b70f94c90c1cc6870c12d845a1aeaa7475583faab28db0315c1daa394ae7b9ced8b221a8b539a58935df49e02fc04bd5b52d65426854d", 0xd9}, {&(0x7f0000000180)="a34f9429c835ef84956668c030a71c88cb78ee9e333b6397101d523296e6ea213f568f673100cb608aa4ca580d0544d26dcdbbecf3436e2304ae3108e52b5619613feb7d3f3d1e114cbe6422dfed0e67088c148e1e3203c6", 0x58}, {&(0x7f0000000200)="ea07a124ce9dd7fa77f88bc72e5213788196f9baf6aa82ee686391b62f80e2b222afb17e7a656d481a22bbeed4ab4cc9c3bd6ddeb7dda13a14bd8fe912d0939fbc0d151b1aa88d9bad1bee9d4a20d819df6de47d0b53e957c161d608fcb671dab8570505c115819e18e49d0cacca109023d798020b989ea4d6d0ffbf9f78a28fe45428f875fbacdf5a89fc0a0fa18ef86378235c50fb77cd288c", 0x9a}, {&(0x7f00000002c0)="378eefbcd3dd31286815b85c7c98e6f2af6b61d52efd7323273596d618d6ff39759a2babced4f8e4b9d1401aeeae7dd66778fcb25ec8e4e197fb0dc612a2ddbd3b22b11c56d869e79812085156fb487a8c006b4936740d58a2a4dd93abbca0c832137beb92690734b3a3d8ba49ff3844bc6445baaa50c3a5337c0ebb68acca1b57955a5780db12f6150e5b727700ccda25f03ab230aad3c55d9329ad66124d77a3f4929e9568dc10554f215ca944e5cd080391ba0083a540f451b1421e6bfe8e83040b7990e06c1e5843b9c96c85320db0ea9d9237ee2301f84b5966e4d1c96ac7b346d1e9bbef72237f3a2b", 0xec}, {&(0x7f00000003c0)="de3a43c6712b99ba10af69c77f31a2ce830b56dff76814fc3aa102fdfefb590d1b8f662df439aa1120a6a53b1f94f52219ef6324efd5fca90950eb64c1c45346f885055bf8143e96256914ec2bc1350301d012a0d8b6738abe842ca98962002dffd8c7754c75e9365d869a0f0c0fb14d1fcfb385b9b6cbccb1a837cea5c99a41352f9bd3ac92aef1d3ada1420bf6ad9748620f97dca1947202fbc3e33fbb330d54bf22ee675dc5ad7fc4d0fb4fb5e523d08857f81fde87c33405491168eb84239a360716718ba4d0e59d69dd3f8e", 0xce}, {&(0x7f00000004c0)="daa3ed995b24524218eec9a9cee69951a1fc86a1734bd717a046ac1c5a23b5b3ef620d4d43b569886f40657b22d3a574b69176043ec872cd145e94f8ba7eab9e71da00d48646b3629d4a16e26ecfedef5b24364cdce5204f24f9c45ed40455c48d6a1f84fa3f6c27a145be1fbca1a2ed298087fb87d80841a8f5c134c083f3be9b15e9b0200cb492d2", 0x89}, {&(0x7f0000000580)="28cc45a48fc87618fb13c48535525435b8f3ec658ec7844829a6119e733ef78ca5f6a4fc8a3088b4b729eef4e73e0de67bc8d4b6d05b46a2818a93aaa5edbc31ba7383fec15fc2f5a4857609fd098af6e199f14976713f4440c6ad4592cc21514afe5fb0d0f4a02e94ece066d9e2dcbc258b4d56ad", 0x75}], 0x7, &(0x7f0000000880)=[{0x68, 0x8, 0x7, "077c8542ec25fcb8231d26fedba32a153ef7167bc61c98edcb8d6f4b486849300c6d1bd8c71c36bb3e3ca04cb3a1039400582c87a7b44f8d354e6d5d71f4669ec62d48047892ddc231e4071106af2bfd56721d"}, {0x80, 0x10d, 0x3, "a0705170b7774a2cc1e32056cd8f612e0261861549da1c64fb99c89f18f74f50fb6ec0de2df74d65883350508fc50f7ccbbbbcbdf33bc7b844ae5e8c81c80f9360af205db160323fdf4bffd13ac2c05abc2b535ae118b0fcbf92197e67bd755311613779692e43fa36a7"}, {0x40, 0x84, 0xfffffffa, "762334e0a2d93003981d2e6356ad57f9609e889da788a65766c17df1815e8557cc678525cb801ad4d51055d684fc"}, {0x78, 0x10b, 0x4, "63ecc113d562b1cd290506bc214c6d0841f787329c4af4c5ba4b800f2e01d950b109824f7ebabbb03d007631fa7549ec472a27568f9cf025aa6e9f967df85b1ce8beff6d7a0812120460a4be3ffa1c549aba0169bc78410cdca6b0a4d777ce7595fac2fb1675"}, {0x18, 0x115, 0x959b, "03350d5cfd3dbaae"}], 0x1b8}}], 0x1, 0x80) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) 15:12:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3117.581282][ T5313] usb 5-1: new low-speed USB device number 30 using dummy_hcd 15:12:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09040000010209000005240600014b0d8da5f2eba0b101147d3ca205240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000680)=""/72, 0x48}, {&(0x7f0000000880)=""/85, 0x55}], 0x4, &(0x7f0000000900)=""/32, 0x20}, 0x6}, {{&(0x7f0000000940)=@nfc, 0x80, &(0x7f0000000e80)=[{&(0x7f00000009c0)=""/180, 0xb4}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000001b00)=""/211, 0xd3}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/182, 0xb6}], 0x6, &(0x7f0000000f00)=""/148, 0x94}, 0x400}, {{&(0x7f0000000fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001380)=""/136, 0x88}, 0x8}, {{&(0x7f0000001440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)=""/55, 0x37}, {&(0x7f0000001500)=""/242, 0xf2}, {&(0x7f0000001600)=""/60, 0x3c}, {&(0x7f0000001680)=""/23, 0x17}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/2, 0x2}, {&(0x7f0000001780)=""/104, 0x68}], 0x7, &(0x7f0000001880)=""/211, 0xd3}, 0x8}], 0x4, 0x40000020, &(0x7f0000001a80)={0x77359400}) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001ac0)={0x3, 0x9, 0xffff98d4, 0x0, 0xd2b0}) [ 3117.684213][ T4084] UDC core: couldn't find an available UDC or it's busy: -16 [ 3117.692959][ T4058] UDC core: couldn't find an available UDC or it's busy: -16 [ 3117.700770][ T4058] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3117.712215][ T4090] UDC core: couldn't find an available UDC or it's busy: -16 [ 3117.773930][ T4090] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3117.782394][ T4084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3117.819005][ T4084] UDC core: couldn't find an available UDC or it's busy: -16 [ 3117.842670][ T4084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3117.917443][ T4096] UDC core: couldn't find an available UDC or it's busy: -16 [ 3117.929746][ T4096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3117.951379][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3117.973114][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3117.996137][ T5313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3118.020401][ T5313] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3118.031755][T13827] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 3118.052129][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3118.068372][ T4084] UDC core: couldn't find an available UDC or it's busy: -16 [ 3118.114123][ T4008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3118.122384][ T4084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3118.153459][ T5313] hub 5-1:1.0: bad descriptor, ignoring hub [ 3118.159807][ T5313] hub: probe of 5-1:1.0 failed with error -5 [ 3118.181185][ T5313] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3118.188580][ T4096] UDC core: couldn't find an available UDC or it's busy: -16 [ 3118.197024][ T4096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3118.202619][ T5313] cdc_wdm 5-1:1.0: Unknown control protocol [ 3118.401315][T13827] usb 3-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 3118.427730][T13827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3118.444167][T13827] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3118.458188][T13827] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3118.467995][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3118.532653][T13827] hub 3-1:1.0: bad descriptor, ignoring hub [ 3118.538960][T13827] hub: probe of 3-1:1.0 failed with error -5 [ 3118.561513][T13827] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 3118.671585][T17853] usb 5-1: USB disconnect, device number 30 [ 3118.881486][T13827] usb 3-1: USB disconnect, device number 100 15:12:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="840e9d3b23f56f58000dfa2247e22ebc654cef9189ce4845d4d2ab6f319d717f21958656e4f532fe1b43759025d9a924a7714f10f038e33260b17388a04cf0cf71aa245c05b4342cb87e971efc3635d8c7cced2b5d1ae83640c5e4576f17e79b86bec7ce1e9bca23e2474491183a6d1aa0d719d179fbb550ff049cd8de50078630d3cdde8ba32e9e057cd734ef7e3d256638798932fdb3b98effceab962dc32e2aed3b70f94c90c1cc6870c12d845a1aeaa7475583faab28db0315c1daa394ae7b9ced8b221a8b539a58935df49e02fc04bd5b52d65426854d", 0xd9}, {&(0x7f0000000180)="a34f9429c835ef84956668c030a71c88cb78ee9e333b6397101d523296e6ea213f568f673100cb608aa4ca580d0544d26dcdbbecf3436e2304ae3108e52b5619613feb7d3f3d1e114cbe6422dfed0e67088c148e1e3203c6", 0x58}, {&(0x7f0000000200)="ea07a124ce9dd7fa77f88bc72e5213788196f9baf6aa82ee686391b62f80e2b222afb17e7a656d481a22bbeed4ab4cc9c3bd6ddeb7dda13a14bd8fe912d0939fbc0d151b1aa88d9bad1bee9d4a20d819df6de47d0b53e957c161d608fcb671dab8570505c115819e18e49d0cacca109023d798020b989ea4d6d0ffbf9f78a28fe45428f875fbacdf5a89fc0a0fa18ef86378235c50fb77cd288c", 0x9a}, {&(0x7f00000002c0)="378eefbcd3dd31286815b85c7c98e6f2af6b61d52efd7323273596d618d6ff39759a2babced4f8e4b9d1401aeeae7dd66778fcb25ec8e4e197fb0dc612a2ddbd3b22b11c56d869e79812085156fb487a8c006b4936740d58a2a4dd93abbca0c832137beb92690734b3a3d8ba49ff3844bc6445baaa50c3a5337c0ebb68acca1b57955a5780db12f6150e5b727700ccda25f03ab230aad3c55d9329ad66124d77a3f4929e9568dc10554f215ca944e5cd080391ba0083a540f451b1421e6bfe8e83040b7990e06c1e5843b9c96c85320db0ea9d9237ee2301f84b5966e4d1c96ac7b346d1e9bbef72237f3a2b", 0xec}, {&(0x7f00000003c0)="de3a43c6712b99ba10af69c77f31a2ce830b56dff76814fc3aa102fdfefb590d1b8f662df439aa1120a6a53b1f94f52219ef6324efd5fca90950eb64c1c45346f885055bf8143e96256914ec2bc1350301d012a0d8b6738abe842ca98962002dffd8c7754c75e9365d869a0f0c0fb14d1fcfb385b9b6cbccb1a837cea5c99a41352f9bd3ac92aef1d3ada1420bf6ad9748620f97dca1947202fbc3e33fbb330d54bf22ee675dc5ad7fc4d0fb4fb5e523d08857f81fde87c33405491168eb84239a360716718ba4d0e59d69dd3f8e", 0xce}, {&(0x7f00000004c0)="daa3ed995b24524218eec9a9cee69951a1fc86a1734bd717a046ac1c5a23b5b3ef620d4d43b569886f40657b22d3a574b69176043ec872cd145e94f8ba7eab9e71da00d48646b3629d4a16e26ecfedef5b24364cdce5204f24f9c45ed40455c48d6a1f84fa3f6c27a145be1fbca1a2ed298087fb87d80841a8f5c134c083f3be9b15e9b0200cb492d2", 0x89}, {&(0x7f0000000580)="28cc45a48fc87618fb13c48535525435b8f3ec658ec7844829a6119e733ef78ca5f6a4fc8a3088b4b729eef4e73e0de67bc8d4b6d05b46a2818a93aaa5edbc31ba7383fec15fc2f5a4857609fd098af6e199f14976713f4440c6ad4592cc21514afe5fb0d0f4a02e94ece066d9e2dcbc258b4d56ad", 0x75}], 0x7, &(0x7f0000000880)=[{0x68, 0x8, 0x7, "077c8542ec25fcb8231d26fedba32a153ef7167bc61c98edcb8d6f4b486849300c6d1bd8c71c36bb3e3ca04cb3a1039400582c87a7b44f8d354e6d5d71f4669ec62d48047892ddc231e4071106af2bfd56721d"}, {0x80, 0x10d, 0x3, "a0705170b7774a2cc1e32056cd8f612e0261861549da1c64fb99c89f18f74f50fb6ec0de2df74d65883350508fc50f7ccbbbbcbdf33bc7b844ae5e8c81c80f9360af205db160323fdf4bffd13ac2c05abc2b535ae118b0fcbf92197e67bd755311613779692e43fa36a7"}, {0x40, 0x84, 0xfffffffa, "762334e0a2d93003981d2e6356ad57f9609e889da788a65766c17df1815e8557cc678525cb801ad4d51055d684fc"}, {0x78, 0x10b, 0x4, "63ecc113d562b1cd290506bc214c6d0841f787329c4af4c5ba4b800f2e01d950b109824f7ebabbb03d007631fa7549ec472a27568f9cf025aa6e9f967df85b1ce8beff6d7a0812120460a4be3ffa1c549aba0169bc78410cdca6b0a4d777ce7595fac2fb1675"}, {0x18, 0x115, 0x959b, "03350d5cfd3dbaae"}], 0x1b8}}], 0x1, 0x80) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="0f01c8640f07ea5f1700007c000f00d966b843008ed00f20e035200000000f22e064260f01c366baf80cb8847cf789ef66bafc0ced660fc7b2940e000066ba4000b000ee", 0x44}], 0x1, 0xc, &(0x7f0000000180)=[@cr4, @efer], 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="840e9d3b23f56f58000dfa2247e22ebc654cef9189ce4845d4d2ab6f319d717f21958656e4f532fe1b43759025d9a924a7714f10f038e33260b17388a04cf0cf71aa245c05b4342cb87e971efc3635d8c7cced2b5d1ae83640c5e4576f17e79b86bec7ce1e9bca23e2474491183a6d1aa0d719d179fbb550ff049cd8de50078630d3cdde8ba32e9e057cd734ef7e3d256638798932fdb3b98effceab962dc32e2aed3b70f94c90c1cc6870c12d845a1aeaa7475583faab28db0315c1daa394ae7b9ced8b221a8b539a58935df49e02fc04bd5b52d65426854d", 0xd9}, {&(0x7f0000000180)="a34f9429c835ef84956668c030a71c88cb78ee9e333b6397101d523296e6ea213f568f673100cb608aa4ca580d0544d26dcdbbecf3436e2304ae3108e52b5619613feb7d3f3d1e114cbe6422dfed0e67088c148e1e3203c6", 0x58}, {&(0x7f0000000200)="ea07a124ce9dd7fa77f88bc72e5213788196f9baf6aa82ee686391b62f80e2b222afb17e7a656d481a22bbeed4ab4cc9c3bd6ddeb7dda13a14bd8fe912d0939fbc0d151b1aa88d9bad1bee9d4a20d819df6de47d0b53e957c161d608fcb671dab8570505c115819e18e49d0cacca109023d798020b989ea4d6d0ffbf9f78a28fe45428f875fbacdf5a89fc0a0fa18ef86378235c50fb77cd288c", 0x9a}, {&(0x7f00000002c0)="378eefbcd3dd31286815b85c7c98e6f2af6b61d52efd7323273596d618d6ff39759a2babced4f8e4b9d1401aeeae7dd66778fcb25ec8e4e197fb0dc612a2ddbd3b22b11c56d869e79812085156fb487a8c006b4936740d58a2a4dd93abbca0c832137beb92690734b3a3d8ba49ff3844bc6445baaa50c3a5337c0ebb68acca1b57955a5780db12f6150e5b727700ccda25f03ab230aad3c55d9329ad66124d77a3f4929e9568dc10554f215ca944e5cd080391ba0083a540f451b1421e6bfe8e83040b7990e06c1e5843b9c96c85320db0ea9d9237ee2301f84b5966e4d1c96ac7b346d1e9bbef72237f3a2b", 0xec}, {&(0x7f00000003c0)="de3a43c6712b99ba10af69c77f31a2ce830b56dff76814fc3aa102fdfefb590d1b8f662df439aa1120a6a53b1f94f52219ef6324efd5fca90950eb64c1c45346f885055bf8143e96256914ec2bc1350301d012a0d8b6738abe842ca98962002dffd8c7754c75e9365d869a0f0c0fb14d1fcfb385b9b6cbccb1a837cea5c99a41352f9bd3ac92aef1d3ada1420bf6ad9748620f97dca1947202fbc3e33fbb330d54bf22ee675dc5ad7fc4d0fb4fb5e523d08857f81fde87c33405491168eb84239a360716718ba4d0e59d69dd3f8e", 0xce}, {&(0x7f00000004c0)="daa3ed995b24524218eec9a9cee69951a1fc86a1734bd717a046ac1c5a23b5b3ef620d4d43b569886f40657b22d3a574b69176043ec872cd145e94f8ba7eab9e71da00d48646b3629d4a16e26ecfedef5b24364cdce5204f24f9c45ed40455c48d6a1f84fa3f6c27a145be1fbca1a2ed298087fb87d80841a8f5c134c083f3be9b15e9b0200cb492d2", 0x89}, {&(0x7f0000000580)="28cc45a48fc87618fb13c48535525435b8f3ec658ec7844829a6119e733ef78ca5f6a4fc8a3088b4b729eef4e73e0de67bc8d4b6d05b46a2818a93aaa5edbc31ba7383fec15fc2f5a4857609fd098af6e199f14976713f4440c6ad4592cc21514afe5fb0d0f4a02e94ece066d9e2dcbc258b4d56ad", 0x75}], 0x7, &(0x7f0000000880)=[{0x68, 0x8, 0x7, "077c8542ec25fcb8231d26fedba32a153ef7167bc61c98edcb8d6f4b486849300c6d1bd8c71c36bb3e3ca04cb3a1039400582c87a7b44f8d354e6d5d71f4669ec62d48047892ddc231e4071106af2bfd56721d"}, {0x80, 0x10d, 0x3, "a0705170b7774a2cc1e32056cd8f612e0261861549da1c64fb99c89f18f74f50fb6ec0de2df74d65883350508fc50f7ccbbbbcbdf33bc7b844ae5e8c81c80f9360af205db160323fdf4bffd13ac2c05abc2b535ae118b0fcbf92197e67bd755311613779692e43fa36a7"}, {0x40, 0x84, 0xfffffffa, "762334e0a2d93003981d2e6356ad57f9609e889da788a65766c17df1815e8557cc678525cb801ad4d51055d684fc"}, {0x78, 0x10b, 0x4, "63ecc113d562b1cd290506bc214c6d0841f787329c4af4c5ba4b800f2e01d950b109824f7ebabbb03d007631fa7549ec472a27568f9cf025aa6e9f967df85b1ce8beff6d7a0812120460a4be3ffa1c549aba0169bc78410cdca6b0a4d777ce7595fac2fb1675"}, {0x18, 0x115, 0x959b, "03350d5cfd3dbaae"}], 0x1b8}}], 0x1, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3119.181981][ T4124] UDC core: couldn't find an available UDC or it's busy: -16 [ 3119.194284][ T4125] UDC core: couldn't find an available UDC or it's busy: -16 [ 3119.203517][ T4124] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3119.231103][T23633] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 3119.231717][ T4118] UDC core: couldn't find an available UDC or it's busy: -16 [ 3119.282393][ T4113] UDC core: couldn't find an available UDC or it's busy: -16 [ 3119.290980][ T4113] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3119.305497][ T4125] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3119.341001][ T4118] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006b9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3119.506589][ T4113] UDC core: couldn't find an available UDC or it's busy: -16 [ 3119.541056][ T4113] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3119.551265][ T5313] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 3119.584118][ T4118] UDC core: couldn't find an available UDC or it's busy: -16 [ 3119.621233][ T4118] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3119.622319][ T4136] UDC core: couldn't find an available UDC or it's busy: -16 [ 3119.652999][T23633] usb 3-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 3119.661386][ T4136] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3119.670645][T23633] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3119.681085][T23633] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3119.722177][T23633] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 15:12:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3119.741250][T23633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3119.852883][T23633] hub 3-1:1.0: bad descriptor, ignoring hub [ 3119.875003][T23633] hub: probe of 3-1:1.0 failed with error -5 [ 3119.884322][T23633] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 3119.921465][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3119.940139][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3119.951004][ T5313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3119.962249][ T5313] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3119.972724][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.002218][ T4128] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3120.022332][ T5313] hub 5-1:1.0: bad descriptor, ignoring hub [ 3120.028666][ T5313] hub: probe of 5-1:1.0 failed with error -5 [ 3120.077063][ T5313] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3120.083958][ T5313] cdc_wdm 5-1:1.0: Unknown control protocol 15:12:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r4, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/89, 0x59) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3120.182816][T23633] usb 3-1: USB disconnect, device number 101 [ 3120.292555][ T4153] UDC core: couldn't find an available UDC or it's busy: -16 [ 3120.300402][ T4153] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="0f01c8640f07ea5f1700007c000f00d966b843008ed00f20e035200000000f22e064260f01c366baf80cb8847cf789ef66bafc0ced660fc7b2940e000066ba4000b000ee", 0x44}], 0x1, 0xc, &(0x7f0000000180)=[@cr4, @efer], 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00006b9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (rerun: 32) [ 3120.617906][ T4150] UDC core: couldn't find an available UDC or it's busy: -16 15:12:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09040000010209000005240600014b0d8da5f2eba0b101147d3ca205240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3120.671462][ T4150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3120.701447][T17853] usb 5-1: USB disconnect, device number 31 [ 3120.711057][ T5617] usb 5-1: Failed to suspend device, error -71 [ 3120.842022][ T4174] UDC core: couldn't find an available UDC or it's busy: -16 [ 3120.850105][ T4174] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) (async) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000680)=""/72, 0x48}, {&(0x7f0000000880)=""/85, 0x55}], 0x4, &(0x7f0000000900)=""/32, 0x20}, 0x6}, {{&(0x7f0000000940)=@nfc, 0x80, &(0x7f0000000e80)=[{&(0x7f00000009c0)=""/180, 0xb4}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000001b00)=""/211, 0xd3}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/182, 0xb6}], 0x6, &(0x7f0000000f00)=""/148, 0x94}, 0x400}, {{&(0x7f0000000fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001380)=""/136, 0x88}, 0x8}, {{&(0x7f0000001440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)=""/55, 0x37}, {&(0x7f0000001500)=""/242, 0xf2}, {&(0x7f0000001600)=""/60, 0x3c}, {&(0x7f0000001680)=""/23, 0x17}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/2, 0x2}, {&(0x7f0000001780)=""/104, 0x68}], 0x7, &(0x7f0000001880)=""/211, 0xd3}, 0x8}], 0x4, 0x40000020, &(0x7f0000001a80)={0x77359400}) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (rerun: 64) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001ac0)={0x3, 0x9, 0xffff98d4, 0x0, 0xd2b0}) 15:12:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="0f01c8640f07ea5f1700007c000f00d966b843008ed00f20e035200000000f22e064260f01c366baf80cb8847cf789ef66bafc0ced660fc7b2940e000066ba4000b000ee", 0x44}], 0x1, 0xc, &(0x7f0000000180)=[@cr4, @efer], 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09040000010209000005240600014b0d8da5f2eba0b101147d3ca205240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09040000010209000005240600014b0d8da5f2eba0b101147d3ca205240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3121.076324][ T4178] UDC core: couldn't find an available UDC or it's busy: -16 [ 3121.123316][ T4178] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09040000010209000005240600014b0d8da5f2eba0b101147d3ca205240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 64) readahead(r4, 0x0, 0x0) (async, rerun: 32) read$char_usb(r4, &(0x7f0000000000)=""/89, 0x59) (async, rerun: 32) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) (async) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000680)=""/72, 0x48}, {&(0x7f0000000880)=""/85, 0x55}], 0x4, &(0x7f0000000900)=""/32, 0x20}, 0x6}, {{&(0x7f0000000940)=@nfc, 0x80, &(0x7f0000000e80)=[{&(0x7f00000009c0)=""/180, 0xb4}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000b80)=""/161, 0xa1}, {&(0x7f0000001b00)=""/211, 0xd3}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)=""/182, 0xb6}], 0x6, &(0x7f0000000f00)=""/148, 0x94}, 0x400}, {{&(0x7f0000000fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001380)=""/136, 0x88}, 0x8}, {{&(0x7f0000001440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001800)=[{&(0x7f00000014c0)=""/55, 0x37}, {&(0x7f0000001500)=""/242, 0xf2}, {&(0x7f0000001600)=""/60, 0x3c}, {&(0x7f0000001680)=""/23, 0x17}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/2, 0x2}, {&(0x7f0000001780)=""/104, 0x68}], 0x7, &(0x7f0000001880)=""/211, 0xd3}, 0x8}], 0x4, 0x40000020, &(0x7f0000001a80)={0x77359400}) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001ac0)={0x3, 0x9, 0xffff98d4, 0x0, 0xd2b0}) 15:12:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "5fd06ca8", {0x3, 0x102, 0x0, 0x5, 0x8, 0x9c, 0x80}}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3121.681017][T27183] usb 3-1: new low-speed USB device number 102 using dummy_hcd 15:12:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r4, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/89, 0x59) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3121.787770][ T4215] UDC core: couldn't find an available UDC or it's busy: -16 [ 3121.791001][T17882] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 3121.831228][ T4215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="36660f383b06d1002e3e64640f0966b90a0a000066b80000000066ba008000000f309a4abca7000f0172d010f066b9800000c00f326635004000000f30b8bb000f00d8f30f09b82e008ec0", 0x4b}], 0x1, 0x20, &(0x7f0000000140)=[@efer={0x2, 0x2000}, @cstype0={0x4, 0x1}], 0x2) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x25, 0x55, {0x55, 0x6, "57b9da3ed48cc1bdada7e84e18d9a104556307dda79887c33cbbbd4e4a3bcabcc8b3a0960157a28f4eeca64bf6cf245de77d8923db80459e03f22df1c8c0df81577cc3ba72f6b900962657b3059afa4cde0ec4"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x0, 0xa, 0x13, "eff563f88ea2115e8895bd5dfc75fb96476f4f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x5, 0x6, 0x7287, 0x4000, 0x1ff, 0x0, 0x51f, 0x4, 0x80, 0x40, 0x0, 0xff}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:47 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3122.091748][T27183] usb 3-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 3122.101778][ T4215] UDC core: couldn't find an available UDC or it's busy: -16 [ 3122.111211][ T4215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.140179][ T4238] UDC core: couldn't find an available UDC or it's busy: -16 [ 3122.168544][ T4215] UDC core: couldn't find an available UDC or it's busy: -16 15:12:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) (async, rerun: 64) syz_io_uring_setup(0x0, 0x0, &(0x7f00006b9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3122.188302][T27183] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3122.199085][T17882] usb 5-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 3122.217658][ T4238] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.232325][T17882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3122.250989][ T4215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.259249][T27183] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3122.284799][T17882] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3122.326984][T27183] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3122.339401][T17882] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3122.349823][T27183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.359173][T17882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3122.434687][T27183] hub 3-1:1.0: bad descriptor, ignoring hub [ 3122.444522][T17882] hub 5-1:1.0: bad descriptor, ignoring hub [ 3122.456796][ T4243] UDC core: couldn't find an available UDC or it's busy: -16 [ 3122.472002][T27183] hub: probe of 3-1:1.0 failed with error -5 [ 3122.485987][T17882] hub: probe of 5-1:1.0 failed with error -5 [ 3122.496872][T27183] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 3122.507579][ T4243] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.517244][ T4247] UDC core: couldn't find an available UDC or it's busy: -16 [ 3122.526114][T17882] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 3122.573174][ T4247] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.671954][ T4233] UDC core: couldn't find an available UDC or it's busy: -16 [ 3122.679817][ T4233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.771676][ T5313] usb 3-1: USB disconnect, device number 102 [ 3122.784786][ T4240] UDC core: couldn't find an available UDC or it's busy: -16 [ 3122.796531][ T4240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3122.845301][T17853] usb 5-1: USB disconnect, device number 32 15:12:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "5fd06ca8", {0x3, 0x102, 0x0, 0x5, 0x8, 0x9c, 0x80}}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "5fd06ca8", {0x3, 0x102, 0x0, 0x5, 0x8, 0x9c, 0x80}}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3123.111160][ T5313] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 3123.191247][T17882] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 3123.207646][ T4252] UDC core: couldn't find an available UDC or it's busy: -16 [ 3123.231533][ T4252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:49 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) pipe(&(0x7f00000004c0)) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = memfd_secret(0x80000) syz_io_uring_setup(0x43f8, &(0x7f0000000000)={0x0, 0xebec, 0x10, 0x0, 0x8b, 0x0, r1}, &(0x7f0000dc1000/0x4000)=nil, &(0x7f0000cb4000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3123.470194][ T4252] UDC core: couldn't find an available UDC or it's busy: -16 [ 3123.480938][ T5313] usb 3-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 3123.519134][ T4252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3123.531184][ T5313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3123.560259][ T4252] UDC core: couldn't find an available UDC or it's busy: -16 [ 3123.561350][ T4256] UDC core: couldn't find an available UDC or it's busy: -16 [ 3123.574111][ T5313] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3123.576808][T17882] usb 5-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 3123.601000][ T4256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3123.601120][T17882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3123.619181][T17882] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3123.629408][ T4252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3123.633689][T17882] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3123.650041][T17882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3123.691403][ T5313] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3123.712813][T17882] hub 5-1:1.0: bad descriptor, ignoring hub [ 3123.719472][T17882] hub: probe of 5-1:1.0 failed with error -5 [ 3123.726567][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3123.729591][T17882] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 3123.774071][ T4262] UDC core: couldn't find an available UDC or it's busy: -16 [ 3123.812315][ T4262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3123.822796][ T5313] hub 3-1:1.0: bad descriptor, ignoring hub [ 3123.829142][ T5313] hub: probe of 3-1:1.0 failed with error -5 [ 3123.846375][ T5313] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 3123.854184][ T4256] UDC core: couldn't find an available UDC or it's busy: -16 [ 3123.869188][ T4256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@xdp={0x2c, 0x2, 0x0, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="f04aa312b77388abc1c3e1ed3d80976d84b4f3862877a91804de5837866f2cc82f7be2086e3827166a7379ff6f7ea417b658015df2f0d566011a45c82f29decb79f4abf7cfa974913056054663ecaf67834743e2d1296edc6776bb8ca1040ee4c3d1cadbbd6b3652049a2c3b5d2a82a5", 0x70}], 0x1, &(0x7f0000000200)=[{0x58, 0x10c, 0x2, "ba9884eb1b0a785beb3df036dde8b12db344101fed2224af9e43508d288bab69575c62a7584d905bf3746dfa0d68810e88ef247b20f417beb60f135aa77c06d4f6"}, {0x88, 0x1, 0x3, "75903a0321cafa6eaa23e84b05397ec743ce2a91326d187c87fdaa7db58e37e0f548ffbfb4bd3bf522f7075f3a8a54070cb23c5db54938a5fcdf1a4452cb3e50b76e37f1d2ee6df2ae9846335ed362fde254fb81eca217cdd9b6dcab1c90a2b2cc8bef180403ee42c0b3a6f8b77f14edf63fcc402e"}, {0x18, 0x0, 0x1, "41e1a2c5"}, {0x60, 0x11, 0x19d, "b96100f2ead4b44bf94e2685f26f72f8cab00e3cbc86a3d6073e9a1ca22cb46a63d3058a25b28c2b4ca9b2e0031bf3e3da6a05dff2a340e2bc71f93363cabe45e89e8ecf4351e96bf94d2d036deeb7"}], 0x158}, 0x0, 0x40}, 0x3) [ 3124.161940][ T5313] usb 5-1: USB disconnect, device number 33 15:12:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 64) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 32) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "5fd06ca8", {0x3, 0x102, 0x0, 0x5, 0x8, 0x9c, 0x80}}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="36660f383b06d1002e3e64640f0966b90a0a000066b80000000066ba008000000f309a4abca7000f0172d010f066b9800000c00f326635004000000f30b8bb000f00d8f30f09b82e008ec0", 0x4b}], 0x1, 0x20, &(0x7f0000000140)=[@efer={0x2, 0x2000}, @cstype0={0x4, 0x1}], 0x2) (async) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x25, 0x55, {0x55, 0x6, "57b9da3ed48cc1bdada7e84e18d9a104556307dda79887c33cbbbd4e4a3bcabcc8b3a0960157a28f4eeca64bf6cf245de77d8923db80459e03f22df1c8c0df81577cc3ba72f6b900962657b3059afa4cde0ec4"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x0, 0xa, 0x13, "eff563f88ea2115e8895bd5dfc75fb96476f4f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x5, 0x6, 0x7287, 0x4000, 0x1ff, 0x0, 0x51f, 0x4, 0x80, 0x40, 0x0, 0xff}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:50 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) r1 = memfd_secret(0x80000) syz_io_uring_setup(0x43f8, &(0x7f0000000000)={0x0, 0xebec, 0x10, 0x0, 0x8b, 0x0, r1}, &(0x7f0000dc1000/0x4000)=nil, &(0x7f0000cb4000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="36660f383b06d1002e3e64640f0966b90a0a000066b80000000066ba008000000f309a4abca7000f0172d010f066b9800000c00f326635004000000f30b8bb000f00d8f30f09b82e008ec0", 0x4b}], 0x1, 0x20, &(0x7f0000000140)=[@efer={0x2, 0x2000}, @cstype0={0x4, 0x1}], 0x2) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x25, 0x55, {0x55, 0x6, "57b9da3ed48cc1bdada7e84e18d9a104556307dda79887c33cbbbd4e4a3bcabcc8b3a0960157a28f4eeca64bf6cf245de77d8923db80459e03f22df1c8c0df81577cc3ba72f6b900962657b3059afa4cde0ec4"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x0, 0xa, 0x13, "eff563f88ea2115e8895bd5dfc75fb96476f4f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x5, 0x6, 0x7287, 0x4000, 0x1ff, 0x0, 0x51f, 0x4, 0x80, 0x40, 0x0, 0xff}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3124.655951][ T5313] usb 3-1: reset low-speed USB device number 103 using dummy_hcd [ 3124.670085][ T4303] UDC core: couldn't find an available UDC or it's busy: -16 [ 3124.773307][ T4303] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3124.822598][ T4324] UDC core: couldn't find an available UDC or it's busy: -16 [ 3124.871121][ T4324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12014dc463e33243852a0016001800f92a3b0400000169a50006000000000000000800000000000006241a208478197a81164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x968, &(0x7f00000000c0)={0x0, 0xf146, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:50 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x7}}, @addba_req}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3125.051133][T13827] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 3125.069669][ T4336] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.086861][ T4337] UDC core: couldn't find an available UDC or it's busy: -16 15:12:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) socket$caif_seqpacket(0x25, 0x5, 0x0) (rerun: 64) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = memfd_secret(0x80000) syz_io_uring_setup(0x43f8, &(0x7f0000000000)={0x0, 0xebec, 0x10, 0x0, 0x8b, 0x0, r1}, &(0x7f0000dc1000/0x4000)=nil, &(0x7f0000cb4000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3125.111528][ T4336] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.131662][ T4337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.142363][ T4288] raw-gadget gadget: fail, usb_ep_enable returned -22 15:12:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="36660f383b06d1002e3e64640f0966b90a0a000066b80000000066ba008000000f309a4abca7000f0172d010f066b9800000c00f326635004000000f30b8bb000f00d8f30f09b82e008ec0", 0x4b}], 0x1, 0x20, &(0x7f0000000140)=[@efer={0x2, 0x2000}, @cstype0={0x4, 0x1}], 0x2) (async) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x0, 0x25, 0x55, {0x55, 0x6, "57b9da3ed48cc1bdada7e84e18d9a104556307dda79887c33cbbbd4e4a3bcabcc8b3a0960157a28f4eeca64bf6cf245de77d8923db80459e03f22df1c8c0df81577cc3ba72f6b900962657b3059afa4cde0ec4"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x0, 0xa, 0x13, "eff563f88ea2115e8895bd5dfc75fb96476f4f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8a}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x5, 0x6, 0x7287, 0x4000, 0x1ff, 0x0, 0x51f, 0x4, 0x80, 0x40, 0x0, 0xff}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r5) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3125.202880][ T4343] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.210728][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.346188][ T4343] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.358532][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.402542][ T4351] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.410377][ T4351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.415190][ T4332] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.419043][T13827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3125.433084][ T4343] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.441195][ T4332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.464481][ T4331] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.466573][T13827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3125.496892][ T4331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.508617][ T3675] usb 3-1: USB disconnect, device number 103 [ 3125.511194][T13827] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3125.521494][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.549994][T13827] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3125.560480][ T4343] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.571826][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.577972][T13827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.581599][ T4343] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.612476][ T4351] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.620364][ T4351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.657878][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.661401][ T4322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3125.679851][ T4343] UDC core: couldn't find an available UDC or it's busy: -16 [ 3125.693610][T13827] hub 5-1:1.0: bad descriptor, ignoring hub [ 3125.701181][T13827] hub: probe of 5-1:1.0 failed with error -5 [ 3125.732663][T13827] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3125.737154][ T4343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3125.739175][T13827] cdc_wdm 5-1:1.0: Unknown control protocol 15:12:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000667000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f0965f2f2660f0d110fc7ad3b008fc9f0011a0f2222ba4100ed66b9820200000f326766c7442400f60000006766c7442402877800006766c744240600000000670f011424f30f1efb660f38345d00", 0x4f}], 0x1, 0x20, &(0x7f0000000140)=[@dstype0={0x6, 0xe}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5593, &(0x7f00000000c0)={0x0, 0xb77b, 0x0, 0xffffffff}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3125.891075][ T3675] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 3126.110217][ T4357] UDC core: couldn't find an available UDC or it's busy: -16 [ 3126.121494][ T4357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:52 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x7}}, @addba_req}}]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3126.311489][ T3675] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3126.341673][ T3675] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3126.370774][ T3675] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3126.395221][ T4363] UDC core: couldn't find an available UDC or it's busy: -16 [ 3126.403974][ T3675] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3126.414002][ T4363] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3126.439485][ T3675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3126.512581][ T4288] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3126.532502][ T3675] hub 3-1:1.0: bad descriptor, ignoring hub [ 3126.539021][ T3675] hub: probe of 3-1:1.0 failed with error -5 [ 3126.603149][ T3675] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3126.612037][ T3675] cdc_wdm 3-1:1.0: Unknown control protocol [ 3126.651321][ T4306] UDC core: couldn't find an available UDC or it's busy: -16 [ 3126.659582][ T4306] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3126.965673][T13827] usb 3-1: USB disconnect, device number 104 15:12:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 64) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@xdp={0x2c, 0x2, 0x0, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="f04aa312b77388abc1c3e1ed3d80976d84b4f3862877a91804de5837866f2cc82f7be2086e3827166a7379ff6f7ea417b658015df2f0d566011a45c82f29decb79f4abf7cfa974913056054663ecaf67834743e2d1296edc6776bb8ca1040ee4c3d1cadbbd6b3652049a2c3b5d2a82a5", 0x70}], 0x1, &(0x7f0000000200)=[{0x58, 0x10c, 0x2, "ba9884eb1b0a785beb3df036dde8b12db344101fed2224af9e43508d288bab69575c62a7584d905bf3746dfa0d68810e88ef247b20f417beb60f135aa77c06d4f6"}, {0x88, 0x1, 0x3, "75903a0321cafa6eaa23e84b05397ec743ce2a91326d187c87fdaa7db58e37e0f548ffbfb4bd3bf522f7075f3a8a54070cb23c5db54938a5fcdf1a4452cb3e50b76e37f1d2ee6df2ae9846335ed362fde254fb81eca217cdd9b6dcab1c90a2b2cc8bef180403ee42c0b3a6f8b77f14edf63fcc402e"}, {0x18, 0x0, 0x1, "41e1a2c5"}, {0x60, 0x11, 0x19d, "b96100f2ead4b44bf94e2685f26f72f8cab00e3cbc86a3d6073e9a1ca22cb46a63d3058a25b28c2b4ca9b2e0031bf3e3da6a05dff2a340e2bc71f93363cabe45e89e8ecf4351e96bf94d2d036deeb7"}], 0x158}, 0x0, 0x40}, 0x3) 15:12:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12014dc463e33243852a0016001800f92a3b0400000169a50006000000000000000800000000000006241a208478197a81164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x968, &(0x7f00000000c0)={0x0, 0xf146, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12014dc463e33243852a0016001800f92a3b0400000169a50006000000000000000800000000000006241a208478197a81164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x968, &(0x7f00000000c0)={0x0, 0xf146, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:53 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x7}}, @addba_req}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x7}}, @addba_req}}]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0xffffffffffffffd1}, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x38, 0x26, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xfff2}, {0xa, 0x10}, {0x5, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000001) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000667000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f0965f2f2660f0d110fc7ad3b008fc9f0011a0f2222ba4100ed66b9820200000f326766c7442400f60000006766c7442402877800006766c744240600000000670f011424f30f1efb660f38345d00", 0x4f}], 0x1, 0x20, &(0x7f0000000140)=[@dstype0={0x6, 0xe}], 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r6 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x5593, &(0x7f00000000c0)={0x0, 0xb77b, 0x0, 0xffffffff}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r6) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3127.482786][ T4375] UDC core: couldn't find an available UDC or it's busy: -16 [ 3127.501275][ T4375] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3127.503512][ T4380] UDC core: couldn't find an available UDC or it's busy: -16 [ 3127.517833][ T4380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3127.522555][ T4387] UDC core: couldn't find an available UDC or it's busy: -16 [ 3127.609234][ T4387] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3127.696249][ T4387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3127.787461][ T4380] UDC core: couldn't find an available UDC or it's busy: -16 [ 3127.795868][ T4380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3127.810643][ T4401] UDC core: couldn't find an available UDC or it's busy: -16 [ 3127.823292][ T4401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.013147][ T4375] cdc_wdm 5-1:1.0: Error autopm - -16 [ 3132.018975][ T4377] cdc_wdm 5-1:1.0: Error autopm - -16 [ 3132.032750][ T5313] usb 5-1: USB disconnect, device number 34 15:12:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@xdp={0x2c, 0x2, 0x0, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="f04aa312b77388abc1c3e1ed3d80976d84b4f3862877a91804de5837866f2cc82f7be2086e3827166a7379ff6f7ea417b658015df2f0d566011a45c82f29decb79f4abf7cfa974913056054663ecaf67834743e2d1296edc6776bb8ca1040ee4c3d1cadbbd6b3652049a2c3b5d2a82a5", 0x70}], 0x1, &(0x7f0000000200)=[{0x58, 0x10c, 0x2, "ba9884eb1b0a785beb3df036dde8b12db344101fed2224af9e43508d288bab69575c62a7584d905bf3746dfa0d68810e88ef247b20f417beb60f135aa77c06d4f6"}, {0x88, 0x1, 0x3, "75903a0321cafa6eaa23e84b05397ec743ce2a91326d187c87fdaa7db58e37e0f548ffbfb4bd3bf522f7075f3a8a54070cb23c5db54938a5fcdf1a4452cb3e50b76e37f1d2ee6df2ae9846335ed362fde254fb81eca217cdd9b6dcab1c90a2b2cc8bef180403ee42c0b3a6f8b77f14edf63fcc402e"}, {0x18, 0x0, 0x1, "41e1a2c5"}, {0x60, 0x11, 0x19d, "b96100f2ead4b44bf94e2685f26f72f8cab00e3cbc86a3d6073e9a1ca22cb46a63d3058a25b28c2b4ca9b2e0031bf3e3da6a05dff2a340e2bc71f93363cabe45e89e8ecf4351e96bf94d2d036deeb7"}], 0x158}, 0x0, 0x40}, 0x3) 15:12:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000667000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f0965f2f2660f0d110fc7ad3b008fc9f0011a0f2222ba4100ed66b9820200000f326766c7442400f60000006766c7442402877800006766c744240600000000670f011424f30f1efb660f38345d00", 0x4f}], 0x1, 0x20, &(0x7f0000000140)=[@dstype0={0x6, 0xe}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5593, &(0x7f00000000c0)={0x0, 0xb77b, 0x0, 0xffffffff}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000667000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f0965f2f2660f0d110fc7ad3b008fc9f0011a0f2222ba4100ed66b9820200000f326766c7442400f60000006766c7442402877800006766c744240600000000670f011424f30f1efb660f38345d00", 0x4f}], 0x1, 0x20, &(0x7f0000000140)=[@dstype0={0x6, 0xe}], 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x5593, &(0x7f00000000c0)={0x0, 0xb77b, 0x0, 0xffffffff}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r6) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:12:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 32) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@xdp={0x2c, 0x2, 0x0, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="f04aa312b77388abc1c3e1ed3d80976d84b4f3862877a91804de5837866f2cc82f7be2086e3827166a7379ff6f7ea417b658015df2f0d566011a45c82f29decb79f4abf7cfa974913056054663ecaf67834743e2d1296edc6776bb8ca1040ee4c3d1cadbbd6b3652049a2c3b5d2a82a5", 0x70}], 0x1, &(0x7f0000000200)=[{0x58, 0x10c, 0x2, "ba9884eb1b0a785beb3df036dde8b12db344101fed2224af9e43508d288bab69575c62a7584d905bf3746dfa0d68810e88ef247b20f417beb60f135aa77c06d4f6"}, {0x88, 0x1, 0x3, "75903a0321cafa6eaa23e84b05397ec743ce2a91326d187c87fdaa7db58e37e0f548ffbfb4bd3bf522f7075f3a8a54070cb23c5db54938a5fcdf1a4452cb3e50b76e37f1d2ee6df2ae9846335ed362fde254fb81eca217cdd9b6dcab1c90a2b2cc8bef180403ee42c0b3a6f8b77f14edf63fcc402e"}, {0x18, 0x0, 0x1, "41e1a2c5"}, {0x60, 0x11, 0x19d, "b96100f2ead4b44bf94e2685f26f72f8cab00e3cbc86a3d6073e9a1ca22cb46a63d3058a25b28c2b4ca9b2e0031bf3e3da6a05dff2a340e2bc71f93363cabe45e89e8ecf4351e96bf94d2d036deeb7"}], 0x158}, 0x0, 0x40}, 0x3) 15:12:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0xffffffffffffffd1}, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x38, 0x26, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xfff2}, {0xa, 0x10}, {0x5, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000001) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:12:58 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a3cd0b0e586311cca33d316f17990d7090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12014dc463e33243852a0016001800f92a3b0400000169a50006000000000000000800000000000006241a208478197a81164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x968, &(0x7f00000000c0)={0x0, 0xf146, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12014dc463e33243852a0016001800f92a3b0400000169a50006000000000000000800000000000006241a208478197a81164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x968, &(0x7f00000000c0)={0x0, 0xf146, 0x20, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3132.261856][ T4422] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.288702][ T4425] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.298233][ T4422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.345190][ T4425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.367119][ T4424] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.401510][ T4445] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.418565][ T4424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.469806][ T4445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x20000e392) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:12:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0xffffffffffffffd1}, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x38, 0x26, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xfff2}, {0xa, 0x10}, {0x5, 0xfff3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000001) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3132.597371][T17882] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 3132.646990][ T4459] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.662041][ T4425] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.680914][T23633] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 3132.681346][ T4425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.689812][ T4424] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.697586][ T4445] UDC core: couldn't find an available UDC or it's busy: -16 [ 3132.706436][ T4424] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.761997][ T4459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.762361][ T4445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3132.839585][ T4445] UDC core: couldn't find an available UDC or it's busy: -16 15:12:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164cc3b505362c051180c9cef9fa0c40ef3025d865a9bb72e6dd7c6d770e20f8b78338786ffd9b32cfb8b6d9ea3e35a52769bf42b77b3d1eefe2a63555b8a2a1fd736decaf29dcf80a7fdc107d9ca033fc76dcdc1e38ec9c2b603ce682c2a96161e53e5201ea2d6249b7b35299c1cc8d2920a37dbe18a8b54ca1785b5b9fc77509bacb50baafd1121ffb036db2efb43a60fb82d45a4d59d1dd17715d4866ab50ee0382cb1d2c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x400000, 0x109) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="01e38dc2edd98621c363acb02faa9c487412f5984f0cf1dfbf625318218e814254613f07671549672dbbf370a60ee8d44d60fd31f0cc2a5d6ea3068dc8baf586d7413b4a1eb095dfdd3d713f29df9e9280eac4dd13a3fc2ebedd04d510e1c99bfe431f888f83d32b5f251f49918fd392d256d4d43a636b3496c696a9ce8105fc0f7b41eee64c0d8120f09a2cee5ef27462223555b70473d96ad068547fda9fcd1cc28f456d696c8a3a94b74fc25f0c046e173295e9c681542f571739e6cca2778b7fff7d24d756659d29c3514d673bcab75c0790ffad", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r5], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3132.880708][ T4445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:12:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040), &(0x7f0000000080)={'L+', 0x6}, 0x16, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3133.001551][T17882] usb 3-1: device descriptor read/64, error -71 [ 3133.025022][ T4479] UDC core: couldn't find an available UDC or it's busy: -16 [ 3133.033287][ T4479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3133.111615][T23633] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3133.126628][T23633] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3133.136720][T23633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3133.147844][T23633] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3133.169789][ T4483] UDC core: couldn't find an available UDC or it's busy: -16 [ 3133.178014][T23633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.195334][ T4483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3133.211450][ T4441] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3133.232644][T23633] hub 5-1:1.0: bad descriptor, ignoring hub [ 3133.239215][T23633] hub: probe of 5-1:1.0 failed with error -5 [ 3133.252779][ T4479] UDC core: couldn't find an available UDC or it's busy: -16 [ 3133.255481][T23633] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3133.267474][T23633] cdc_wdm 5-1:1.0: Unknown control protocol [ 3133.271209][ T4479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3133.274071][T17882] usb 3-1: new low-speed USB device number 106 using dummy_hcd 15:12:59 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a3cd0b0e586311cca33d316f17990d7090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a3cd0b0e586311cca33d316f17990d7090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3133.410718][ T4483] UDC core: couldn't find an available UDC or it's busy: -16 [ 3133.428807][ T4483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3133.549204][ T4492] UDC core: couldn't find an available UDC or it's busy: -16 [ 3133.593708][ T4492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3133.692094][T17882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3133.721601][T17882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3133.748517][T17882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3133.776050][T17882] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3133.789631][T17882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:12:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ptrace$setopts(0x4200, r1, 0x2, 0x2) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3133.831514][ T4454] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3133.853406][T17882] hub 3-1:1.0: bad descriptor, ignoring hub [ 3133.860043][T17882] hub: probe of 3-1:1.0 failed with error -5 [ 3133.934830][ T4492] UDC core: couldn't find an available UDC or it's busy: -16 [ 3133.943200][ T4492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3133.981968][ T4498] UDC core: couldn't find an available UDC or it's busy: -16 [ 3133.989813][ T4498] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3134.171884][ T4433] usb 5-1: reset low-speed USB device number 35 using dummy_hcd [ 3134.711477][ T4441] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3134.761612][T17882] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3134.768179][T17882] cdc_wdm 3-1:1.0: Unknown control protocol [ 3134.972426][T23633] usb 5-1: USB disconnect, device number 35 [ 3135.172289][T17882] usb 3-1: reset low-speed USB device number 106 using dummy_hcd 15:13:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164cc3b505362c051180c9cef9fa0c40ef3025d865a9bb72e6dd7c6d770e20f8b78338786ffd9b32cfb8b6d9ea3e35a52769bf42b77b3d1eefe2a63555b8a2a1fd736decaf29dcf80a7fdc107d9ca033fc76dcdc1e38ec9c2b603ce682c2a96161e53e5201ea2d6249b7b35299c1cc8d2920a37dbe18a8b54ca1785b5b9fc77509bacb50baafd1121ffb036db2efb43a60fb82d45a4d59d1dd17715d4866ab50ee0382cb1d2c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x400000, 0x109) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="01e38dc2edd98621c363acb02faa9c487412f5984f0cf1dfbf625318218e814254613f07671549672dbbf370a60ee8d44d60fd31f0cc2a5d6ea3068dc8baf586d7413b4a1eb095dfdd3d713f29df9e9280eac4dd13a3fc2ebedd04d510e1c99bfe431f888f83d32b5f251f49918fd392d256d4d43a636b3496c696a9ce8105fc0f7b41eee64c0d8120f09a2cee5ef27462223555b70473d96ad068547fda9fcd1cc28f456d696c8a3a94b74fc25f0c046e173295e9c681542f571739e6cca2778b7fff7d24d756659d29c3514d673bcab75c0790ffad", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r5], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164cc3b505362c051180c9cef9fa0c40ef3025d865a9bb72e6dd7c6d770e20f8b78338786ffd9b32cfb8b6d9ea3e35a52769bf42b77b3d1eefe2a63555b8a2a1fd736decaf29dcf80a7fdc107d9ca033fc76dcdc1e38ec9c2b603ce682c2a96161e53e5201ea2d6249b7b35299c1cc8d2920a37dbe18a8b54ca1785b5b9fc77509bacb50baafd1121ffb036db2efb43a60fb82d45a4d59d1dd17715d4866ab50ee0382cb1d2c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x400000, 0x109) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="01e38dc2edd98621c363acb02faa9c487412f5984f0cf1dfbf625318218e814254613f07671549672dbbf370a60ee8d44d60fd31f0cc2a5d6ea3068dc8baf586d7413b4a1eb095dfdd3d713f29df9e9280eac4dd13a3fc2ebedd04d510e1c99bfe431f888f83d32b5f251f49918fd392d256d4d43a636b3496c696a9ce8105fc0f7b41eee64c0d8120f09a2cee5ef27462223555b70473d96ad068547fda9fcd1cc28f456d696c8a3a94b74fc25f0c046e173295e9c681542f571739e6cca2778b7fff7d24d756659d29c3514d673bcab75c0790ffad", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r5], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) readahead(r0, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164cc3b505362c051180c9cef9fa0c40ef3025d865a9bb72e6dd7c6d770e20f8b78338786ffd9b32cfb8b6d9ea3e35a52769bf42b77b3d1eefe2a63555b8a2a1fd736decaf29dcf80a7fdc107d9ca033fc76dcdc1e38ec9c2b603ce682c2a96161e53e5201ea2d6249b7b35299c1cc8d2920a37dbe18a8b54ca1785b5b9fc77509bacb50baafd1121ffb036db2efb43a60fb82d45a4d59d1dd17715d4866ab50ee0382cb1d2c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x400000, 0x109) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="01e38dc2edd98621c363acb02faa9c487412f5984f0cf1dfbf625318218e814254613f07671549672dbbf370a60ee8d44d60fd31f0cc2a5d6ea3068dc8baf586d7413b4a1eb095dfdd3d713f29df9e9280eac4dd13a3fc2ebedd04d510e1c99bfe431f888f83d32b5f251f49918fd392d256d4d43a636b3496c696a9ce8105fc0f7b41eee64c0d8120f09a2cee5ef27462223555b70473d96ad068547fda9fcd1cc28f456d696c8a3a94b74fc25f0c046e173295e9c681542f571739e6cca2778b7fff7d24d756659d29c3514d673bcab75c0790ffad", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r5], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:13:01 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a3cd0b0e586311cca33d316f17990d7090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040), &(0x7f0000000080)={'L+', 0x6}, 0x16, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040), &(0x7f0000000080)={'L+', 0x6}, 0x16, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r5) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:13:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ptrace$setopts(0x4200, r1, 0x2, 0x2) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ptrace$setopts(0x4200, r1, 0x2, 0x2) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) 15:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x20000e392) (rerun: 64) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async, rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (rerun: 64) [ 3135.672245][T17882] usb 3-1: device descriptor read/all, error -71 [ 3135.693642][ T4503] UDC core: couldn't find an available UDC or it's busy: -16 [ 3135.701625][ T4503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3135.717875][ T4509] UDC core: couldn't find an available UDC or it's busy: -16 [ 3135.763210][ T4509] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3135.793711][ T4522] UDC core: couldn't find an available UDC or it's busy: -16 [ 3135.859474][ T4522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3135.866683][ T4512] UDC core: couldn't find an available UDC or it's busy: -16 15:13:01 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000209000008250200000000000000000001020900000524060001052401b5a46c99340800000d240f0100000000000000000806241a200000094071af484e6a4d608f8958559c8c2113a9126005602b740a5a6c05729f7be16b90bae5f91362cd6f39f6c1b149815434b2396dbac826fa2e0000000000000000000000004a58e5"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3135.922186][ T4512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3135.922774][ T4503] UDC core: couldn't find an available UDC or it's busy: -16 [ 3135.985679][ T4503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x20000e392) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3136.122979][ T4556] UDC core: couldn't find an available UDC or it's busy: -16 [ 3136.141760][ T4512] UDC core: couldn't find an available UDC or it's busy: -16 [ 3136.149968][ T4512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3136.158138][ T4556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3136.191213][T23633] usb 5-1: new low-speed USB device number 36 using dummy_hcd 15:13:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164cc3b505362c051180c9cef9fa0c40ef3025d865a9bb72e6dd7c6d770e20f8b78338786ffd9b32cfb8b6d9ea3e35a52769bf42b77b3d1eefe2a63555b8a2a1fd736decaf29dcf80a7fdc107d9ca033fc76dcdc1e38ec9c2b603ce682c2a96161e53e5201ea2d6249b7b35299c1cc8d2920a37dbe18a8b54ca1785b5b9fc77509bacb50baafd1121ffb036db2efb43a60fb82d45a4d59d1dd17715d4866ab50ee0382cb1d2c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x400000, 0x109) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="01e38dc2edd98621c363acb02faa9c487412f5984f0cf1dfbf625318218e814254613f07671549672dbbf370a60ee8d44d60fd31f0cc2a5d6ea3068dc8baf586d7413b4a1eb095dfdd3d713f29df9e9280eac4dd13a3fc2ebedd04d510e1c99bfe431f888f83d32b5f251f49918fd392d256d4d43a636b3496c696a9ce8105fc0f7b41eee64c0d8120f09a2cee5ef27462223555b70473d96ad068547fda9fcd1cc28f456d696c8a3a94b74fc25f0c046e173295e9c681542f571739e6cca2778b7fff7d24d756659d29c3514d673bcab75c0790ffad", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r5], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) readahead(r0, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164cc3b505362c051180c9cef9fa0c40ef3025d865a9bb72e6dd7c6d770e20f8b78338786ffd9b32cfb8b6d9ea3e35a52769bf42b77b3d1eefe2a63555b8a2a1fd736decaf29dcf80a7fdc107d9ca033fc76dcdc1e38ec9c2b603ce682c2a96161e53e5201ea2d6249b7b35299c1cc8d2920a37dbe18a8b54ca1785b5b9fc77509bacb50baafd1121ffb036db2efb43a60fb82d45a4d59d1dd17715d4866ab50ee0382cb1d2c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x400000, 0x109) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="01e38dc2edd98621c363acb02faa9c487412f5984f0cf1dfbf625318218e814254613f07671549672dbbf370a60ee8d44d60fd31f0cc2a5d6ea3068dc8baf586d7413b4a1eb095dfdd3d713f29df9e9280eac4dd13a3fc2ebedd04d510e1c99bfe431f888f83d32b5f251f49918fd392d256d4d43a636b3496c696a9ce8105fc0f7b41eee64c0d8120f09a2cee5ef27462223555b70473d96ad068547fda9fcd1cc28f456d696c8a3a94b74fc25f0c046e173295e9c681542f571739e6cca2778b7fff7d24d756659d29c3514d673bcab75c0790ffad", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r5], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3136.454664][ T4579] UDC core: couldn't find an available UDC or it's busy: -16 [ 3136.481331][ T4579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x2000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x8, 0x0, [{0x2e5, 0x0, 0x200}, {0xb59, 0x0, 0xfffffffffffffffc}, {0x205, 0x0, 0x401}, {0x189, 0x0, 0x5}, {0x93f, 0x0, 0xffff}, {0x879, 0x0, 0xfffffffffffffff8}, {0xaa7, 0x0, 0x8}, {0x242, 0x0, 0x101}]}) 15:13:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040), &(0x7f0000000080)={'L+', 0x6}, 0x16, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3136.501912][ T4544] UDC core: couldn't find an available UDC or it's busy: -16 [ 3136.510041][ T4544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3136.611218][T23633] usb 5-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 3136.639213][T23633] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3136.657379][T23633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3136.673828][T23633] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3136.684624][T23633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3136.696313][ T4579] UDC core: couldn't find an available UDC or it's busy: -16 [ 3136.705675][ T4579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xa4a9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r5 = syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x4, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x21}, [@dmm={0x7, 0x24, 0x14, 0xfffc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0xf9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x20, 0x20, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0x0, 0x9, 0x0, 0x5}, 0x23, &(0x7f00000001c0)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x4, 0x7, 0xed9, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffff00, 0xf000, 0x0, [0x3f30]}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x3e, &(0x7f0000000240)=@string={0x3e, 0x3, "ce6cbd810b6ccebc3219707fadffe94bd0fd736720fa798b3b65839d2a1ebab0f13184ba8546c268a1e0e93b3894c90390c11941c30e17e680da9af2"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x492}}]}) syz_usb_control_io(r5, &(0x7f0000000880)={0x2c, &(0x7f0000000340)={0x0, 0xf, 0x6f, {0x6f, 0xa, "38b2ea38404f2e3d13a064940a18c9cc15ed51e1a316329fd925d00efa4a3607c566921858cf2739ab998c6067f41a1ae6bd4f0222b734f7e31deaa2011eaebb301a195693138b8a6cf460cb1592ab46234682b45adea617f321ee0a185944b86bb919f8e3b2eec8fb36248fdc"}}, &(0x7f00000003c0)={0x0, 0x3, 0x49, @string={0x49, 0x3, "f13c98827feead1e7afc877cfeb209e07bb225f0e9c1522e1b26c41e56aadefb072aae0454cc9d9b6b9645063888d842284585ca3c5e932f6ccba4eaa8155ac048b654a8f1c8f5"}}, &(0x7f0000000440)={0x0, 0xf, 0x267, {0x5, 0xf, 0x267, 0x6, [@generic={0xbc, 0x10, 0x4, "39262426569925e263bb72d813670eb5422b35d9c8d5896284d8e3a28b2ed9b2eac5c17470f0c89e127a974d84c60d3fe7423fc434ed7b997c58ed9aa44de7e8a49844d3011b3fcedfb3557adf24701b4b135a02ecd1d9bc2cc51bc41e81c8a362a5657c6a0c96c7cd91fce8e93e8d4e2954fd10f18a1153bb694ee3839a465094ac778744ee4f87e542af44e49dec2339e5fd6e4be1158b522022ebe46c899580a57301f71b884c29a1e0966dc94ff7d52eed48172dd25161"}, @ssp_cap={0x1c, 0x10, 0xa, 0x13, 0x4, 0xb4, 0x0, 0x3dab, [0xff0f, 0xff0000, 0x30, 0x6f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x55, 0x1, 0x0, 0x27af, 0xb1}, @generic={0xc9, 0x10, 0x3, "8a937dcf93314bcd4f3717cc11ac81b6f8e768388b070a23fbe7d2ef694247693c39486beebbfd7d4e8fd5fb058b87a6561f7e9466fcae5aba5c6d65362795abcfa4dfb412d682dbe29db53feb311cf8b67d92288ff2878a8e09686368dbfd7a41a33160a95f7d9688256489133a82eb45a9956aeaef01d1be6b3996d812db1cec964674d7e85bd45c6850a55627f4b1b933b8555d160bd8453285441b9dde23b3e4b6886ed87adcdbceb8cde6a882557c0fb5a59ecb19c514c60ab7e6177886d2c0a7b4bef7"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x9, 0x401}, @generic={0xaf, 0x10, 0x4, "e8c6501a3d410630d8c9602922facc7e2447ed48c21f65ed58966f6456376778a88c0c16068cbfbedaa293d7df74bf40145fb5ea350df615bfdb6d4ca0f4ba4402220c3291ba0ad5ce601009daf76236f12a880ca5222fdaa7175d4ae21f7602969c8f1bcae0f503201e979132d680c2343f6e7232a2ac3669f73d49215787db8983edb1d338be8b000b5ba8726eb12f0871c97520109f13421f72e4ba27435cc126e82285bc4db548b10504"}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x17, 0x6, "b53c3189", "2fd89182"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x0, 0x3, 0xdc, 0x4, 0xd8}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x40, 0x0, 0x8b, "bfd68bc796381e4b0348f778d27ad700f37e418c94bc80ef839c39dd329691011c59adf48564fd18af9e8cd346fd4c25c5ed24c1f544c7771029178eba9d29fdac81687f92930a1bb19d33a2991535a0356dc7379a8becc5cf2094d1e211a822a8561d32199fa2f1c7b2b3a74e63ecc73296f1a185d6177ff96b6188cd583b5544210bef7ed33477918c46"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf0f0]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "9dc7"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "4490"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x81}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3136.771047][ T4513] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3136.800597][T23633] hub 5-1:1.0: bad descriptor, ignoring hub [ 3136.808291][T23633] hub: probe of 5-1:1.0 failed with error -5 [ 3136.858475][T17882] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 3136.883618][T23633] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3136.890204][T23633] cdc_wdm 5-1:1.0: Unknown control protocol [ 3137.016646][ T4600] UDC core: couldn't find an available UDC or it's busy: -16 [ 3137.025908][ T4600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3137.171405][T17882] usb 3-1: reset low-speed USB device number 106 using dummy_hcd [ 3137.307597][ T4603] UDC core: couldn't find an available UDC or it's busy: -16 [ 3137.317436][ T4603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3137.401093][T17882] usb 3-1: device not accepting address 106, error -22 [ 3137.706421][ T4513] usb 5-1: reset low-speed USB device number 36 using dummy_hcd [ 3137.715210][T17882] usb 3-1: reset low-speed USB device number 106 using dummy_hcd [ 3137.951105][T17882] usb 3-1: device not accepting address 106, error -22 [ 3137.967846][T17882] usb 3-1: USB disconnect, device number 106 [ 3138.231600][ T4524] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3138.571689][T17853] usb 5-1: USB disconnect, device number 36 [ 3138.880951][T17882] usb 3-1: new low-speed USB device number 107 using dummy_hcd 15:13:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164cc3b505362c051180c9cef9fa0c40ef3025d865a9bb72e6dd7c6d770e20f8b78338786ffd9b32cfb8b6d9ea3e35a52769bf42b77b3d1eefe2a63555b8a2a1fd736decaf29dcf80a7fdc107d9ca033fc76dcdc1e38ec9c2b603ce682c2a96161e53e5201ea2d6249b7b35299c1cc8d2920a37dbe18a8b54ca1785b5b9fc77509bacb50baafd1121ffb036db2efb43a60fb82d45a4d59d1dd17715d4866ab50ee0382cb1d2c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/suspend', 0x400000, 0x109) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="01e38dc2edd98621c363acb02faa9c487412f5984f0cf1dfbf625318218e814254613f07671549672dbbf370a60ee8d44d60fd31f0cc2a5d6ea3068dc8baf586d7413b4a1eb095dfdd3d713f29df9e9280eac4dd13a3fc2ebedd04d510e1c99bfe431f888f83d32b5f251f49918fd392d256d4d43a636b3496c696a9ce8105fc0f7b41eee64c0d8120f09a2cee5ef27462223555b70473d96ad068547fda9fcd1cc28f456d696c8a3a94b74fc25f0c046e173295e9c681542f571739e6cca2778b7fff7d24d756659d29c3514d673bcab75c0790ffad", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r5], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000000)={0xc5, 0x0, r1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:04 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000209000008250200000000000000000001020900000524060001052401b5a46c99340800000d240f0100000000000000000806241a200000094071af484e6a4d608f8958559c8c2113a9126005602b740a5a6c05729f7be16b90bae5f91362cd6f39f6c1b149815434b2396dbac826fa2e0000000000000000000000004a58e5"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ptrace$setopts(0x4200, r1, 0x2, 0x2) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:13:05 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000209000008250200000000000000000001020900000524060001052401b5a46c99340800000d240f0100000000000000000806241a200000094071af484e6a4d608f8958559c8c2113a9126005602b740a5a6c05729f7be16b90bae5f91362cd6f39f6c1b149815434b2396dbac826fa2e0000000000000000000000004a58e5"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000209000008250200000000000000000001020900000524060001052401b5a46c99340800000d240f0100000000000000000806241a200000094071af484e6a4d608f8958559c8c2113a9126005602b740a5a6c05729f7be16b90bae5f91362cd6f39f6c1b149815434b2396dbac826fa2e0000000000000000000000004a58e5"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3139.148167][ T4608] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.160772][ T4616] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.173685][ T4616] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xa4a9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r5 = syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x4, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x21}, [@dmm={0x7, 0x24, 0x14, 0xfffc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0xf9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x20, 0x20, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0x0, 0x9, 0x0, 0x5}, 0x23, &(0x7f00000001c0)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x4, 0x7, 0xed9, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffff00, 0xf000, 0x0, [0x3f30]}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x3e, &(0x7f0000000240)=@string={0x3e, 0x3, "ce6cbd810b6ccebc3219707fadffe94bd0fd736720fa798b3b65839d2a1ebab0f13184ba8546c268a1e0e93b3894c90390c11941c30e17e680da9af2"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x492}}]}) syz_usb_control_io(r5, &(0x7f0000000880)={0x2c, &(0x7f0000000340)={0x0, 0xf, 0x6f, {0x6f, 0xa, "38b2ea38404f2e3d13a064940a18c9cc15ed51e1a316329fd925d00efa4a3607c566921858cf2739ab998c6067f41a1ae6bd4f0222b734f7e31deaa2011eaebb301a195693138b8a6cf460cb1592ab46234682b45adea617f321ee0a185944b86bb919f8e3b2eec8fb36248fdc"}}, &(0x7f00000003c0)={0x0, 0x3, 0x49, @string={0x49, 0x3, "f13c98827feead1e7afc877cfeb209e07bb225f0e9c1522e1b26c41e56aadefb072aae0454cc9d9b6b9645063888d842284585ca3c5e932f6ccba4eaa8155ac048b654a8f1c8f5"}}, &(0x7f0000000440)={0x0, 0xf, 0x267, {0x5, 0xf, 0x267, 0x6, [@generic={0xbc, 0x10, 0x4, "39262426569925e263bb72d813670eb5422b35d9c8d5896284d8e3a28b2ed9b2eac5c17470f0c89e127a974d84c60d3fe7423fc434ed7b997c58ed9aa44de7e8a49844d3011b3fcedfb3557adf24701b4b135a02ecd1d9bc2cc51bc41e81c8a362a5657c6a0c96c7cd91fce8e93e8d4e2954fd10f18a1153bb694ee3839a465094ac778744ee4f87e542af44e49dec2339e5fd6e4be1158b522022ebe46c899580a57301f71b884c29a1e0966dc94ff7d52eed48172dd25161"}, @ssp_cap={0x1c, 0x10, 0xa, 0x13, 0x4, 0xb4, 0x0, 0x3dab, [0xff0f, 0xff0000, 0x30, 0x6f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x55, 0x1, 0x0, 0x27af, 0xb1}, @generic={0xc9, 0x10, 0x3, "8a937dcf93314bcd4f3717cc11ac81b6f8e768388b070a23fbe7d2ef694247693c39486beebbfd7d4e8fd5fb058b87a6561f7e9466fcae5aba5c6d65362795abcfa4dfb412d682dbe29db53feb311cf8b67d92288ff2878a8e09686368dbfd7a41a33160a95f7d9688256489133a82eb45a9956aeaef01d1be6b3996d812db1cec964674d7e85bd45c6850a55627f4b1b933b8555d160bd8453285441b9dde23b3e4b6886ed87adcdbceb8cde6a882557c0fb5a59ecb19c514c60ab7e6177886d2c0a7b4bef7"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x9, 0x401}, @generic={0xaf, 0x10, 0x4, "e8c6501a3d410630d8c9602922facc7e2447ed48c21f65ed58966f6456376778a88c0c16068cbfbedaa293d7df74bf40145fb5ea350df615bfdb6d4ca0f4ba4402220c3291ba0ad5ce601009daf76236f12a880ca5222fdaa7175d4ae21f7602969c8f1bcae0f503201e979132d680c2343f6e7232a2ac3669f73d49215787db8983edb1d338be8b000b5ba8726eb12f0871c97520109f13421f72e4ba27435cc126e82285bc4db548b10504"}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x17, 0x6, "b53c3189", "2fd89182"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x0, 0x3, 0xdc, 0x4, 0xd8}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x40, 0x0, 0x8b, "bfd68bc796381e4b0348f778d27ad700f37e418c94bc80ef839c39dd329691011c59adf48564fd18af9e8cd346fd4c25c5ed24c1f544c7771029178eba9d29fdac81687f92930a1bb19d33a2991535a0356dc7379a8becc5cf2094d1e211a822a8561d32199fa2f1c7b2b3a74e63ecc73296f1a185d6177ff96b6188cd583b5544210bef7ed33477918c46"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf0f0]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "9dc7"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "4490"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x81}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xa4a9}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r4) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x4, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x21}, [@dmm={0x7, 0x24, 0x14, 0xfffc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0xf9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x20, 0x20, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0x0, 0x9, 0x0, 0x5}, 0x23, &(0x7f00000001c0)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x4, 0x7, 0xed9, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffff00, 0xf000, 0x0, [0x3f30]}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x3e, &(0x7f0000000240)=@string={0x3e, 0x3, "ce6cbd810b6ccebc3219707fadffe94bd0fd736720fa798b3b65839d2a1ebab0f13184ba8546c268a1e0e93b3894c90390c11941c30e17e680da9af2"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x492}}]}) (async) syz_usb_control_io(r5, &(0x7f0000000880)={0x2c, &(0x7f0000000340)={0x0, 0xf, 0x6f, {0x6f, 0xa, "38b2ea38404f2e3d13a064940a18c9cc15ed51e1a316329fd925d00efa4a3607c566921858cf2739ab998c6067f41a1ae6bd4f0222b734f7e31deaa2011eaebb301a195693138b8a6cf460cb1592ab46234682b45adea617f321ee0a185944b86bb919f8e3b2eec8fb36248fdc"}}, &(0x7f00000003c0)={0x0, 0x3, 0x49, @string={0x49, 0x3, "f13c98827feead1e7afc877cfeb209e07bb225f0e9c1522e1b26c41e56aadefb072aae0454cc9d9b6b9645063888d842284585ca3c5e932f6ccba4eaa8155ac048b654a8f1c8f5"}}, &(0x7f0000000440)={0x0, 0xf, 0x267, {0x5, 0xf, 0x267, 0x6, [@generic={0xbc, 0x10, 0x4, "39262426569925e263bb72d813670eb5422b35d9c8d5896284d8e3a28b2ed9b2eac5c17470f0c89e127a974d84c60d3fe7423fc434ed7b997c58ed9aa44de7e8a49844d3011b3fcedfb3557adf24701b4b135a02ecd1d9bc2cc51bc41e81c8a362a5657c6a0c96c7cd91fce8e93e8d4e2954fd10f18a1153bb694ee3839a465094ac778744ee4f87e542af44e49dec2339e5fd6e4be1158b522022ebe46c899580a57301f71b884c29a1e0966dc94ff7d52eed48172dd25161"}, @ssp_cap={0x1c, 0x10, 0xa, 0x13, 0x4, 0xb4, 0x0, 0x3dab, [0xff0f, 0xff0000, 0x30, 0x6f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x55, 0x1, 0x0, 0x27af, 0xb1}, @generic={0xc9, 0x10, 0x3, "8a937dcf93314bcd4f3717cc11ac81b6f8e768388b070a23fbe7d2ef694247693c39486beebbfd7d4e8fd5fb058b87a6561f7e9466fcae5aba5c6d65362795abcfa4dfb412d682dbe29db53feb311cf8b67d92288ff2878a8e09686368dbfd7a41a33160a95f7d9688256489133a82eb45a9956aeaef01d1be6b3996d812db1cec964674d7e85bd45c6850a55627f4b1b933b8555d160bd8453285441b9dde23b3e4b6886ed87adcdbceb8cde6a882557c0fb5a59ecb19c514c60ab7e6177886d2c0a7b4bef7"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x9, 0x401}, @generic={0xaf, 0x10, 0x4, "e8c6501a3d410630d8c9602922facc7e2447ed48c21f65ed58966f6456376778a88c0c16068cbfbedaa293d7df74bf40145fb5ea350df615bfdb6d4ca0f4ba4402220c3291ba0ad5ce601009daf76236f12a880ca5222fdaa7175d4ae21f7602969c8f1bcae0f503201e979132d680c2343f6e7232a2ac3669f73d49215787db8983edb1d338be8b000b5ba8726eb12f0871c97520109f13421f72e4ba27435cc126e82285bc4db548b10504"}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x17, 0x6, "b53c3189", "2fd89182"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x0, 0x3, 0xdc, 0x4, 0xd8}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x40, 0x0, 0x8b, "bfd68bc796381e4b0348f778d27ad700f37e418c94bc80ef839c39dd329691011c59adf48564fd18af9e8cd346fd4c25c5ed24c1f544c7771029178eba9d29fdac81687f92930a1bb19d33a2991535a0356dc7379a8becc5cf2094d1e211a822a8561d32199fa2f1c7b2b3a74e63ecc73296f1a185d6177ff96b6188cd583b5544210bef7ed33477918c46"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf0f0]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "9dc7"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "4490"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x81}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3139.198169][ T4608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3139.266947][ T4624] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.275423][T17882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3139.291007][T17882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3139.291327][ T4624] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3139.300771][T17882] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3139.319031][T17882] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3139.331113][T17882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3139.372232][ T4586] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3139.385012][ T4632] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.393476][ T4632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3139.405078][T17882] hub 3-1:1.0: bad descriptor, ignoring hub [ 3139.411889][T17882] hub: probe of 3-1:1.0 failed with error -5 [ 3139.424496][T17882] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3139.433709][T17882] cdc_wdm 3-1:1.0: Unknown control protocol 15:13:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7, 0x80, 0x58, 0x800, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x67, 0x0, 0xc8, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x4, [{@empty, 0x101}, {@loopback, 0x8}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_NEWMDB={0x58, 0x54, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x4, {@ip4=@remote, 0x86dd}}}]}, 0x58}}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0xc0140, 0x0, 0x5}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0xffffffffffffffd1}, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', r6, 0x20, 0x7, 0x6, 0x7, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, {[@timestamp={0x44, 0x14, 0x98, 0x0, 0x1, [0x5, 0xffff7fff, 0xffffff57, 0x5]}, @generic={0x86, 0x7, "7abb845542"}, @noop, @generic={0x9b, 0x2}, @generic={0x44, 0x4a}, @generic={0x89, 0x9, "3b884a3505a15c"}, @rr={0x7, 0x7, 0x34, [@multicast2]}]}}}}}) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3139.491132][ T5617] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 3139.523649][ T4608] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.563151][ T4608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3139.603918][ T4624] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.614277][ T4632] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.637786][ T4632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3139.645315][ T4624] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async, rerun: 64) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x2000) (rerun: 64) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x8, 0x0, [{0x2e5, 0x0, 0x200}, {0xb59, 0x0, 0xfffffffffffffffc}, {0x205, 0x0, 0x401}, {0x189, 0x0, 0x5}, {0x93f, 0x0, 0xffff}, {0x879, 0x0, 0xfffffffffffffff8}, {0xaa7, 0x0, 0x8}, {0x242, 0x0, 0x101}]}) [ 3139.673577][T17853] usb 3-1: USB disconnect, device number 107 [ 3139.822144][ T4655] UDC core: couldn't find an available UDC or it's busy: -16 [ 3139.861273][ T5617] usb 5-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config 15:13:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x85bfi@\x8bSx\a\x00\x00\x00\x00\x00\x00\x00 %\t:\x97>\xb4\xa7\xe1\x80\x84\xc5V\x17)\x94P\x85\xbbj\xea\xebd\x8d3\x97h\x8d\x7f\x90\x06\x00\x00\x00\x87\xef\xe2\xf3\xe4\x84\x18\x8bd\xc4h\xa55\x9aT[\xd6\x8eJ\x83;\x15#v\xea\xa2@K\xf81?\v\xe3j\x99\x04/?\xe9\xb3\x98h\nd\xf7\x84\x04\x0e\xb5y\x8d\xaa\xf7\xc9\x9e\xce\xd1\x9c)\xa4\xb7-\x9d\xc5\xbb\xc3x\xc6*\x86\x8a 0\xb3\xcai\xed\x0f\xc1S\xff\xba4\xf9~\x90i\xd2\xe0\xcb\xf8\xf1T\x8b\xa7\xbd\xea\bC \x03\xe7\x1d\x04\xe6\xfeX\x05\x1f\xaa\x8a\xf4\xba\x1b\xadc\x0e\xa9\xcd\x9f', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r1, r0, 0x0, 0x100000000002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000004c0)) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x6116, &(0x7f0000000540)={0x0, 0xf144, 0x1, 0x1000}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3139.872682][ T4655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3139.913945][ T5617] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 15:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0xa4a9}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 64) r4 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 32) syz_usb_disconnect(r4) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) r5 = syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x4, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x21}, [@dmm={0x7, 0x24, 0x14, 0xfffc, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0xf9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x20, 0x20, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0x0, 0x9, 0x0, 0x5}, 0x23, &(0x7f00000001c0)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x4, 0x7, 0xed9, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7ffff00, 0xf000, 0x0, [0x3f30]}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x3e, &(0x7f0000000240)=@string={0x3e, 0x3, "ce6cbd810b6ccebc3219707fadffe94bd0fd736720fa798b3b65839d2a1ebab0f13184ba8546c268a1e0e93b3894c90390c11941c30e17e680da9af2"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x492}}]}) syz_usb_control_io(r5, &(0x7f0000000880)={0x2c, &(0x7f0000000340)={0x0, 0xf, 0x6f, {0x6f, 0xa, "38b2ea38404f2e3d13a064940a18c9cc15ed51e1a316329fd925d00efa4a3607c566921858cf2739ab998c6067f41a1ae6bd4f0222b734f7e31deaa2011eaebb301a195693138b8a6cf460cb1592ab46234682b45adea617f321ee0a185944b86bb919f8e3b2eec8fb36248fdc"}}, &(0x7f00000003c0)={0x0, 0x3, 0x49, @string={0x49, 0x3, "f13c98827feead1e7afc877cfeb209e07bb225f0e9c1522e1b26c41e56aadefb072aae0454cc9d9b6b9645063888d842284585ca3c5e932f6ccba4eaa8155ac048b654a8f1c8f5"}}, &(0x7f0000000440)={0x0, 0xf, 0x267, {0x5, 0xf, 0x267, 0x6, [@generic={0xbc, 0x10, 0x4, "39262426569925e263bb72d813670eb5422b35d9c8d5896284d8e3a28b2ed9b2eac5c17470f0c89e127a974d84c60d3fe7423fc434ed7b997c58ed9aa44de7e8a49844d3011b3fcedfb3557adf24701b4b135a02ecd1d9bc2cc51bc41e81c8a362a5657c6a0c96c7cd91fce8e93e8d4e2954fd10f18a1153bb694ee3839a465094ac778744ee4f87e542af44e49dec2339e5fd6e4be1158b522022ebe46c899580a57301f71b884c29a1e0966dc94ff7d52eed48172dd25161"}, @ssp_cap={0x1c, 0x10, 0xa, 0x13, 0x4, 0xb4, 0x0, 0x3dab, [0xff0f, 0xff0000, 0x30, 0x6f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x55, 0x1, 0x0, 0x27af, 0xb1}, @generic={0xc9, 0x10, 0x3, "8a937dcf93314bcd4f3717cc11ac81b6f8e768388b070a23fbe7d2ef694247693c39486beebbfd7d4e8fd5fb058b87a6561f7e9466fcae5aba5c6d65362795abcfa4dfb412d682dbe29db53feb311cf8b67d92288ff2878a8e09686368dbfd7a41a33160a95f7d9688256489133a82eb45a9956aeaef01d1be6b3996d812db1cec964674d7e85bd45c6850a55627f4b1b933b8555d160bd8453285441b9dde23b3e4b6886ed87adcdbceb8cde6a882557c0fb5a59ecb19c514c60ab7e6177886d2c0a7b4bef7"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x9, 0x401}, @generic={0xaf, 0x10, 0x4, "e8c6501a3d410630d8c9602922facc7e2447ed48c21f65ed58966f6456376778a88c0c16068cbfbedaa293d7df74bf40145fb5ea350df615bfdb6d4ca0f4ba4402220c3291ba0ad5ce601009daf76236f12a880ca5222fdaa7175d4ae21f7602969c8f1bcae0f503201e979132d680c2343f6e7232a2ac3669f73d49215787db8983edb1d338be8b000b5ba8726eb12f0871c97520109f13421f72e4ba27435cc126e82285bc4db548b10504"}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x17, 0x6, "b53c3189", "2fd89182"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x0, 0x3, 0xdc, 0x4, 0xd8}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x40, 0x0, 0x8b, "bfd68bc796381e4b0348f778d27ad700f37e418c94bc80ef839c39dd329691011c59adf48564fd18af9e8cd346fd4c25c5ed24c1f544c7771029178eba9d29fdac81687f92930a1bb19d33a2991535a0356dc7379a8becc5cf2094d1e211a822a8561d32199fa2f1c7b2b3a74e63ecc73296f1a185d6177ff96b6188cd583b5544210bef7ed33477918c46"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf0f0]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "9dc7"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "4490"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x81}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3139.958164][ T5617] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3139.963591][ T4655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3140.018245][ T5617] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3140.047185][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.083668][ T4670] UDC core: couldn't find an available UDC or it's busy: -16 [ 3140.092181][ T4628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3140.112372][ T5617] hub 5-1:1.0: bad descriptor, ignoring hub [ 3140.118723][ T5617] hub: probe of 5-1:1.0 failed with error -5 15:13:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f0000000040)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3140.135573][ T4670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3140.151428][T17853] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 3140.158657][ T5617] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3140.169981][ T5617] cdc_wdm 5-1:1.0: Unknown control protocol 15:13:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000000)={0xc5, 0x0, r1}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (rerun: 64) [ 3140.312721][ T4682] UDC core: couldn't find an available UDC or it's busy: -16 [ 3140.321234][ T4682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3140.379582][ T4662] UDC core: couldn't find an available UDC or it's busy: -16 [ 3140.391416][ T4662] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3140.571224][T17853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3140.582839][T17853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3140.592999][T17853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3140.615281][ T4692] UDC core: couldn't find an available UDC or it's busy: -16 [ 3140.636246][T17853] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3140.651217][ T4692] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3140.683315][T17853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.751444][ T4654] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3140.772549][T17853] hub 3-1:1.0: bad descriptor, ignoring hub [ 3140.779040][T17853] hub: probe of 3-1:1.0 failed with error -5 [ 3140.981751][ T4682] usb 5-1: reset low-speed USB device number 37 using dummy_hcd [ 3141.481585][ T4628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3141.753723][T17853] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3141.762646][T17853] cdc_wdm 3-1:1.0: Unknown control protocol [ 3141.776400][ T5617] usb 5-1: USB disconnect, device number 37 [ 3141.779991][T23633] usb 5-1: Failed to suspend device, error -19 [ 3141.835084][T17853] usb 3-1: USB disconnect, device number 108 15:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f0000000040)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000000)={0xc5, 0x0, r1}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async, rerun: 32) syz_usb_disconnect(r2) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (rerun: 64) 15:13:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7, 0x80, 0x58, 0x800, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x67, 0x0, 0xc8, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x4, [{@empty, 0x101}, {@loopback, 0x8}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_NEWMDB={0x58, 0x54, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x4, {@ip4=@remote, 0x86dd}}}]}, 0x58}}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0xc0140, 0x0, 0x5}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0xffffffffffffffd1}, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', r6, 0x20, 0x7, 0x6, 0x7, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, {[@timestamp={0x44, 0x14, 0x98, 0x0, 0x1, [0x5, 0xffff7fff, 0xffffff57, 0x5]}, @generic={0x86, 0x7, "7abb845542"}, @noop, @generic={0x9b, 0x2}, @generic={0x44, 0x4a}, @generic={0x89, 0x9, "3b884a3505a15c"}, @rr={0x7, 0x7, 0x34, [@multicast2]}]}}}}}) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7, 0x80, 0x58, 0x800, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x67, 0x0, 0xc8, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x4, [{@empty, 0x101}, {@loopback, 0x8}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}}]}]}}}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_NEWMDB={0x58, 0x54, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x4, {@ip4=@remote, 0x86dd}}}]}, 0x58}}, 0x4000000) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0xc0140, 0x0, 0x5}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0xffffffffffffffd1}, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', r6, 0x20, 0x7, 0x6, 0x7, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, {[@timestamp={0x44, 0x14, 0x98, 0x0, 0x1, [0x5, 0xffff7fff, 0xffffff57, 0x5]}, @generic={0x86, 0x7, "7abb845542"}, @noop, @generic={0x9b, 0x2}, @generic={0x44, 0x4a}, @generic={0x89, 0x9, "3b884a3505a15c"}, @rr={0x7, 0x7, 0x34, [@multicast2]}]}}}}}) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) 15:13:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 32) r2 = memfd_create(&(0x7f00000001c0)='\x85bfi@\x8bSx\a\x00\x00\x00\x00\x00\x00\x00 %\t:\x97>\xb4\xa7\xe1\x80\x84\xc5V\x17)\x94P\x85\xbbj\xea\xebd\x8d3\x97h\x8d\x7f\x90\x06\x00\x00\x00\x87\xef\xe2\xf3\xe4\x84\x18\x8bd\xc4h\xa55\x9aT[\xd6\x8eJ\x83;\x15#v\xea\xa2@K\xf81?\v\xe3j\x99\x04/?\xe9\xb3\x98h\nd\xf7\x84\x04\x0e\xb5y\x8d\xaa\xf7\xc9\x9e\xce\xd1\x9c)\xa4\xb7-\x9d\xc5\xbb\xc3x\xc6*\x86\x8a 0\xb3\xcai\xed\x0f\xc1S\xff\xba4\xf9~\x90i\xd2\xe0\xcb\xf8\xf1T\x8b\xa7\xbd\xea\bC \x03\xe7\x1d\x04\xe6\xfeX\x05\x1f\xaa\x8a\xf4\xba\x1b\xadc\x0e\xa9\xcd\x9f', 0x0) ftruncate(r2, 0x40001) (async) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) (async) sendfile(r1, r0, 0x0, 0x100000000002) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000004c0)) (rerun: 32) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x6116, &(0x7f0000000540)={0x0, 0xf144, 0x1, 0x1000}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 32) syz_usb_disconnect(r5) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000500)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x2000) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x8, 0x0, [{0x2e5, 0x0, 0x200}, {0xb59, 0x0, 0xfffffffffffffffc}, {0x205, 0x0, 0x401}, {0x189, 0x0, 0x5}, {0x93f, 0x0, 0xffff}, {0x879, 0x0, 0xfffffffffffffff8}, {0xaa7, 0x0, 0x8}, {0x242, 0x0, 0x101}]}) 15:13:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f0000000040)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f0000000040)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3142.461816][ T4718] UDC core: couldn't find an available UDC or it's busy: -16 [ 3142.473037][ T4705] UDC core: couldn't find an available UDC or it's busy: -16 15:13:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='\x85bfi@\x8bSx\a\x00\x00\x00\x00\x00\x00\x00 %\t:\x97>\xb4\xa7\xe1\x80\x84\xc5V\x17)\x94P\x85\xbbj\xea\xebd\x8d3\x97h\x8d\x7f\x90\x06\x00\x00\x00\x87\xef\xe2\xf3\xe4\x84\x18\x8bd\xc4h\xa55\x9aT[\xd6\x8eJ\x83;\x15#v\xea\xa2@K\xf81?\v\xe3j\x99\x04/?\xe9\xb3\x98h\nd\xf7\x84\x04\x0e\xb5y\x8d\xaa\xf7\xc9\x9e\xce\xd1\x9c)\xa4\xb7-\x9d\xc5\xbb\xc3x\xc6*\x86\x8a 0\xb3\xcai\xed\x0f\xc1S\xff\xba4\xf9~\x90i\xd2\xe0\xcb\xf8\xf1T\x8b\xa7\xbd\xea\bC \x03\xe7\x1d\x04\xe6\xfeX\x05\x1f\xaa\x8a\xf4\xba\x1b\xadc\x0e\xa9\xcd\x9f', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r1, r0, 0x0, 0x100000000002) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000004c0)) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x6116, &(0x7f0000000540)={0x0, 0xf144, 0x1, 0x1000}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) memfd_create(&(0x7f00000001c0)='\x85bfi@\x8bSx\a\x00\x00\x00\x00\x00\x00\x00 %\t:\x97>\xb4\xa7\xe1\x80\x84\xc5V\x17)\x94P\x85\xbbj\xea\xebd\x8d3\x97h\x8d\x7f\x90\x06\x00\x00\x00\x87\xef\xe2\xf3\xe4\x84\x18\x8bd\xc4h\xa55\x9aT[\xd6\x8eJ\x83;\x15#v\xea\xa2@K\xf81?\v\xe3j\x99\x04/?\xe9\xb3\x98h\nd\xf7\x84\x04\x0e\xb5y\x8d\xaa\xf7\xc9\x9e\xce\xd1\x9c)\xa4\xb7-\x9d\xc5\xbb\xc3x\xc6*\x86\x8a 0\xb3\xcai\xed\x0f\xc1S\xff\xba4\xf9~\x90i\xd2\xe0\xcb\xf8\xf1T\x8b\xa7\xbd\xea\bC \x03\xe7\x1d\x04\xe6\xfeX\x05\x1f\xaa\x8a\xf4\xba\x1b\xadc\x0e\xa9\xcd\x9f', 0x0) (async) ftruncate(r2, 0x40001) (async) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) (async) sendfile(r1, r0, 0x0, 0x100000000002) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000004c0)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x6116, &(0x7f0000000540)={0x0, 0xf144, 0x1, 0x1000}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r5) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000500)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3142.517277][ T4718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3142.528154][ T4702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3142.540403][ T4705] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffbff, 0x480) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="66b823018ed80f75c036260f0018c4c1792ecb66baf80cb8ccac6d8cef66bafc0c66b85e2d66ef66baa00066edc744240004000000c744240200000080c7442406000000000f0114240fc77aa80f019b0d000000c4e195ddbfa491eef0", 0x5d}], 0x1, 0x8, &(0x7f00000001c0)=[@cr4={0x1, 0x20000}], 0x1) syz_usb_disconnect(r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd, 0x8, 0x7, 0x3ff, 0x5, 0x0, {0x3}}, 0x2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3142.793178][ T4739] UDC core: couldn't find an available UDC or it's busy: -16 [ 3142.802117][ T4705] UDC core: couldn't find an available UDC or it's busy: -16 [ 3142.820804][ T4739] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3142.829776][ T4705] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3142.830907][T23633] usb 5-1: new low-speed USB device number 38 using dummy_hcd 15:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) getitimer(0x0, &(0x7f00000000c0)) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3142.994292][ T4754] UDC core: couldn't find an available UDC or it's busy: -16 [ 3143.038499][ T4754] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f0000000040)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f0000000040)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3143.102856][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.113859][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.129223][ T4733] UDC core: couldn't find an available UDC or it's busy: -16 [ 3143.168920][ T4733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3143.231265][ T5617] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 3143.250494][ T4756] UDC core: couldn't find an available UDC or it's busy: -16 15:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) (async, rerun: 32) getitimer(0x0, &(0x7f00000000c0)) (async, rerun: 32) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 3143.293677][T23633] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3143.301061][ T4756] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3143.354498][T23633] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3143.364930][T23633] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3143.376634][T23633] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3143.387634][T23633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3143.412783][ T4768] UDC core: couldn't find an available UDC or it's busy: -16 [ 3143.451925][ T4725] raw-gadget gadget: fail, usb_ep_enable returned -22 15:13:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x185400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x6, 0x0, [{0xa32, 0x0, 0x7f}, {0x20e, 0x0, 0x3}, {0x45b, 0x0, 0x2}, {0xc0011032, 0x0, 0x100000001}, {0xa36, 0x0, 0x3eb}, {0x99d, 0x0, 0x19}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000880)={0x5, 0x4, {0x9, @usage=0x7fff, 0x0, 0x800, 0x8001, 0x4, 0x20000000, 0xda, 0x1a4, @usage=0x7, 0x3, 0xffff8001, [0x477082bf, 0x101, 0x0, 0x3ff, 0x2aa9, 0xe9]}, {0x6, @struct={0xd2ab, 0x7}, 0x0, 0x8000000000000001, 0x4f, 0x80, 0x9, 0x9f96, 0x41, @usage, 0xffffffff, 0x5, [0x7fffffffffffffff, 0x3, 0xffffffff, 0xe1c0, 0xffff]}, {0x1, @usage=0xbc, 0x0, 0xfffffffffffffff6, 0x8000000000000001, 0x9, 0x0, 0x40, 0x1, @usage=0x4, 0x4, 0x1, [0x8, 0x3, 0xfff, 0x2, 0x4, 0x8]}, {0x6a7e, 0x3ff, 0x131}}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3143.470919][ T4768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3143.482871][T23633] hub 5-1:1.0: bad descriptor, ignoring hub [ 3143.511031][T23633] hub: probe of 5-1:1.0 failed with error -5 [ 3143.533635][T23633] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3143.540196][T23633] cdc_wdm 5-1:1.0: Unknown control protocol [ 3143.554598][ T4756] UDC core: couldn't find an available UDC or it's busy: -16 [ 3143.579039][ T4756] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3143.582571][ T4771] UDC core: couldn't find an available UDC or it's busy: -16 [ 3143.595982][ T4771] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3143.605519][ T5617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3143.619988][ T5617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3143.638176][ T5617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3143.650208][ T5617] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3143.669421][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3143.751401][ T4745] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3143.772280][ T5617] hub 3-1:1.0: bad descriptor, ignoring hub [ 3143.778646][ T5617] hub: probe of 3-1:1.0 failed with error -5 [ 3143.838938][ T4771] UDC core: couldn't find an available UDC or it's busy: -16 [ 3143.855520][ T4771] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3144.411712][ T4716] usb 5-1: reset low-speed USB device number 38 using dummy_hcd [ 3144.902137][ T4725] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3144.942570][ T5617] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3144.948910][ T5617] cdc_wdm 3-1:1.0: Unknown control protocol [ 3145.151982][T17853] usb 5-1: USB disconnect, device number 38 [ 3145.331616][ T5617] usb 3-1: reset low-speed USB device number 109 using dummy_hcd 15:13:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x185400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x6, 0x0, [{0xa32, 0x0, 0x7f}, {0x20e, 0x0, 0x3}, {0x45b, 0x0, 0x2}, {0xc0011032, 0x0, 0x100000001}, {0xa36, 0x0, 0x3eb}, {0x99d, 0x0, 0x19}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000880)={0x5, 0x4, {0x9, @usage=0x7fff, 0x0, 0x800, 0x8001, 0x4, 0x20000000, 0xda, 0x1a4, @usage=0x7, 0x3, 0xffff8001, [0x477082bf, 0x101, 0x0, 0x3ff, 0x2aa9, 0xe9]}, {0x6, @struct={0xd2ab, 0x7}, 0x0, 0x8000000000000001, 0x4f, 0x80, 0x9, 0x9f96, 0x41, @usage, 0xffffffff, 0x5, [0x7fffffffffffffff, 0x3, 0xffffffff, 0xe1c0, 0xffff]}, {0x1, @usage=0xbc, 0x0, 0xfffffffffffffff6, 0x8000000000000001, 0x9, 0x0, 0x40, 0x1, @usage=0x4, 0x4, 0x1, [0x8, 0x3, 0xfff, 0x2, 0x4, 0x8]}, {0x6a7e, 0x3ff, 0x131}}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x8f145, 0x8, 0x1, 0x27f}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) getitimer(0x0, &(0x7f00000000c0)) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:13:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7, 0x80, 0x58, 0x800, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x67, 0x0, 0xc8, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x4, [{@empty, 0x101}, {@loopback, 0x8}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_NEWMDB={0x58, 0x54, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x4, {@ip4=@remote, 0x86dd}}}]}, 0x58}}, 0x4000000) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0xc0140, 0x0, 0x5}, 0x18) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getroute={0xffffffffffffffd1}, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd15, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', r6, 0x20, 0x7, 0x6, 0x7, {{0x11, 0x4, 0x3, 0x4, 0x44, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, {[@timestamp={0x44, 0x14, 0x98, 0x0, 0x1, [0x5, 0xffff7fff, 0xffffff57, 0x5]}, @generic={0x86, 0x7, "7abb845542"}, @noop, @generic={0x9b, 0x2}, @generic={0x44, 0x4a}, @generic={0x89, 0x9, "3b884a3505a15c"}, @rr={0x7, 0x7, 0x34, [@multicast2]}]}}}}}) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:13:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x185400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x6, 0x0, [{0xa32, 0x0, 0x7f}, {0x20e, 0x0, 0x3}, {0x45b, 0x0, 0x2}, {0xc0011032, 0x0, 0x100000001}, {0xa36, 0x0, 0x3eb}, {0x99d, 0x0, 0x19}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000880)={0x5, 0x4, {0x9, @usage=0x7fff, 0x0, 0x800, 0x8001, 0x4, 0x20000000, 0xda, 0x1a4, @usage=0x7, 0x3, 0xffff8001, [0x477082bf, 0x101, 0x0, 0x3ff, 0x2aa9, 0xe9]}, {0x6, @struct={0xd2ab, 0x7}, 0x0, 0x8000000000000001, 0x4f, 0x80, 0x9, 0x9f96, 0x41, @usage, 0xffffffff, 0x5, [0x7fffffffffffffff, 0x3, 0xffffffff, 0xe1c0, 0xffff]}, {0x1, @usage=0xbc, 0x0, 0xfffffffffffffff6, 0x8000000000000001, 0x9, 0x0, 0x40, 0x1, @usage=0x4, 0x4, 0x1, [0x8, 0x3, 0xfff, 0x2, 0x4, 0x8]}, {0x6a7e, 0x3ff, 0x131}}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x185400, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x6, 0x0, [{0xa32, 0x0, 0x7f}, {0x20e, 0x0, 0x3}, {0x45b, 0x0, 0x2}, {0xc0011032, 0x0, 0x100000001}, {0xa36, 0x0, 0x3eb}, {0x99d, 0x0, 0x19}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x2) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000880)={0x5, 0x4, {0x9, @usage=0x7fff, 0x0, 0x800, 0x8001, 0x4, 0x20000000, 0xda, 0x1a4, @usage=0x7, 0x3, 0xffff8001, [0x477082bf, 0x101, 0x0, 0x3ff, 0x2aa9, 0xe9]}, {0x6, @struct={0xd2ab, 0x7}, 0x0, 0x8000000000000001, 0x4f, 0x80, 0x9, 0x9f96, 0x41, @usage, 0xffffffff, 0x5, [0x7fffffffffffffff, 0x3, 0xffffffff, 0xe1c0, 0xffff]}, {0x1, @usage=0xbc, 0x0, 0xfffffffffffffff6, 0x8000000000000001, 0x9, 0x0, 0x40, 0x1, @usage=0x4, 0x4, 0x1, [0x8, 0x3, 0xfff, 0x2, 0x4, 0x8]}, {0x6a7e, 0x3ff, 0x131}}) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3145.808045][ T4788] UDC core: couldn't find an available UDC or it's busy: -16 [ 3145.843074][ T4800] UDC core: couldn't find an available UDC or it's busy: -16 [ 3145.853173][ T4801] UDC core: couldn't find an available UDC or it's busy: -16 [ 3145.854661][ T4800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3145.872171][ T4789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3145.881835][ T4788] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3145.951950][ T4801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xffffffff9d7dfbba, 0x401, 0x3, 0x7fff, 0x2, 0x100, 0x4, 0x5, 0x9, 0x100, 0x7, 0x0, 0x8001, 0x1], 0x2, 0x80000}) ioctl$KVM_NMI(r6, 0xae9a) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3146.030982][ T5617] usb 3-1: can't restore configuration #1 (error=-71) [ 3146.042853][ T5617] usb 3-1: USB disconnect, device number 109 15:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffbff, 0x480) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="66b823018ed80f75c036260f0018c4c1792ecb66baf80cb8ccac6d8cef66bafc0c66b85e2d66ef66baa00066edc744240004000000c744240200000080c7442406000000000f0114240fc77aa80f019b0d000000c4e195ddbfa491eef0", 0x5d}], 0x1, 0x8, &(0x7f00000001c0)=[@cr4={0x1, 0x20000}], 0x1) syz_usb_disconnect(r2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd, 0x8, 0x7, 0x3ff, 0x5, 0x0, {0x3}}, 0x2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3146.120621][ T4788] UDC core: couldn't find an available UDC or it's busy: -16 [ 3146.153080][ T4788] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x185400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000580)={0x6, 0x0, [{0xa32, 0x0, 0x7f}, {0x20e, 0x0, 0x3}, {0x45b, 0x0, 0x2}, {0xc0011032, 0x0, 0x100000001}, {0xa36, 0x0, 0x3eb}, {0x99d, 0x0, 0x19}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x2) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000880)={0x5, 0x4, {0x9, @usage=0x7fff, 0x0, 0x800, 0x8001, 0x4, 0x20000000, 0xda, 0x1a4, @usage=0x7, 0x3, 0xffff8001, [0x477082bf, 0x101, 0x0, 0x3ff, 0x2aa9, 0xe9]}, {0x6, @struct={0xd2ab, 0x7}, 0x0, 0x8000000000000001, 0x4f, 0x80, 0x9, 0x9f96, 0x41, @usage, 0xffffffff, 0x5, [0x7fffffffffffffff, 0x3, 0xffffffff, 0xe1c0, 0xffff]}, {0x1, @usage=0xbc, 0x0, 0xfffffffffffffff6, 0x8000000000000001, 0x9, 0x0, 0x40, 0x1, @usage=0x4, 0x4, 0x1, [0x8, 0x3, 0xfff, 0x2, 0x4, 0x8]}, {0x6a7e, 0x3ff, 0x131}}) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3146.170937][ T5313] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 3146.186814][ T4790] UDC core: couldn't find an available UDC or it's busy: -16 15:13:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400dcd8ac8cf1b2857168415705602e000102090000052406000105240800000d240f010000000000000075a9778c01000000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, 0x0, 0x0) [ 3146.232667][ T4790] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3146.323203][ T4805] UDC core: couldn't find an available UDC or it's busy: -16 [ 3146.355525][ T4830] UDC core: couldn't find an available UDC or it's busy: -16 [ 3146.365388][ T4805] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:12 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000600)="430f009d0000400142c3f30f0966ba2000ed420f07b9c30300000f320fc7aaf24e000066baf80cb85f702181ef66bafc0cec67f30fc7300f01c2", 0x3a}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000540)="c401c05c5d06440f01b50a0000000f20d835200000000f22d82e440fc75df8c4e179e6d5f4460f0fe994b9800000c00f3235010000000f30c44129ef1a48b800000000000000000f23c80f21f835080070000f23f8", 0x55}], 0x1, 0x1, &(0x7f00000005c0)=[@cr4={0x1, 0x200004}, @cr0={0x0, 0x40000000}], 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502df0000000000000126c0d673b90d1ddd7abd4409025c00020100f92a090400000102090000053306000105240800000d240f0100000000000000000006241a200000090581164ccc963fa17c425f3813b6dcf53fffab8d5990b65c46f41b85821a478df4939e289ce18b6e5069afb0637b3a256a0274d74c2f4869623514b40000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x28dd, &(0x7f0000000640)={0x0, 0xf144, 0x14, 0x2, 0x3b6}, &(0x7f0000046000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3146.366046][ T4830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3146.394805][ T4822] UDC core: couldn't find an available UDC or it's busy: -16 [ 3146.413445][ T4822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffbff, 0x480) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="66b823018ed80f75c036260f0018c4c1792ecb66baf80cb8ccac6d8cef66bafc0c66b85e2d66ef66baa00066edc744240004000000c744240200000080c7442406000000000f0114240fc77aa80f019b0d000000c4e195ddbfa491eef0", 0x5d}], 0x1, 0x8, &(0x7f00000001c0)=[@cr4={0x1, 0x20000}], 0x1) syz_usb_disconnect(r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd, 0x8, 0x7, 0x3ff, 0x5, 0x0, {0x3}}, 0x2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffbff, 0x480) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="66b823018ed80f75c036260f0018c4c1792ecb66baf80cb8ccac6d8cef66bafc0c66b85e2d66ef66baa00066edc744240004000000c744240200000080c7442406000000000f0114240fc77aa80f019b0d000000c4e195ddbfa491eef0", 0x5d}], 0x1, 0x8, &(0x7f00000001c0)=[@cr4={0x1, 0x20000}], 0x1) (async) syz_usb_disconnect(r2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd, 0x8, 0x7, 0x3ff, 0x5, 0x0, {0x3}}, 0x2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3146.551391][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3146.572379][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3146.595606][ T5313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3146.606970][ T5313] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3146.617568][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3146.651550][ T4802] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3146.662280][ T4805] UDC core: couldn't find an available UDC or it's busy: -16 [ 3146.675910][ T5313] hub 5-1:1.0: bad descriptor, ignoring hub [ 3146.682462][ T5313] hub: probe of 5-1:1.0 failed with error -5 [ 3146.684509][ T4805] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3146.700214][ T5313] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3146.707528][ T5313] cdc_wdm 5-1:1.0: Unknown control protocol [ 3146.731123][ T4838] UDC core: couldn't find an available UDC or it's busy: -16 [ 3146.772450][ T4838] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x8f145, 0x8, 0x1, 0x27f}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3146.941870][ T5617] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 3146.995860][ T4852] UDC core: couldn't find an available UDC or it's busy: -16 [ 3147.027325][ T4852] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3147.062113][ T4852] UDC core: couldn't find an available UDC or it's busy: -16 [ 3147.071027][ T4852] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3147.101763][ T4838] UDC core: couldn't find an available UDC or it's busy: -16 [ 3147.120908][ T4838] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3147.321152][ T5617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3147.333077][ T5617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3147.343203][ T5617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3147.354121][ T5617] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3147.364063][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3147.404122][ T4839] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3147.442386][ T5617] hub 3-1:1.0: bad descriptor, ignoring hub [ 3147.448738][ T5617] hub: probe of 3-1:1.0 failed with error -5 [ 3147.562415][ T4802] usb 5-1: reset low-speed USB device number 39 using dummy_hcd [ 3148.077614][ T4854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3149.236243][ T4853] cdc_wdm 5-1:1.0: Error autopm - -16 [ 3149.236521][T23633] usb 5-1: USB disconnect, device number 39 [ 3149.249177][ T5617] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3149.257547][ T4839] cdc_wdm 5-1:1.0: Error autopm - -16 [ 3149.266347][ T5617] cdc_wdm 3-1:1.0: Unknown control protocol 15:13:15 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000600)="430f009d0000400142c3f30f0966ba2000ed420f07b9c30300000f320fc7aaf24e000066baf80cb85f702181ef66bafc0cec67f30fc7300f01c2", 0x3a}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000540)="c401c05c5d06440f01b50a0000000f20d835200000000f22d82e440fc75df8c4e179e6d5f4460f0fe994b9800000c00f3235010000000f30c44129ef1a48b800000000000000000f23c80f21f835080070000f23f8", 0x55}], 0x1, 0x1, &(0x7f00000005c0)=[@cr4={0x1, 0x200004}, @cr0={0x0, 0x40000000}], 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502df0000000000000126c0d673b90d1ddd7abd4409025c00020100f92a090400000102090000053306000105240800000d240f0100000000000000000006241a200000090581164ccc963fa17c425f3813b6dcf53fffab8d5990b65c46f41b85821a478df4939e289ce18b6e5069afb0637b3a256a0274d74c2f4869623514b40000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x28dd, &(0x7f0000000640)={0x0, 0xf144, 0x14, 0x2, 0x3b6}, &(0x7f0000046000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xffffffff9d7dfbba, 0x401, 0x3, 0x7fff, 0x2, 0x100, 0x4, 0x5, 0x9, 0x100, 0x7, 0x0, 0x8001, 0x1], 0x2, 0x80000}) (async) ioctl$KVM_NMI(r6, 0xae9a) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async, rerun: 32) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400dcd8ac8cf1b2857168415705602e000102090000052406000105240800000d240f010000000000000075a9778c01000000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x6e, 0x0, 0x0) 15:13:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 64) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x8f145, 0x8, 0x1, 0x27f}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 32) syz_usb_disconnect(r2) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000600)="430f009d0000400142c3f30f0966ba2000ed420f07b9c30300000f320fc7aaf24e000066baf80cb85f702181ef66bafc0cec67f30fc7300f01c2", 0x3a}], 0x1, 0x5e, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000540)="c401c05c5d06440f01b50a0000000f20d835200000000f22d82e440fc75df8c4e179e6d5f4460f0fe994b9800000c00f3235010000000f30c44129ef1a48b800000000000000000f23c80f21f835080070000f23f8", 0x55}], 0x1, 0x1, &(0x7f00000005c0)=[@cr4={0x1, 0x200004}, @cr0={0x0, 0x40000000}], 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) (async) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502df0000000000000126c0d673b90d1ddd7abd4409025c00020100f92a090400000102090000053306000105240800000d240f0100000000000000000006241a200000090581164ccc963fa17c425f3813b6dcf53fffab8d5990b65c46f41b85821a478df4939e289ce18b6e5069afb0637b3a256a0274d74c2f4869623514b40000"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x28dd, &(0x7f0000000640)={0x0, 0xf144, 0x14, 0x2, 0x3b6}, &(0x7f0000046000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0xa3e, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x5000) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="640f83fcff0f0966b9800000c00f326635008000000f300f380b5208bad10466ed0f20c06635000000400f22c066670f23740fc7586bf65f037000", 0x3b}], 0x1, 0x2, &(0x7f0000000180)=[@efer={0x2, 0xad00}, @dstype0={0x6, 0x5}], 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000600)="430f009d0000400142c3f30f0966ba2000ed420f07b9c30300000f320fc7aaf24e000066baf80cb85f702181ef66bafc0cec67f30fc7300f01c2", 0x3a}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000540)="c401c05c5d06440f01b50a0000000f20d835200000000f22d82e440fc75df8c4e179e6d5f4460f0fe994b9800000c00f3235010000000f30c44129ef1a48b800000000000000000f23c80f21f835080070000f23f8", 0x55}], 0x1, 0x1, &(0x7f00000005c0)=[@cr4={0x1, 0x200004}, @cr0={0x0, 0x40000000}], 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502df0000000000000126c0d673b90d1ddd7abd4409025c00020100f92a090400000102090000053306000105240800000d240f0100000000000000000006241a200000090581164ccc963fa17c425f3813b6dcf53fffab8d5990b65c46f41b85821a478df4939e289ce18b6e5069afb0637b3a256a0274d74c2f4869623514b40000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x28dd, &(0x7f0000000640)={0x0, 0xf144, 0x14, 0x2, 0x3b6}, &(0x7f0000046000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000600)="430f009d0000400142c3f30f0966ba2000ed420f07b9c30300000f320fc7aaf24e000066baf80cb85f702181ef66bafc0cec67f30fc7300f01c2", 0x3a}], 0x1, 0x5e, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000540)="c401c05c5d06440f01b50a0000000f20d835200000000f22d82e440fc75df8c4e179e6d5f4460f0fe994b9800000c00f3235010000000f30c44129ef1a48b800000000000000000f23c80f21f835080070000f23f8", 0x55}], 0x1, 0x1, &(0x7f00000005c0)=[@cr4={0x1, 0x200004}, @cr0={0x0, 0x40000000}], 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502df0000000000000126c0d673b90d1ddd7abd4409025c00020100f92a090400000102090000053306000105240800000d240f0100000000000000000006241a200000090581164ccc963fa17c425f3813b6dcf53fffab8d5990b65c46f41b85821a478df4939e289ce18b6e5069afb0637b3a256a0274d74c2f4869623514b40000"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x28dd, &(0x7f0000000640)={0x0, 0xf144, 0x14, 0x2, 0x3b6}, &(0x7f0000046000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r5) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3149.922189][ T4871] UDC core: couldn't find an available UDC or it's busy: -16 [ 3149.932097][ T4870] UDC core: couldn't find an available UDC or it's busy: -16 [ 3149.940177][ T4870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3149.957002][ T4871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3150.219554][ T4908] UDC core: couldn't find an available UDC or it's busy: -16 [ 3150.241118][ T4908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3150.268001][ T4911] UDC core: couldn't find an available UDC or it's busy: -16 [ 3150.286585][ T4911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xffffffff9d7dfbba, 0x401, 0x3, 0x7fff, 0x2, 0x100, 0x4, 0x5, 0x9, 0x100, 0x7, 0x0, 0x8001, 0x1], 0x2, 0x80000}) ioctl$KVM_NMI(r6, 0xae9a) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xffffffff9d7dfbba, 0x401, 0x3, 0x7fff, 0x2, 0x100, 0x4, 0x5, 0x9, 0x100, 0x7, 0x0, 0x8001, 0x1], 0x2, 0x80000}) (async) ioctl$KVM_NMI(r6, 0xae9a) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3150.326530][ T5617] usb 3-1: reset low-speed USB device number 110 using dummy_hcd 15:13:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400dcd8ac8cf1b2857168415705602e000102090000052406000105240800000d240f010000000000000075a9778c01000000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x6e, 0x0, 0x0) [ 3150.427598][ T4914] UDC core: couldn't find an available UDC or it's busy: -16 [ 3150.457120][ T4914] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3150.471189][T23633] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 3150.480583][ T4899] UDC core: couldn't find an available UDC or it's busy: -16 [ 3150.490648][ T4899] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3150.572368][ T4905] UDC core: couldn't find an available UDC or it's busy: -16 [ 3150.580228][ T4905] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:16 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x800969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r4 = signalfd(r3, &(0x7f00000004c0)={[0x10001]}, 0x8) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0xf7, 0x4, 0x3f, 0x8, 0x2, 0x1, 0xf9, 0x4, 0x4, 0x5, 0xcf, 0xc3, 0x7, 0x40, 0x3, 0x1f}}) [ 3150.791202][ T4914] UDC core: couldn't find an available UDC or it's busy: -16 [ 3150.800681][ T4914] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3150.805280][ T4930] UDC core: couldn't find an available UDC or it's busy: -16 [ 3150.831400][ T4863] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3150.839028][ T4930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3150.921291][T23633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3150.929677][T23633] usb 5-1: can't read configurations, error -61 15:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfa, &(0x7f0000000140)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f97510516019a52308f6be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b14c5ff745f2213f0e36b5c4ef5797154d9dde35814b928986b274a1ae95cee6b173c4f7e9c17e1d903ea8183c8d0541e2decdb3081101f8fb10ee981d45f10151a6694cdbcda8f20485cfa40d592476e6c0e615c75a1516f40318ec795093a113e746a05d26d4a901b7ab7bac63b49ac900d5b28cc87fbaa97ba78f82254a7cbc") [ 3151.078104][ T4930] UDC core: couldn't find an available UDC or it's busy: -16 [ 3151.091211][ T4930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3151.105310][T23633] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 3151.216177][ T4942] UDC core: couldn't find an available UDC or it's busy: -16 [ 3151.221557][T13827] usb 3-1: USB disconnect, device number 110 [ 3151.315404][ T4942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3151.560003][ T4939] UDC core: couldn't find an available UDC or it's busy: -16 [ 3151.570488][ T4939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3151.570987][T13827] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 3151.591303][T23633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3151.599681][T23633] usb 5-1: can't read configurations, error -61 [ 3151.609278][T23633] usb usb5-port1: attempt power cycle [ 3151.961136][T13827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3151.972133][T13827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3151.982813][T13827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3151.993599][T13827] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3152.003548][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3152.032498][ T4863] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3152.053781][T13827] hub 3-1:1.0: bad descriptor, ignoring hub [ 3152.060164][T13827] hub: probe of 3-1:1.0 failed with error -5 [ 3152.061104][T23633] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 3152.081766][T13827] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3152.088120][T13827] cdc_wdm 3-1:1.0: Unknown control protocol [ 3152.351350][T23633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3152.359984][T23633] usb 5-1: can't read configurations, error -61 [ 3152.424900][T27183] usb 3-1: USB disconnect, device number 111 [ 3152.530994][T23633] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 3152.811676][T23633] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3152.820627][T23633] usb 5-1: can't read configurations, error -61 [ 3152.828650][T23633] usb usb5-port1: unable to enumerate USB device 15:13:18 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000600)="430f009d0000400142c3f30f0966ba2000ed420f07b9c30300000f320fc7aaf24e000066baf80cb85f702181ef66bafc0cec67f30fc7300f01c2", 0x3a}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000540)="c401c05c5d06440f01b50a0000000f20d835200000000f22d82e440fc75df8c4e179e6d5f4460f0fe994b9800000c00f3235010000000f30c44129ef1a48b800000000000000000f23c80f21f835080070000f23f8", 0x55}], 0x1, 0x1, &(0x7f00000005c0)=[@cr4={0x1, 0x200004}, @cr0={0x0, 0x40000000}], 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502df0000000000000126c0d673b90d1ddd7abd4409025c00020100f92a090400000102090000053306000105240800000d240f0100000000000000000006241a200000090581164ccc963fa17c425f3813b6dcf53fffab8d5990b65c46f41b85821a478df4939e289ce18b6e5069afb0637b3a256a0274d74c2f4869623514b40000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x28dd, &(0x7f0000000640)={0x0, 0xf144, 0x14, 0x2, 0x3b6}, &(0x7f0000046000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 32) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) dup(r0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x1, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b9cfdb"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfb1, 0x800, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x2c}, [@obex={0x5, 0x24, 0x15, 0xa07}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3d, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0xf8, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x0, 0x1, 0xff, 0x4}, 0x7b, &(0x7f0000000180)={0x5, 0xf, 0x7b, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7f, 0xf, 0x1c6e, [0x0, 0xffffcf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x19, 0x6, 0x1, 0x20, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x401, 0xf0f, 0x7, [0xc0f0, 0xf, 0xc0, 0x3f07, 0xff00c0, 0xc180]}, @generic={0x2c, 0x10, 0xb, "79a98304bf50ba718bd14c189e9cc9631e6a3073ec775b61d23f8e4c4465b7ca1e30f6365ae545a72e"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x812}}]}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:13:18 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x800969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r4 = signalfd(r3, &(0x7f00000004c0)={[0x10001]}, 0x8) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0xf7, 0x4, 0x3f, 0x8, 0x2, 0x1, 0xf9, 0x4, 0x4, 0x5, 0xcf, 0xc3, 0x7, 0x40, 0x3, 0x1f}}) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x800969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) signalfd(r3, &(0x7f00000004c0)={[0x10001]}, 0x8) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0xf7, 0x4, 0x3f, 0x8, 0x2, 0x1, 0xf9, 0x4, 0x4, 0x5, 0xcf, 0xc3, 0x7, 0x40, 0x3, 0x1f}}) (async) 15:13:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfa, &(0x7f0000000140)="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") 15:13:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0xa3e, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x5000) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="640f83fcff0f0966b9800000c00f326635008000000f300f380b5208bad10466ed0f20c06635000000400f22c066670f23740fc7586bf65f037000", 0x3b}], 0x1, 0x2, &(0x7f0000000180)=[@efer={0x2, 0xad00}, @dstype0={0x6, 0x5}], 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0xa3e, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x0, 0x0) (async) pipe2(&(0x7f0000000040), 0x5000) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="640f83fcff0f0966b9800000c00f326635008000000f300f380b5208bad10466ed0f20c06635000000400f22c066670f23740fc7586bf65f037000", 0x3b}], 0x1, 0x2, &(0x7f0000000180)=[@efer={0x2, 0xad00}, @dstype0={0x6, 0x5}], 0x2) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3153.100086][ T4964] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.100251][ T4952] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.131050][ T4952] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.138498][ T4964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async, rerun: 64) syz_usb_disconnect(r2) (rerun: 64) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfa, &(0x7f0000000140)="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") [ 3153.182223][ T4964] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.210934][ T4964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) readahead(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3153.366199][ T4977] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.374793][ T4977] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.379402][ T4952] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.415117][ T4952] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.415549][T23633] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 3153.451619][ T4981] UDC core: couldn't find an available UDC or it's busy: -16 15:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002e25c72d191e118fa1ad20940000825020000b295f58a35cf4d7b99000000000000025c00020100f92a0904000001b59a0000052406000105240800000d24"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3153.487670][ T4981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.496607][T13827] usb 5-1: new low-speed USB device number 44 using dummy_hcd 15:13:19 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x800969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) r4 = signalfd(r3, &(0x7f00000004c0)={[0x10001]}, 0x8) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0xf7, 0x4, 0x3f, 0x8, 0x2, 0x1, 0xf9, 0x4, 0x4, 0x5, 0xcf, 0xc3, 0x7, 0x40, 0x3, 0x1f}}) [ 3153.599277][ T5002] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.624663][ T5002] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.669183][ T5007] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.682035][ T5007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.710402][ T4981] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.727766][ T4981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.772648][ T4981] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.806023][ T4981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:19 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f00000004c0)="0f47d56567660f38826f1a66b92b0200000f320f225e0f0866b86e0000000f23d80f21f86635400000200f23f8660fc7330f06f08366b46e640f1e13", 0x3c}], 0x1, 0x24, &(0x7f0000000580)=[@cr0={0x0, 0x20000000}, @cstype3={0x5, 0xd}], 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x4}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x199, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x187, 0x2, 0x1, 0xff, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a314649e"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x823, 0x2, 0x401, 0x1}, {0x6, 0x24, 0x1a, 0x3ff, 0x28}, [@mdlm_detail={0x2c, 0x24, 0x13, 0x2, "fbb4dbf4acaa2d02002e562f79946a565ce314222c601a4a0c57972875350a2593f40037f06a46eb"}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x80, 0x3f}, @mdlm_detail={0xde, 0x24, 0x13, 0x91, "294b321d702fbcf39344fa2cacc96370196b394629e35adb1ecd47fa4a5296e64de22118f4e092c77a64763df83789ee8fb84663b5663b37c86fff608e5c32b3a713d5d0741d31c3a493ab6bf76e1d6310d1a5040c8cf9569c91988a5d7e27cb6d799e26b6d85b09e83c71d2c943d9b53b9d18d788b23e6fba106c5726744228128f9fd4b215b1eb38e661e93e4ea122f606077826833d5e6993a35921a5a21a886a39e32948771a1ec08a1271835e8e712081516d59a0286a5b6abf20a6064ad408f36d29e9535e638af48c3d73c2fc65c34a59359aaec08450"}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x400, 0x0, 0x2, 0x80, 0x0, 0x200]}, @acm={0x4, 0x24, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x7f, 0x1}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xfe, 0x4, 0x1, 0x20, 0x6}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x7, [{0x2f, &(0x7f0000000640)=@string={0x2f, 0x3, "87de00c5b26c20882e5279999258dab360d1bd95f7b51b17dca82d0b86480e5a9fd9a39950e968578ec6388999"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xffe10c5144806926}}, {0x4e, &(0x7f0000000a40)=@string={0x4e, 0x3, "aedb60321546279c33ec5282195fe9bd87e3fc2231383f577280de7c3a789bfca07928e97ab48a8fe3af38793013d8aaf609b7bfbf9c1cc2562f5e6f0f636adcca46a85ebf28d64523d231e8"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3153.831841][T23633] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3153.852102][T23633] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3153.871814][ T4998] UDC core: couldn't find an available UDC or it's busy: -16 [ 3153.879889][ T4998] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3153.901152][T13827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3153.909762][T13827] usb 5-1: can't read configurations, error -61 [ 3153.922830][T23633] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3153.950949][T23633] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3153.980873][T23633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:13:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) dup(r0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x1, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b9cfdb"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfb1, 0x800, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x2c}, [@obex={0x5, 0x24, 0x15, 0xa07}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3d, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0xf8, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x0, 0x1, 0xff, 0x4}, 0x7b, &(0x7f0000000180)={0x5, 0xf, 0x7b, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7f, 0xf, 0x1c6e, [0x0, 0xffffcf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x19, 0x6, 0x1, 0x20, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x401, 0xf0f, 0x7, [0xc0f0, 0xf, 0xc0, 0x3f07, 0xff00c0, 0xc180]}, @generic={0x2c, 0x10, 0xb, "79a98304bf50ba718bd14c189e9cc9631e6a3073ec775b61d23f8e4c4465b7ca1e30f6365ae545a72e"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x812}}]}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) dup(r0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x1, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b9cfdb"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfb1, 0x800, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x2c}, [@obex={0x5, 0x24, 0x15, 0xa07}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3d, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0xf8, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x0, 0x1, 0xff, 0x4}, 0x7b, &(0x7f0000000180)={0x5, 0xf, 0x7b, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7f, 0xf, 0x1c6e, [0x0, 0xffffcf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x19, 0x6, 0x1, 0x20, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x401, 0xf0f, 0x7, [0xc0f0, 0xf, 0xc0, 0x3f07, 0xff00c0, 0xc180]}, @generic={0x2c, 0x10, 0xb, "79a98304bf50ba718bd14c189e9cc9631e6a3073ec775b61d23f8e4c4465b7ca1e30f6365ae545a72e"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x812}}]}) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) [ 3154.046524][ T5024] UDC core: couldn't find an available UDC or it's busy: -16 [ 3154.055556][ T4948] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3154.061217][T13827] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 3154.076321][ T5024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3154.092852][T23633] hub 3-1:1.0: bad descriptor, ignoring hub [ 3154.106425][T23633] hub: probe of 3-1:1.0 failed with error -5 [ 3154.126790][T23633] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3154.141347][T23633] cdc_wdm 3-1:1.0: Unknown control protocol [ 3154.204517][ T5027] UDC core: couldn't find an available UDC or it's busy: -16 [ 3154.219591][ T5027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3154.297478][ T5028] UDC core: couldn't find an available UDC or it's busy: -16 [ 3154.315085][ T5028] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3154.326375][ T5021] UDC core: couldn't find an available UDC or it's busy: -16 [ 3154.345907][ T5021] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3154.471187][T13827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3154.482796][T13827] usb 5-1: can't read configurations, error -61 [ 3154.490147][T13827] usb usb5-port1: attempt power cycle [ 3154.901192][T13827] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 3154.901709][ T5027] usb 3-1: reset low-speed USB device number 112 using dummy_hcd [ 3155.161468][T13827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3155.169575][T13827] usb 5-1: can't read configurations, error -61 [ 3155.321049][T13827] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 3155.443021][ T5030] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3155.581253][T13827] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3155.589363][T13827] usb 5-1: can't read configurations, error -61 [ 3155.596770][T13827] usb usb5-port1: unable to enumerate USB device [ 3155.939077][T17882] usb 3-1: USB disconnect, device number 112 15:13:22 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000003a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000600)="430f009d0000400142c3f30f0966ba2000ed420f07b9c30300000f320fc7aaf24e000066baf80cb85f702181ef66bafc0cec67f30fc7300f01c2", 0x3a}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000540)="c401c05c5d06440f01b50a0000000f20d835200000000f22d82e440fc75df8c4e179e6d5f4460f0fe994b9800000c00f3235010000000f30c44129ef1a48b800000000000000000f23c80f21f835080070000f23f8", 0x55}], 0x1, 0x1, &(0x7f00000005c0)=[@cr4={0x1, 0x200004}, @cr0={0x0, 0x40000000}], 0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) r5 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502df0000000000000126c0d673b90d1ddd7abd4409025c00020100f92a090400000102090000053306000105240800000d240f0100000000000000000006241a200000090581164ccc963fa17c425f3813b6dcf53fffab8d5990b65c46f41b85821a478df4939e289ce18b6e5069afb0637b3a256a0274d74c2f4869623514b40000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x28dd, &(0x7f0000000640)={0x0, 0xf144, 0x14, 0x2, 0x3b6}, &(0x7f0000046000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000000000109025c00052406000105240800000006241a200000090581164c00"/62], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000666000/0x1000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(r3, 0x2, 0x80, &(0x7f0000000040)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$setstatus(r5, 0x4, 0x40000) 15:13:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002e25c72d191e118fa1ad20940000825020000b295f58a35cf4d7b99000000000000025c00020100f92a0904000001b59a0000052406000105240800000d24"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:22 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f00000004c0)="0f47d56567660f38826f1a66b92b0200000f320f225e0f0866b86e0000000f23d80f21f86635400000200f23f8660fc7330f06f08366b46e640f1e13", 0x3c}], 0x1, 0x24, &(0x7f0000000580)=[@cr0={0x0, 0x20000000}, @cstype3={0x5, 0xd}], 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x4}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (rerun: 64) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x199, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x187, 0x2, 0x1, 0xff, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a314649e"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x823, 0x2, 0x401, 0x1}, {0x6, 0x24, 0x1a, 0x3ff, 0x28}, [@mdlm_detail={0x2c, 0x24, 0x13, 0x2, "fbb4dbf4acaa2d02002e562f79946a565ce314222c601a4a0c57972875350a2593f40037f06a46eb"}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x80, 0x3f}, @mdlm_detail={0xde, 0x24, 0x13, 0x91, "294b321d702fbcf39344fa2cacc96370196b394629e35adb1ecd47fa4a5296e64de22118f4e092c77a64763df83789ee8fb84663b5663b37c86fff608e5c32b3a713d5d0741d31c3a493ab6bf76e1d6310d1a5040c8cf9569c91988a5d7e27cb6d799e26b6d85b09e83c71d2c943d9b53b9d18d788b23e6fba106c5726744228128f9fd4b215b1eb38e661e93e4ea122f606077826833d5e6993a35921a5a21a886a39e32948771a1ec08a1271835e8e712081516d59a0286a5b6abf20a6064ad408f36d29e9535e638af48c3d73c2fc65c34a59359aaec08450"}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x400, 0x0, 0x2, 0x80, 0x0, 0x200]}, @acm={0x4, 0x24, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x7f, 0x1}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xfe, 0x4, 0x1, 0x20, 0x6}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x7, [{0x2f, &(0x7f0000000640)=@string={0x2f, 0x3, "87de00c5b26c20882e5279999258dab360d1bd95f7b51b17dca82d0b86480e5a9fd9a39950e968578ec6388999"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xffe10c5144806926}}, {0x4e, &(0x7f0000000a40)=@string={0x4e, 0x3, "aedb60321546279c33ec5282195fe9bd87e3fc2231383f577280de7c3a789bfca07928e97ab48a8fe3af38793013d8aaf609b7bfbf9c1cc2562f5e6f0f636adcca46a85ebf28d64523d231e8"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) dup(r0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x1, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b9cfdb"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfb1, 0x800, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x2c}, [@obex={0x5, 0x24, 0x15, 0xa07}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3d, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0xf8, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x0, 0x1, 0xff, 0x4}, 0x7b, &(0x7f0000000180)={0x5, 0xf, 0x7b, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7f, 0xf, 0x1c6e, [0x0, 0xffffcf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x19, 0x6, 0x1, 0x20, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x401, 0xf0f, 0x7, [0xc0f0, 0xf, 0xc0, 0x3f07, 0xff00c0, 0xc180]}, @generic={0x2c, 0x10, 0xb, "79a98304bf50ba718bd14c189e9cc9631e6a3073ec775b61d23f8e4c4465b7ca1e30f6365ae545a72e"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x812}}]}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) dup(r0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x1, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b9cfdb"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfb1, 0x800, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x2c}, [@obex={0x5, 0x24, 0x15, 0xa07}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3d, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x8, 0xf8, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0x0, 0x1, 0xff, 0x4}, 0x7b, &(0x7f0000000180)={0x5, 0xf, 0x7b, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7f, 0xf, 0x1c6e, [0x0, 0xffffcf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x19, 0x6, 0x1, 0x20, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x401, 0xf0f, 0x7, [0xc0f0, 0xf, 0xc0, 0x3f07, 0xff00c0, 0xc180]}, @generic={0x2c, 0x10, 0xb, "79a98304bf50ba718bd14c189e9cc9631e6a3073ec775b61d23f8e4c4465b7ca1e30f6365ae545a72e"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x812}}]}) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) 15:13:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0xa3e, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x0, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x5000) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="640f83fcff0f0966b9800000c00f326635008000000f300f380b5208bad10466ed0f20c06635000000400f22c066670f23740fc7586bf65f037000", 0x3b}], 0x1, 0x2, &(0x7f0000000180)=[@efer={0x2, 0xad00}, @dstype0={0x6, 0x5}], 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3156.313788][ T5058] UDC core: couldn't find an available UDC or it's busy: -16 [ 3156.346382][ T5059] UDC core: couldn't find an available UDC or it's busy: -16 [ 3156.358779][ T5043] UDC core: couldn't find an available UDC or it's busy: -16 [ 3156.363317][ T5058] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3156.424590][ T5043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3156.479830][ T5059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x51f6, 0x0, 0x3, 0x4, 0x0, r3}, &(0x7f0000667000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="baf80c66b8e6242c8266efbafc0cb0d6ee0f015c032e2e0fa0ea00385a00baf80c66b8ec23728b66efbafc0c66b80000000066efdcfe2e65660f38812866b8010000000f01d9ba4000ed660f65750e", 0x4f}], 0x1, 0x0, &(0x7f0000000180)=[@cr0={0x0, 0x28}, @cr4={0x1, 0x321}], 0x2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002e25c72d191e118fa1ad20940000825020000b295f58a35cf4d7b99000000000000025c00020100f92a0904000001b59a0000052406000105240800000d24"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xfffffffd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3156.520254][ T5059] UDC core: couldn't find an available UDC or it's busy: -16 [ 3156.543601][ T5059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3156.650415][ T5038] UDC core: couldn't find an available UDC or it's busy: -16 [ 3156.681005][ T5617] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 3156.714742][ T5038] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3156.821910][ T5043] UDC core: couldn't find an available UDC or it's busy: -16 [ 3156.874690][ T5043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001100), 0x680000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001540), {[{{@arp={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 0x1, 0xa, {@mac=@random="551e9241be9f", {[0xff, 0x0, 0xff]}}, {@empty, {[0x7f, 0x0, 0xff, 0x0, 0x25492523e5a85fe7, 0xff]}}, 0x2, 0xa1e6, 0x200, 0x8001, 0x6, 0x9, 'veth1_to_hsr\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x252}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @loopback, 0x1, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @remote, 0xffffffff, 0xff, 0x2, 0x0, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8001, 0xff, 0x1, 0x7d2, 0x9, 0x1, 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @private=0xa010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp(0x2, 0x2, 0x73) ptrace$cont(0x9, r1, 0x8e6, 0x80000000) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x5, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000001300)=[{0xe8, 0x103, 0x6, "9b552511229774beed99662fc6c2b118fae0bce991018ed17550ebac5c85c3316181963ee2872b12e5e3e6c86fe8e20a1abcc7d6c647ed7b622aec117ca649bfd2ad50d96eb277a7f2c54f2346232d1a61b5f419bfb2b6921a5e8a55fbef2038401bdf169903889537561739c1dd03bfa8c01ccdc648dfdcb76b0a479eaceb9fd81a9bf894268a4e904274c33dc40f1e156e2fc1dd758b7e4fbe30931d79c0cb3124f371c01e57c16c12d4fe39ef46d0625d3d9fa369dcb299fd1e622c8779b7c68707d319947c834ab7caeae282b93cf20b29b655747e"}], 0xe8}}, {{&(0x7f0000001400)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)="0fd076ce6d7e15bbab56d472a8f735dbd19b2777b7a94ef2b72b72050fa530f11c82bbd8c32fc13a66bbf24858f4450c1825c3f2b6f654953f65c035736e8e2512c8f9f37def94", 0x47}, {&(0x7f0000001500)="07726b5b8c688e102933e1122dc76037590acf4876b7bbe78693d8615058b381b90b2a3a1eebcf36b242444d1be015c8302ea1462e811b8f808abe21", 0x3c}, {&(0x7f00000011c0)="b90b9ad9f0fcdb36f126a9145b9fa2a3f72b30352d270ee571fa4b7cb7c235eccdb295add5a3b98685edbd95ea57d418fffbc5c88bca4e44b2ddcb3dcb3ba8cbc37bfff41a57dd9ede2c11c658984d39ebe05fcdd13e4ccedf35e40c8cd160b686c123725774e505a3274d63af508cc019cbd5896c5de30c726a75cc483afe79a593c2d03b8d7753276643d46673959c1e5867ebf2185010", 0x98}, {&(0x7f0000001580)="e2315267459bb01413ad1f55c3d9a7573c16be775e92837af6c80bd58860cf79da16bea335e6dd396dffe40686ecc3", 0x2f}, {&(0x7f0000002080)="09e1a0fd2d60fc2a2074699367fcc88fc747327f560da6398e4058692e75ed11df038d0639c1e76235b95ead6835c46cf8e33ad6d0fd23a35076d3584589a22366bfe9aa645b5aeac4a66b5a7d0a0d7455711171ae50175963196f33182e7e6ea7019f57684c761a4435d15cd06b17658685d87a3ce379f4e38367db825c513b2e01dc2ea506e22c948ac882dc0e982aab7ff4b3d28341443b2cc83d078b45202bd24482f24a139e8e922766de", 0xad}, {&(0x7f0000001680)="867d50005c18da7d192a22008a9a1ea132bb087b1e304fd6df1c4cd193a9bcd019710b0fccf810a9ed183248bc5290e06b371ba64c944692766ec4b87e7a2a7f97dc8396025fde956f2e035dacf3c1bd6f8c726e54945cb3221220e8a1b7237e55c074ba5cb8b5f81941aca9af47136200a5ddaa9350dc6ad66d4767169200012a4b42b359bfdf", 0x87}, {&(0x7f0000001740)="5936c8032d58928232cb1845c160686095e9c6754b7f99f23e396995ef776484", 0x20}, {&(0x7f0000001780)="717bcd92ac337d84824f5048aaead29056cd22d883b4395487afa3a2bded98e4fcb79dfb5705a7090618e45ee8e2f9ed554be03c01d51b0d60ff691669e75a3b0567520f4dd801138daae8002d481e864786c702377ac8e64930cc42b8878adf8dbe5b131c0c55f764617c42e1d922972fd46258eab86caf860fc6a14f32b9", 0x7f}, {&(0x7f0000001f00)="a7575b854c845d5acb322a889cb9fed1fa2c468ea35d60a90a4af739b9e965b7a5bb18937a5496d1dccb21d54e65375a7134986cfd6af07a789338db501642fe51ff7050f4451bd93e5bff538cd8917866c9d8ec8d7fea1b66bcda", 0x5b}], 0x9}}, {{&(0x7f0000001800)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000019c0)="28b0a21aecfcc8690f048544a567ef4c58f38517546139ef6c9966bf0febcd18d99a47014314c52c898b2abcdd91a11418477d67ac25668aedfa3be9e45c006b56cda868af80352dd6a42caa695a314027838f79b1a025ac3a76674ac40f81c365654879bcc320bf86522ae60e026f61614d04b62dc8a28ee2155d64740213147c", 0x81}, {&(0x7f0000001a80)="99dd706e4883f9418f2249c306b722f7573e6782e3182e7bc299259077f572e499aee2a0a67857a1dcbd7c3e272b4b2637d9ceb5212adbb0aa6663d2b6d31487b72f563735ac0f9e4cfafb70ac2e82842c05dd553d17dcfc8a458c48843e2f75460e5100305f7c367f8af046e602465530e444036b255c6db1691cb80017876bbfad1e790fd24bda7a69f0f08f4803ebe32247f1153c613967b887d7ee1016036c15d5f44c244f5ed9519876c720aeaa9493f12f03f6d392d26f91a23e648a30c06c05abfb3103c1f805b637345afa01fb32b200461b658d12c9f01a069cce0f13a4de5f15cf65dfae48811f42d6e0160c69f69e", 0xf4}, {&(0x7f0000001b80)="7b2fb9ec42f1b71a268eb17ddbe26ac4000632efabf8782501eff0e317784f9cdd9f770443b15c02033358148290431898912c807fcc7d5cc5f3e786e4b434233fa20a059bc46eb113286f53969c6b5aa7f362eeeeb243916f9bd43cab2f9a0e8ce12ed41e08db02e5dd17bd4a04c426a29ed977458fa099d6cca1949e84fb834768aa128dffe4d441d04a999160ccce66b8a9a2d6a106000000d74099cda5a428", 0xa1}, {&(0x7f0000001280)="3f56c7a3751f7cd93e591d2feb8f455c06b7d9cc9f93d8ee310f6802dd65ca3967fd8ebad9a5244f589814746d807faeed11394fadda3afba5c58b5b79bd686b63fb75cb", 0x44}, {&(0x7f0000002140)="e7d774e7fdc49bc205cb600bf40216480e8cb423714c934bf97b8f75cb7c615bba8ad8242bd1967f296ec67e0cd0cd05896e1ec74cf53b4ad51e53a95d079d4579a1e1d581251eb9bca4f90538d1b82cc641d5b4a34ef9f88ddca813f0e6e415f7198814a60d36de1a31d1066448f7b12032ad6c9c8f1bf241116b67e8c824dedbcafd36abf9d0cea907776b5c16372b4d0c42852f28db9eae2bf2dad52ad35a23449aa062333fe93cc36aef3a02843385af423a17db2f9605e5e839b84b0a0c1b502c95123c7c79cd1b7b59a9b6ee855c7c0f098fee2f15d47645dd43f022a20ceb6dd94bd07afdd2cc5c3803411f580000", 0xf2}, {&(0x7f0000001d80)="1da6557754dd9629b69d7d18ab1f8b2796aec9f9b870", 0x16}, {&(0x7f0000001dc0)="5bc3a36b65db5182108439", 0xb}, {&(0x7f0000001e00)="3bb63eb7800c801627ebc2580944b6b1ff6605c7c37bda0459258f21384741e06f48da69c763f2287b68346cb81d019975fc0099ed9e720b69149fdf3351a0379cd8df4caf133ed29f74a2dd07342664d522320cce28ebbfc89451e85882b8191e5fd73c252a3333bdc52c03827fb3ea17d85a4aea2e545c1e03efb38f58a6e0a070f9d60098b36fe48217271b3123bad4cb057a16b36ea336d72d07b238c72ae47accd115bc42376c96c7781a0c94f66e3a1bd1a00b81aca86a5e337b6ee7c8006ce370dcbc092d9c3b2689", 0xcc}, {&(0x7f0000000880)="04bca73c262bc30be85afc82a4b957f3246d6608ccbfb4086d6da27c1a35acbd25d6a281d4a8bdf26e41b4fd86b730b5445925190e6dbc0d5bc9ae84616836021ef1a4c8fa38", 0x46}], 0x9, &(0x7f0000001f80)}}], 0x3, 0x20040000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000a80), 0x181300, 0x0) close(r4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_connect(0x6, 0x7b2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa3, 0x74, 0xd5, 0x40, 0x557, 0x2007, 0x6177, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a0, 0x4, 0x9, 0x2b, 0xc0, 0x9, [{{0x9, 0x4, 0x59, 0xff, 0x7, 0xb1, 0x75, 0xd9, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1f, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x59, 0x9, 0x3, "b002e0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x7, '^q', "34f9d8"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3ff, 0x3ff, 0x4, "95af2420f4"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x20, 0x1f, "d213"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x3, 0x2, 'K>n$'}]}, @hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x71c}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x20, 0x9, 0x1f, [@generic={0x13, 0x24, "99f85b4083c55b5db5d2c722d486b19f07"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x44, 0x8, 0xff}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x4, 0xff, 0x2, [@generic={0x76, 0x7, "5f6f4959719cfcb81a87f30f6e79a1ca6cab2f7613fc014994b122f9368935cdab2d81173c8cfb9459d3d006886fd9921777e641bc494338ba449f4c07811c8b1a398d98a4320302185c54cce1b411cba6a567eb71f0408759f03f0804c76574a3a9a0eebc1f2d4400957882af92a2f49f14ca32"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x44, 0xc, 0x3ff, 0x1, 0x2e, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0xa, 0xcf9b4bfabbfea3ce, 0x20, 0x9, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x40, 0x7b, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x5}]}}]}}, {{0x9, 0x4, 0x1c, 0x7f, 0x3, 0x9c, 0xf2, 0x6a, 0xe1, [], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x9, 0xe1, 0x81}}, {{0x9, 0x5, 0x6, 0x9, 0x8, 0x8, 0xc3, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3f, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x40, 0x80, 0xc, 0x5f, 0x54, 0xde, 0x1, [], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xf9, 0xff, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x2}, @generic={0xf8, 0xf, "37fe92ed00124d4a6eb04400d4059ea53745f49f120b51e3877e414c6871c0a10e0f7d22915d4edfacbeaaf9f4f33b4a25b9be1071efb25cae705d6cc4ad5bb31a710549ad4b06e3856ecc49ea0b5ff5a788616d45dde2c2b0b62474cfd8cdaec604cedfdc01e51bc1da8ec87580852cbb2896eebd1e844748c21370603c17c066eb09b721fdcb617f3a4c880e8f91187adac6d7e66370fa04c91e3afc4b4313ca4654dd100453788ecc5ebd9dd18c5df02eb8bed606a61d359ad736cd51499db7fc5d2ba254e4b1e44e17dbd1a5b5db5a4cc61f1636f8a24ac401c003a69422cea13a0a25687b386daf74404318450dcc14c88b3d7b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x38, 0x5, 0x5, [@generic={0xe9, 0x9, "ee0121a6088e6414c22326e1232f15dfd0f854ad958d49e4447ee7f6abfe4884d2874679f795e2afbf9a2d3ed408a433d030e91b60dc3cd957f9578dac87a9af97d9675418ec219c49327818f61741e70036c2f1e4a7d6f0fe5355e1b7284a10b12e04d6baa8664bfb75a420201c85bcd3a55b2083ca956d5c535859a3ee7c68b96ce604beff001b78d64b480c176f05f0a5e79931717d75fef3dfaf2ec4e473a520e50c4057e848b16abf069153d4d7d22a0cc51edea28ef6371939ba91e64328be5a6568040388f8a491ebde36bfa8286c8022625f0fd0064953ecaeb6c03d3b0d3dc8d9a3ff"}, @generic={0x28, 0x11, "9de630817116a2be1231af79a41c8c4506cb919cffaddd412983203362a0621f0abdabb77b6b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7f, 0x9, 0x0, [@generic={0xb7, 0x21, "709aff62c893d769d114c5fc7d9c133b6b45fa69daf6f65af498ae6df2be236691e8458369d99fbf284c9e34b185b5e56e21e5b22f96d509bbab22f81104ce200a0ce693d27ccaf519406a087c37e40673a600a35f8673ea350357f164b4a6897de51c282acfc826296574bf67df378243ddd0e1944985bf016e9665916c1211df9f27dd8ad89c97ea438b48dcde458e98ae5817051b102090b0cdeaf6807ede4ecf8af55bd93a89c66368cc6676295525e4595740"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x1, 0xa7, 0xc0, [@generic={0x40, 0x31, "9ed44490b5fba7c542e13ed50e711ae45b163eb6fc57d2e689b7c969b27fb96fb77dfa34c2fb6afa64551790b0781aa7900225198df3b38dba384bbb9c77"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}]}}, {{0x9, 0x5, 0x2, 0x5abfed573469db23, 0x3ff, 0x0, 0xfc, 0x8}}, {{0x9, 0x5, 0xf, 0x11, 0x40, 0x2, 0x7f, 0x3, [@generic={0x82, 0x6, "76b48be9f69bf7b59917960ccbde2b2eaefd993de3ec28490593881c259aebad8005ec653d8045989ba4b13bef318c5181e21db15c4250f28a960b5f6e129952790ccb46b8113032818e169f1aebd44f8da011bd1f5e29ec047d4bace6288f7a357b5838fd9acbdf47d06e3de7419af59a2571cd2776105754828de52d85c905"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0x6, 0x0, [@generic={0x79, 0xf, "35655243983aeea37cf5ff9adff7f72eb534dd5d752428ba9a134e73e081afeb00d967f8f37b81fb340ea421632ba3720a4a2d02ece2d7007867ece02bdf15fb2008de1d233d57bb4cef1fdfe715e310fe5554dc18c31a6d1692c4c405aeb0a74ee046f779bf48e2946783796bb8cee46718408f7f18dc"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x2, 0xb8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x363}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x9, 0x4, [@generic={0xf2, 0xc, "8514cf1ddf9e21e31289553f70a1382ca07febfa0c8967a4dbfbdf2aca33dc3dd8fe95205cd899b380f8ac52591e98bc054f02991382924ce67f55f37cb6d50fbe365dbfd04380be06bf41e12806a1ffe87599a1692be6a550e35c102fe203481788936f4cfd673a87781708298c480869d2fb6528b209735f2bb20c7334995633798a7c8fbf71ba842f552553459e917f3b0ddae303ad1c9d4df4e7fbd5a148ab3cc9c4a2f0062c3e1f48c56234ebdd324898cdca0648a71dab3b1c19feab4df9e7bc4bf9175383b5ce06d161355296ea740fbf89a1ce78e30cdd20448e11a90f1000"/240}, @uac_iso={0x7, 0x25, 0x1, 0xb6f9fa11200908a8, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x53, 0x40}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x9, 0xff}}]}}, {{0x9, 0x4, 0xa3, 0x1f, 0x5, 0x7e, 0xa1, 0xb3, 0xfe, [], [{{0x9, 0x5, 0x8, 0x4, 0x400, 0xcc, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x2, 0x5, 0x80}}, {{0x9, 0x5, 0x4, 0x1c, 0x3ff, 0xf9, 0x5, 0x5, [@generic={0xd, 0xe, "8017ecdd79ff991dbc59b9"}, @generic={0x4d, 0x30, "0b50a415d970c9a11bc7a837642b256a225d70f6848a3d3b436316523c025a0c152840772112a1dcf30710393480807e89d7ecd7730b4824595dc0f01a6ffcd915371b64d3e127b8aae354"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7e, 0xc1, 0x3f}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x4, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6b}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x3f, 0x7f, 0x6, 0xff, 0x4}, 0x79, &(0x7f0000001040)={0x5, 0xf, 0x79, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2d3cf13a79d0076aac403f976f8005e0"}, @generic={0x37, 0x10, 0x4, "1edf86a6b8b92f54c6b57d5cb40d7301bf07d5f6f4cb7d70a53b13b78c6dd97b60d0cdf5984ad5f91fb47ba933539b8bfc7c5a8b"}, @ss_container_id={0x0, 0x10, 0x4, 0xff, "bbaca32af0c2b2d8754bbef5c2d99070"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x4, 0x80, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "20fe8169e02c51142ecaa1591fef50c8"}, @ss_cap={0x0, 0x10, 0x3, 0x0, 0x8, 0x1f, 0x20, 0x6}]}, 0x7, [{0x4, &(0x7f0000000900)=@lang_id={0x1f, 0x3, 0x100c}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0xc0, &(0x7f0000000980)=@string={0xc0, 0x3, "f70bf9cea3e59de22671365ab63274ae8851f51592cd140ca8e4f5c9c8b6e17fb422a8d94d4bd3af96282fe5914eb2b45199c922daf82374e87e16b4269071d0124d740a887e66f995fd6b80da788c09165f4c10472ed4e938f91e8fa6107829d790aa632cd60e24031318fa1fcc076680e1d22b34a68733ebbb123b5bbd9a52e973ffb46bce5a199ed50e3ff0b4f093b4d1a3e0d1a93de06c4a97009abb84838e3c31be0fb27aecc8e2f05b504b754cd25734bf2883952a9b5ab5375d8f"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x443}}, {0x54, &(0x7f0000001000)=ANY=[@ANYRES64=r3]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x84b}}, {0x97, &(0x7f0000000b40)=@string={0x97, 0x3, "488838bbb351b63b6e56d00bb3776b5393d4627f7857dacd557843d3e83bde624b5a25481048c23153fd0fd338f7907454a96e595d117020ba258e9cbdc3f4f754b6ae8ab91d2bbf350011d58fa1a30aa80f0fd9d708094ef8a77f8ca5de947fa91b9ca6a6feff8a31df55f666e74992d82580af563f3ffdac9645dc46d69c286db5d8606da24eb32ec896a93888256779861a05d4"}}]}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1d, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x6c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x0, 0x1, 0x1f, 0x40, 0x3}, 0xdf, &(0x7f0000000d00)={0x5, 0xf, 0xdf, 0x2, [@generic={0xcf, 0x10, 0x4, "dd2d577b1ba5b41343e4ce427683b24f900803fc9aa45381d30c3eea23baafdcec76ba3e373fbe6956bb03494148af80d6b7f39199b35bcc8f715a442cc900ee65af8c6e22ec2f31b7cc06c3f592ec8e057012a5aff6f013b2c7dd0558410c655f338c7c993200f3f6db86d3c1cb3ecb72b6dd743023853e7bf743d659888127505bbf074d7f443abc9807071305312687d876e05e2dfbe68547e3a189a65e1f1de5a45d43d47fc33541344587b9fb29324d0c89ee62c01972b406aabd0fe80ba558d5ff69d1f4d2a92e6079"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x3, 0x4, 0x8}]}, 0x3, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x41d}}, {0x101, &(0x7f0000000e80)=@string={0x101, 0x3, "bbefaaff5cc59e7f0eefd8d9e20cba8f144c666e602f6edd3a367ba1132a2e4939a482725c1c9ed9913cb84ef60abd42620ff5d7321a2f804b1dbeaf979936ac34471d29848de3221219d9a9fb1dfee26e6a1764c09063ba59fac780fd9f5172f29460b255e1855a26c13068131bd2e8c7eedbe8e2b07007439c56703b0942ef83066067aad24a1bd1791bd62185c9acd698ccbf6fcab929803fb6a4bf8437692e4de35adccd4ff48d4f41ccd04a9ab3107a4bc12f8387966bbe6218fe54e388212d581e852ad3bbc21cd3d1201d095f9a8f767991e9b10ed14604b3da9c45fc70c2cafa03f16f2f3f3773f1efc0a0f781a58ffb8e1d2ad7a5ad3041cfda5b"}}]}) [ 3156.963337][T13827] usb 3-1: new low-speed USB device number 113 using dummy_hcd 15:13:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3157.088471][ T5617] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3157.099090][ T5617] usb 5-1: can't read configurations, error -61 [ 3157.207784][ T5107] UDC core: couldn't find an available UDC or it's busy: -16 [ 3157.234155][ T5107] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3157.264487][ T5108] UDC core: couldn't find an available UDC or it's busy: -16 [ 3157.275121][ T5617] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 3157.319126][ T5108] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3157.351022][T13827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3157.381056][T13827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3157.390551][T13827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3157.432460][ T5108] UDC core: couldn't find an available UDC or it's busy: -16 [ 3157.440333][ T5108] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3157.461060][T13827] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3157.470720][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3157.488316][ T5103] UDC core: couldn't find an available UDC or it's busy: -16 [ 3157.501093][ T5103] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3157.553712][ T5074] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3157.592277][T13827] hub 3-1:1.0: bad descriptor, ignoring hub [ 3157.598924][T13827] hub: probe of 3-1:1.0 failed with error -5 15:13:23 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f00000004c0)="0f47d56567660f38826f1a66b92b0200000f320f225e0f0866b86e0000000f23d80f21f86635400000200f23f8660fc7330f06f08366b46e640f1e13", 0x3c}], 0x1, 0x24, &(0x7f0000000580)=[@cr0={0x0, 0x20000000}, @cstype3={0x5, 0xd}], 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x4}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x199, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x187, 0x2, 0x1, 0xff, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a314649e"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x823, 0x2, 0x401, 0x1}, {0x6, 0x24, 0x1a, 0x3ff, 0x28}, [@mdlm_detail={0x2c, 0x24, 0x13, 0x2, "fbb4dbf4acaa2d02002e562f79946a565ce314222c601a4a0c57972875350a2593f40037f06a46eb"}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x80, 0x3f}, @mdlm_detail={0xde, 0x24, 0x13, 0x91, "294b321d702fbcf39344fa2cacc96370196b394629e35adb1ecd47fa4a5296e64de22118f4e092c77a64763df83789ee8fb84663b5663b37c86fff608e5c32b3a713d5d0741d31c3a493ab6bf76e1d6310d1a5040c8cf9569c91988a5d7e27cb6d799e26b6d85b09e83c71d2c943d9b53b9d18d788b23e6fba106c5726744228128f9fd4b215b1eb38e661e93e4ea122f606077826833d5e6993a35921a5a21a886a39e32948771a1ec08a1271835e8e712081516d59a0286a5b6abf20a6064ad408f36d29e9535e638af48c3d73c2fc65c34a59359aaec08450"}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x400, 0x0, 0x2, 0x80, 0x0, 0x200]}, @acm={0x4, 0x24, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x7f, 0x1}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xfe, 0x4, 0x1, 0x20, 0x6}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x7, [{0x2f, &(0x7f0000000640)=@string={0x2f, 0x3, "87de00c5b26c20882e5279999258dab360d1bd95f7b51b17dca82d0b86480e5a9fd9a39950e968578ec6388999"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xffe10c5144806926}}, {0x4e, &(0x7f0000000a40)=@string={0x4e, 0x3, "aedb60321546279c33ec5282195fe9bd87e3fc2231383f577280de7c3a789bfca07928e97ab48a8fe3af38793013d8aaf609b7bfbf9c1cc2562f5e6f0f636adcca46a85ebf28d64523d231e8"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text16={0x10, &(0x7f00000004c0)="0f47d56567660f38826f1a66b92b0200000f320f225e0f0866b86e0000000f23d80f21f86635400000200f23f8660fc7330f06f08366b46e640f1e13", 0x3c}], 0x1, 0x24, &(0x7f0000000580)=[@cr0={0x0, 0x20000000}, @cstype3={0x5, 0xd}], 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x4}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x199, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x187, 0x2, 0x1, 0xff, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "a314649e"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x823, 0x2, 0x401, 0x1}, {0x6, 0x24, 0x1a, 0x3ff, 0x28}, [@mdlm_detail={0x2c, 0x24, 0x13, 0x2, "fbb4dbf4acaa2d02002e562f79946a565ce314222c601a4a0c57972875350a2593f40037f06a46eb"}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x7, 0x80, 0x3f}, @mdlm_detail={0xde, 0x24, 0x13, 0x91, "294b321d702fbcf39344fa2cacc96370196b394629e35adb1ecd47fa4a5296e64de22118f4e092c77a64763df83789ee8fb84663b5663b37c86fff608e5c32b3a713d5d0741d31c3a493ab6bf76e1d6310d1a5040c8cf9569c91988a5d7e27cb6d799e26b6d85b09e83c71d2c943d9b53b9d18d788b23e6fba106c5726744228128f9fd4b215b1eb38e661e93e4ea122f606077826833d5e6993a35921a5a21a886a39e32948771a1ec08a1271835e8e712081516d59a0286a5b6abf20a6064ad408f36d29e9535e638af48c3d73c2fc65c34a59359aaec08450"}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x400, 0x0, 0x2, 0x80, 0x0, 0x200]}, @acm={0x4, 0x24, 0x2, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x7f, 0x1}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0xfe, 0x4, 0x1, 0x20, 0x6}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x7, [{0x2f, &(0x7f0000000640)=@string={0x2f, 0x3, "87de00c5b26c20882e5279999258dab360d1bd95f7b51b17dca82d0b86480e5a9fd9a39950e968578ec6388999"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xffe10c5144806926}}, {0x4e, &(0x7f0000000a40)=@string={0x4e, 0x3, "aedb60321546279c33ec5282195fe9bd87e3fc2231383f577280de7c3a789bfca07928e97ab48a8fe3af38793013d8aaf609b7bfbf9c1cc2562f5e6f0f636adcca46a85ebf28d64523d231e8"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40c}}]}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:13:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000000000109025c00052406000105240800000006241a200000090581164c00"/62], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000666000/0x1000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(r3, 0x2, 0x80, &(0x7f0000000040)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$setstatus(r5, 0x4, 0x40000) [ 3157.666681][T13827] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3157.681173][ T5617] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3157.689675][ T5617] usb 5-1: can't read configurations, error -61 [ 3157.723938][T13827] cdc_wdm 3-1:1.0: Unknown control protocol [ 3157.749379][ T5617] usb usb5-port1: attempt power cycle [ 3157.815192][ T5120] UDC core: couldn't find an available UDC or it's busy: -16 [ 3157.820789][ T5113] UDC core: couldn't find an available UDC or it's busy: -16 [ 3157.857222][ T5120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3157.861722][ T5113] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3158.152991][ T5120] UDC core: couldn't find an available UDC or it's busy: -16 [ 3158.163255][ T5120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3158.190980][ T5617] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 3158.199818][ T5120] UDC core: couldn't find an available UDC or it's busy: -16 [ 3158.212025][ T5120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3158.441681][ T5074] usb 3-1: reset low-speed USB device number 113 using dummy_hcd [ 3158.458284][ T5617] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3158.471420][ T5617] usb 5-1: can't read configurations, error -61 [ 3158.641010][ T5617] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 3158.800991][ T5074] usb 3-1: device descriptor read/64, error 18 [ 3158.891182][ T5617] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3158.899552][ T5617] usb 5-1: can't read configurations, error -61 [ 3158.907991][ T5617] usb usb5-port1: unable to enumerate USB device [ 3159.211078][ T5074] usb 3-1: reset low-speed USB device number 113 using dummy_hcd 15:13:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001100), 0x680000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001540), {[{{@arp={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 0x1, 0xa, {@mac=@random="551e9241be9f", {[0xff, 0x0, 0xff]}}, {@empty, {[0x7f, 0x0, 0xff, 0x0, 0x25492523e5a85fe7, 0xff]}}, 0x2, 0xa1e6, 0x200, 0x8001, 0x6, 0x9, 'veth1_to_hsr\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x252}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @loopback, 0x1, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @remote, 0xffffffff, 0xff, 0x2, 0x0, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8001, 0xff, 0x1, 0x7d2, 0x9, 0x1, 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @private=0xa010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp(0x2, 0x2, 0x73) ptrace$cont(0x9, r1, 0x8e6, 0x80000000) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x5, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000001300)=[{0xe8, 0x103, 0x6, "9b552511229774beed99662fc6c2b118fae0bce991018ed17550ebac5c85c3316181963ee2872b12e5e3e6c86fe8e20a1abcc7d6c647ed7b622aec117ca649bfd2ad50d96eb277a7f2c54f2346232d1a61b5f419bfb2b6921a5e8a55fbef2038401bdf169903889537561739c1dd03bfa8c01ccdc648dfdcb76b0a479eaceb9fd81a9bf894268a4e904274c33dc40f1e156e2fc1dd758b7e4fbe30931d79c0cb3124f371c01e57c16c12d4fe39ef46d0625d3d9fa369dcb299fd1e622c8779b7c68707d319947c834ab7caeae282b93cf20b29b655747e"}], 0xe8}}, {{&(0x7f0000001400)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)="0fd076ce6d7e15bbab56d472a8f735dbd19b2777b7a94ef2b72b72050fa530f11c82bbd8c32fc13a66bbf24858f4450c1825c3f2b6f654953f65c035736e8e2512c8f9f37def94", 0x47}, {&(0x7f0000001500)="07726b5b8c688e102933e1122dc76037590acf4876b7bbe78693d8615058b381b90b2a3a1eebcf36b242444d1be015c8302ea1462e811b8f808abe21", 0x3c}, {&(0x7f00000011c0)="b90b9ad9f0fcdb36f126a9145b9fa2a3f72b30352d270ee571fa4b7cb7c235eccdb295add5a3b98685edbd95ea57d418fffbc5c88bca4e44b2ddcb3dcb3ba8cbc37bfff41a57dd9ede2c11c658984d39ebe05fcdd13e4ccedf35e40c8cd160b686c123725774e505a3274d63af508cc019cbd5896c5de30c726a75cc483afe79a593c2d03b8d7753276643d46673959c1e5867ebf2185010", 0x98}, {&(0x7f0000001580)="e2315267459bb01413ad1f55c3d9a7573c16be775e92837af6c80bd58860cf79da16bea335e6dd396dffe40686ecc3", 0x2f}, {&(0x7f0000002080)="09e1a0fd2d60fc2a2074699367fcc88fc747327f560da6398e4058692e75ed11df038d0639c1e76235b95ead6835c46cf8e33ad6d0fd23a35076d3584589a22366bfe9aa645b5aeac4a66b5a7d0a0d7455711171ae50175963196f33182e7e6ea7019f57684c761a4435d15cd06b17658685d87a3ce379f4e38367db825c513b2e01dc2ea506e22c948ac882dc0e982aab7ff4b3d28341443b2cc83d078b45202bd24482f24a139e8e922766de", 0xad}, {&(0x7f0000001680)="867d50005c18da7d192a22008a9a1ea132bb087b1e304fd6df1c4cd193a9bcd019710b0fccf810a9ed183248bc5290e06b371ba64c944692766ec4b87e7a2a7f97dc8396025fde956f2e035dacf3c1bd6f8c726e54945cb3221220e8a1b7237e55c074ba5cb8b5f81941aca9af47136200a5ddaa9350dc6ad66d4767169200012a4b42b359bfdf", 0x87}, {&(0x7f0000001740)="5936c8032d58928232cb1845c160686095e9c6754b7f99f23e396995ef776484", 0x20}, {&(0x7f0000001780)="717bcd92ac337d84824f5048aaead29056cd22d883b4395487afa3a2bded98e4fcb79dfb5705a7090618e45ee8e2f9ed554be03c01d51b0d60ff691669e75a3b0567520f4dd801138daae8002d481e864786c702377ac8e64930cc42b8878adf8dbe5b131c0c55f764617c42e1d922972fd46258eab86caf860fc6a14f32b9", 0x7f}, {&(0x7f0000001f00)="a7575b854c845d5acb322a889cb9fed1fa2c468ea35d60a90a4af739b9e965b7a5bb18937a5496d1dccb21d54e65375a7134986cfd6af07a789338db501642fe51ff7050f4451bd93e5bff538cd8917866c9d8ec8d7fea1b66bcda", 0x5b}], 0x9}}, {{&(0x7f0000001800)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000019c0)="28b0a21aecfcc8690f048544a567ef4c58f38517546139ef6c9966bf0febcd18d99a47014314c52c898b2abcdd91a11418477d67ac25668aedfa3be9e45c006b56cda868af80352dd6a42caa695a314027838f79b1a025ac3a76674ac40f81c365654879bcc320bf86522ae60e026f61614d04b62dc8a28ee2155d64740213147c", 0x81}, {&(0x7f0000001a80)="99dd706e4883f9418f2249c306b722f7573e6782e3182e7bc299259077f572e499aee2a0a67857a1dcbd7c3e272b4b2637d9ceb5212adbb0aa6663d2b6d31487b72f563735ac0f9e4cfafb70ac2e82842c05dd553d17dcfc8a458c48843e2f75460e5100305f7c367f8af046e602465530e444036b255c6db1691cb80017876bbfad1e790fd24bda7a69f0f08f4803ebe32247f1153c613967b887d7ee1016036c15d5f44c244f5ed9519876c720aeaa9493f12f03f6d392d26f91a23e648a30c06c05abfb3103c1f805b637345afa01fb32b200461b658d12c9f01a069cce0f13a4de5f15cf65dfae48811f42d6e0160c69f69e", 0xf4}, {&(0x7f0000001b80)="7b2fb9ec42f1b71a268eb17ddbe26ac4000632efabf8782501eff0e317784f9cdd9f770443b15c02033358148290431898912c807fcc7d5cc5f3e786e4b434233fa20a059bc46eb113286f53969c6b5aa7f362eeeeb243916f9bd43cab2f9a0e8ce12ed41e08db02e5dd17bd4a04c426a29ed977458fa099d6cca1949e84fb834768aa128dffe4d441d04a999160ccce66b8a9a2d6a106000000d74099cda5a428", 0xa1}, {&(0x7f0000001280)="3f56c7a3751f7cd93e591d2feb8f455c06b7d9cc9f93d8ee310f6802dd65ca3967fd8ebad9a5244f589814746d807faeed11394fadda3afba5c58b5b79bd686b63fb75cb", 0x44}, {&(0x7f0000002140)="e7d774e7fdc49bc205cb600bf40216480e8cb423714c934bf97b8f75cb7c615bba8ad8242bd1967f296ec67e0cd0cd05896e1ec74cf53b4ad51e53a95d079d4579a1e1d581251eb9bca4f90538d1b82cc641d5b4a34ef9f88ddca813f0e6e415f7198814a60d36de1a31d1066448f7b12032ad6c9c8f1bf241116b67e8c824dedbcafd36abf9d0cea907776b5c16372b4d0c42852f28db9eae2bf2dad52ad35a23449aa062333fe93cc36aef3a02843385af423a17db2f9605e5e839b84b0a0c1b502c95123c7c79cd1b7b59a9b6ee855c7c0f098fee2f15d47645dd43f022a20ceb6dd94bd07afdd2cc5c3803411f580000", 0xf2}, {&(0x7f0000001d80)="1da6557754dd9629b69d7d18ab1f8b2796aec9f9b870", 0x16}, {&(0x7f0000001dc0)="5bc3a36b65db5182108439", 0xb}, {&(0x7f0000001e00)="3bb63eb7800c801627ebc2580944b6b1ff6605c7c37bda0459258f21384741e06f48da69c763f2287b68346cb81d019975fc0099ed9e720b69149fdf3351a0379cd8df4caf133ed29f74a2dd07342664d522320cce28ebbfc89451e85882b8191e5fd73c252a3333bdc52c03827fb3ea17d85a4aea2e545c1e03efb38f58a6e0a070f9d60098b36fe48217271b3123bad4cb057a16b36ea336d72d07b238c72ae47accd115bc42376c96c7781a0c94f66e3a1bd1a00b81aca86a5e337b6ee7c8006ce370dcbc092d9c3b2689", 0xcc}, {&(0x7f0000000880)="04bca73c262bc30be85afc82a4b957f3246d6608ccbfb4086d6da27c1a35acbd25d6a281d4a8bdf26e41b4fd86b730b5445925190e6dbc0d5bc9ae84616836021ef1a4c8fa38", 0x46}], 0x9, &(0x7f0000001f80)}}], 0x3, 0x20040000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000a80), 0x181300, 0x0) close(r4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_connect(0x6, 0x7b2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa3, 0x74, 0xd5, 0x40, 0x557, 0x2007, 0x6177, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a0, 0x4, 0x9, 0x2b, 0xc0, 0x9, [{{0x9, 0x4, 0x59, 0xff, 0x7, 0xb1, 0x75, 0xd9, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1f, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x59, 0x9, 0x3, "b002e0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x7, '^q', "34f9d8"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3ff, 0x3ff, 0x4, "95af2420f4"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x20, 0x1f, "d213"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x3, 0x2, 'K>n$'}]}, @hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x71c}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x20, 0x9, 0x1f, [@generic={0x13, 0x24, "99f85b4083c55b5db5d2c722d486b19f07"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x44, 0x8, 0xff}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x4, 0xff, 0x2, [@generic={0x76, 0x7, "5f6f4959719cfcb81a87f30f6e79a1ca6cab2f7613fc014994b122f9368935cdab2d81173c8cfb9459d3d006886fd9921777e641bc494338ba449f4c07811c8b1a398d98a4320302185c54cce1b411cba6a567eb71f0408759f03f0804c76574a3a9a0eebc1f2d4400957882af92a2f49f14ca32"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x44, 0xc, 0x3ff, 0x1, 0x2e, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0xa, 0xcf9b4bfabbfea3ce, 0x20, 0x9, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x40, 0x7b, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x5}]}}]}}, {{0x9, 0x4, 0x1c, 0x7f, 0x3, 0x9c, 0xf2, 0x6a, 0xe1, [], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x9, 0xe1, 0x81}}, {{0x9, 0x5, 0x6, 0x9, 0x8, 0x8, 0xc3, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3f, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x40, 0x80, 0xc, 0x5f, 0x54, 0xde, 0x1, [], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xf9, 0xff, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x2}, @generic={0xf8, 0xf, "37fe92ed00124d4a6eb04400d4059ea53745f49f120b51e3877e414c6871c0a10e0f7d22915d4edfacbeaaf9f4f33b4a25b9be1071efb25cae705d6cc4ad5bb31a710549ad4b06e3856ecc49ea0b5ff5a788616d45dde2c2b0b62474cfd8cdaec604cedfdc01e51bc1da8ec87580852cbb2896eebd1e844748c21370603c17c066eb09b721fdcb617f3a4c880e8f91187adac6d7e66370fa04c91e3afc4b4313ca4654dd100453788ecc5ebd9dd18c5df02eb8bed606a61d359ad736cd51499db7fc5d2ba254e4b1e44e17dbd1a5b5db5a4cc61f1636f8a24ac401c003a69422cea13a0a25687b386daf74404318450dcc14c88b3d7b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x38, 0x5, 0x5, [@generic={0xe9, 0x9, "ee0121a6088e6414c22326e1232f15dfd0f854ad958d49e4447ee7f6abfe4884d2874679f795e2afbf9a2d3ed408a433d030e91b60dc3cd957f9578dac87a9af97d9675418ec219c49327818f61741e70036c2f1e4a7d6f0fe5355e1b7284a10b12e04d6baa8664bfb75a420201c85bcd3a55b2083ca956d5c535859a3ee7c68b96ce604beff001b78d64b480c176f05f0a5e79931717d75fef3dfaf2ec4e473a520e50c4057e848b16abf069153d4d7d22a0cc51edea28ef6371939ba91e64328be5a6568040388f8a491ebde36bfa8286c8022625f0fd0064953ecaeb6c03d3b0d3dc8d9a3ff"}, @generic={0x28, 0x11, "9de630817116a2be1231af79a41c8c4506cb919cffaddd412983203362a0621f0abdabb77b6b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7f, 0x9, 0x0, [@generic={0xb7, 0x21, "709aff62c893d769d114c5fc7d9c133b6b45fa69daf6f65af498ae6df2be236691e8458369d99fbf284c9e34b185b5e56e21e5b22f96d509bbab22f81104ce200a0ce693d27ccaf519406a087c37e40673a600a35f8673ea350357f164b4a6897de51c282acfc826296574bf67df378243ddd0e1944985bf016e9665916c1211df9f27dd8ad89c97ea438b48dcde458e98ae5817051b102090b0cdeaf6807ede4ecf8af55bd93a89c66368cc6676295525e4595740"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x1, 0xa7, 0xc0, [@generic={0x40, 0x31, "9ed44490b5fba7c542e13ed50e711ae45b163eb6fc57d2e689b7c969b27fb96fb77dfa34c2fb6afa64551790b0781aa7900225198df3b38dba384bbb9c77"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}]}}, {{0x9, 0x5, 0x2, 0x5abfed573469db23, 0x3ff, 0x0, 0xfc, 0x8}}, {{0x9, 0x5, 0xf, 0x11, 0x40, 0x2, 0x7f, 0x3, [@generic={0x82, 0x6, "76b48be9f69bf7b59917960ccbde2b2eaefd993de3ec28490593881c259aebad8005ec653d8045989ba4b13bef318c5181e21db15c4250f28a960b5f6e129952790ccb46b8113032818e169f1aebd44f8da011bd1f5e29ec047d4bace6288f7a357b5838fd9acbdf47d06e3de7419af59a2571cd2776105754828de52d85c905"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0x6, 0x0, [@generic={0x79, 0xf, "35655243983aeea37cf5ff9adff7f72eb534dd5d752428ba9a134e73e081afeb00d967f8f37b81fb340ea421632ba3720a4a2d02ece2d7007867ece02bdf15fb2008de1d233d57bb4cef1fdfe715e310fe5554dc18c31a6d1692c4c405aeb0a74ee046f779bf48e2946783796bb8cee46718408f7f18dc"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x2, 0xb8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x363}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x9, 0x4, [@generic={0xf2, 0xc, "8514cf1ddf9e21e31289553f70a1382ca07febfa0c8967a4dbfbdf2aca33dc3dd8fe95205cd899b380f8ac52591e98bc054f02991382924ce67f55f37cb6d50fbe365dbfd04380be06bf41e12806a1ffe87599a1692be6a550e35c102fe203481788936f4cfd673a87781708298c480869d2fb6528b209735f2bb20c7334995633798a7c8fbf71ba842f552553459e917f3b0ddae303ad1c9d4df4e7fbd5a148ab3cc9c4a2f0062c3e1f48c56234ebdd324898cdca0648a71dab3b1c19feab4df9e7bc4bf9175383b5ce06d161355296ea740fbf89a1ce78e30cdd20448e11a90f1000"/240}, @uac_iso={0x7, 0x25, 0x1, 0xb6f9fa11200908a8, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x53, 0x40}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x9, 0xff}}]}}, {{0x9, 0x4, 0xa3, 0x1f, 0x5, 0x7e, 0xa1, 0xb3, 0xfe, [], [{{0x9, 0x5, 0x8, 0x4, 0x400, 0xcc, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x2, 0x5, 0x80}}, {{0x9, 0x5, 0x4, 0x1c, 0x3ff, 0xf9, 0x5, 0x5, [@generic={0xd, 0xe, "8017ecdd79ff991dbc59b9"}, @generic={0x4d, 0x30, "0b50a415d970c9a11bc7a837642b256a225d70f6848a3d3b436316523c025a0c152840772112a1dcf30710393480807e89d7ecd7730b4824595dc0f01a6ffcd915371b64d3e127b8aae354"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7e, 0xc1, 0x3f}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x4, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6b}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x3f, 0x7f, 0x6, 0xff, 0x4}, 0x79, &(0x7f0000001040)={0x5, 0xf, 0x79, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2d3cf13a79d0076aac403f976f8005e0"}, @generic={0x37, 0x10, 0x4, "1edf86a6b8b92f54c6b57d5cb40d7301bf07d5f6f4cb7d70a53b13b78c6dd97b60d0cdf5984ad5f91fb47ba933539b8bfc7c5a8b"}, @ss_container_id={0x0, 0x10, 0x4, 0xff, "bbaca32af0c2b2d8754bbef5c2d99070"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x4, 0x80, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "20fe8169e02c51142ecaa1591fef50c8"}, @ss_cap={0x0, 0x10, 0x3, 0x0, 0x8, 0x1f, 0x20, 0x6}]}, 0x7, [{0x4, &(0x7f0000000900)=@lang_id={0x1f, 0x3, 0x100c}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0xc0, &(0x7f0000000980)=@string={0xc0, 0x3, "f70bf9cea3e59de22671365ab63274ae8851f51592cd140ca8e4f5c9c8b6e17fb422a8d94d4bd3af96282fe5914eb2b45199c922daf82374e87e16b4269071d0124d740a887e66f995fd6b80da788c09165f4c10472ed4e938f91e8fa6107829d790aa632cd60e24031318fa1fcc076680e1d22b34a68733ebbb123b5bbd9a52e973ffb46bce5a199ed50e3ff0b4f093b4d1a3e0d1a93de06c4a97009abb84838e3c31be0fb27aecc8e2f05b504b754cd25734bf2883952a9b5ab5375d8f"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x443}}, {0x54, &(0x7f0000001000)=ANY=[@ANYRES64=r3]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x84b}}, {0x97, &(0x7f0000000b40)=@string={0x97, 0x3, "488838bbb351b63b6e56d00bb3776b5393d4627f7857dacd557843d3e83bde624b5a25481048c23153fd0fd338f7907454a96e595d117020ba258e9cbdc3f4f754b6ae8ab91d2bbf350011d58fa1a30aa80f0fd9d708094ef8a77f8ca5de947fa91b9ca6a6feff8a31df55f666e74992d82580af563f3ffdac9645dc46d69c286db5d8606da24eb32ec896a93888256779861a05d4"}}]}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1d, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x6c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x0, 0x1, 0x1f, 0x40, 0x3}, 0xdf, &(0x7f0000000d00)={0x5, 0xf, 0xdf, 0x2, [@generic={0xcf, 0x10, 0x4, "dd2d577b1ba5b41343e4ce427683b24f900803fc9aa45381d30c3eea23baafdcec76ba3e373fbe6956bb03494148af80d6b7f39199b35bcc8f715a442cc900ee65af8c6e22ec2f31b7cc06c3f592ec8e057012a5aff6f013b2c7dd0558410c655f338c7c993200f3f6db86d3c1cb3ecb72b6dd743023853e7bf743d659888127505bbf074d7f443abc9807071305312687d876e05e2dfbe68547e3a189a65e1f1de5a45d43d47fc33541344587b9fb29324d0c89ee62c01972b406aabd0fe80ba558d5ff69d1f4d2a92e6079"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x3, 0x4, 0x8}]}, 0x3, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x41d}}, {0x101, &(0x7f0000000e80)=@string={0x101, 0x3, "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"}}]}) 15:13:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001100), 0x680000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001540), {[{{@arp={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 0x1, 0xa, {@mac=@random="551e9241be9f", {[0xff, 0x0, 0xff]}}, {@empty, {[0x7f, 0x0, 0xff, 0x0, 0x25492523e5a85fe7, 0xff]}}, 0x2, 0xa1e6, 0x200, 0x8001, 0x6, 0x9, 'veth1_to_hsr\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x252}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @loopback, 0x1, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @remote, 0xffffffff, 0xff, 0x2, 0x0, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8001, 0xff, 0x1, 0x7d2, 0x9, 0x1, 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @private=0xa010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) ptrace$cont(0x9, r1, 0x8e6, 0x80000000) (async) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x5, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000001300)=[{0xe8, 0x103, 0x6, "9b552511229774beed99662fc6c2b118fae0bce991018ed17550ebac5c85c3316181963ee2872b12e5e3e6c86fe8e20a1abcc7d6c647ed7b622aec117ca649bfd2ad50d96eb277a7f2c54f2346232d1a61b5f419bfb2b6921a5e8a55fbef2038401bdf169903889537561739c1dd03bfa8c01ccdc648dfdcb76b0a479eaceb9fd81a9bf894268a4e904274c33dc40f1e156e2fc1dd758b7e4fbe30931d79c0cb3124f371c01e57c16c12d4fe39ef46d0625d3d9fa369dcb299fd1e622c8779b7c68707d319947c834ab7caeae282b93cf20b29b655747e"}], 0xe8}}, {{&(0x7f0000001400)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)="0fd076ce6d7e15bbab56d472a8f735dbd19b2777b7a94ef2b72b72050fa530f11c82bbd8c32fc13a66bbf24858f4450c1825c3f2b6f654953f65c035736e8e2512c8f9f37def94", 0x47}, {&(0x7f0000001500)="07726b5b8c688e102933e1122dc76037590acf4876b7bbe78693d8615058b381b90b2a3a1eebcf36b242444d1be015c8302ea1462e811b8f808abe21", 0x3c}, {&(0x7f00000011c0)="b90b9ad9f0fcdb36f126a9145b9fa2a3f72b30352d270ee571fa4b7cb7c235eccdb295add5a3b98685edbd95ea57d418fffbc5c88bca4e44b2ddcb3dcb3ba8cbc37bfff41a57dd9ede2c11c658984d39ebe05fcdd13e4ccedf35e40c8cd160b686c123725774e505a3274d63af508cc019cbd5896c5de30c726a75cc483afe79a593c2d03b8d7753276643d46673959c1e5867ebf2185010", 0x98}, {&(0x7f0000001580)="e2315267459bb01413ad1f55c3d9a7573c16be775e92837af6c80bd58860cf79da16bea335e6dd396dffe40686ecc3", 0x2f}, {&(0x7f0000002080)="09e1a0fd2d60fc2a2074699367fcc88fc747327f560da6398e4058692e75ed11df038d0639c1e76235b95ead6835c46cf8e33ad6d0fd23a35076d3584589a22366bfe9aa645b5aeac4a66b5a7d0a0d7455711171ae50175963196f33182e7e6ea7019f57684c761a4435d15cd06b17658685d87a3ce379f4e38367db825c513b2e01dc2ea506e22c948ac882dc0e982aab7ff4b3d28341443b2cc83d078b45202bd24482f24a139e8e922766de", 0xad}, {&(0x7f0000001680)="867d50005c18da7d192a22008a9a1ea132bb087b1e304fd6df1c4cd193a9bcd019710b0fccf810a9ed183248bc5290e06b371ba64c944692766ec4b87e7a2a7f97dc8396025fde956f2e035dacf3c1bd6f8c726e54945cb3221220e8a1b7237e55c074ba5cb8b5f81941aca9af47136200a5ddaa9350dc6ad66d4767169200012a4b42b359bfdf", 0x87}, {&(0x7f0000001740)="5936c8032d58928232cb1845c160686095e9c6754b7f99f23e396995ef776484", 0x20}, {&(0x7f0000001780)="717bcd92ac337d84824f5048aaead29056cd22d883b4395487afa3a2bded98e4fcb79dfb5705a7090618e45ee8e2f9ed554be03c01d51b0d60ff691669e75a3b0567520f4dd801138daae8002d481e864786c702377ac8e64930cc42b8878adf8dbe5b131c0c55f764617c42e1d922972fd46258eab86caf860fc6a14f32b9", 0x7f}, {&(0x7f0000001f00)="a7575b854c845d5acb322a889cb9fed1fa2c468ea35d60a90a4af739b9e965b7a5bb18937a5496d1dccb21d54e65375a7134986cfd6af07a789338db501642fe51ff7050f4451bd93e5bff538cd8917866c9d8ec8d7fea1b66bcda", 0x5b}], 0x9}}, {{&(0x7f0000001800)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000019c0)="28b0a21aecfcc8690f048544a567ef4c58f38517546139ef6c9966bf0febcd18d99a47014314c52c898b2abcdd91a11418477d67ac25668aedfa3be9e45c006b56cda868af80352dd6a42caa695a314027838f79b1a025ac3a76674ac40f81c365654879bcc320bf86522ae60e026f61614d04b62dc8a28ee2155d64740213147c", 0x81}, {&(0x7f0000001a80)="99dd706e4883f9418f2249c306b722f7573e6782e3182e7bc299259077f572e499aee2a0a67857a1dcbd7c3e272b4b2637d9ceb5212adbb0aa6663d2b6d31487b72f563735ac0f9e4cfafb70ac2e82842c05dd553d17dcfc8a458c48843e2f75460e5100305f7c367f8af046e602465530e444036b255c6db1691cb80017876bbfad1e790fd24bda7a69f0f08f4803ebe32247f1153c613967b887d7ee1016036c15d5f44c244f5ed9519876c720aeaa9493f12f03f6d392d26f91a23e648a30c06c05abfb3103c1f805b637345afa01fb32b200461b658d12c9f01a069cce0f13a4de5f15cf65dfae48811f42d6e0160c69f69e", 0xf4}, {&(0x7f0000001b80)="7b2fb9ec42f1b71a268eb17ddbe26ac4000632efabf8782501eff0e317784f9cdd9f770443b15c02033358148290431898912c807fcc7d5cc5f3e786e4b434233fa20a059bc46eb113286f53969c6b5aa7f362eeeeb243916f9bd43cab2f9a0e8ce12ed41e08db02e5dd17bd4a04c426a29ed977458fa099d6cca1949e84fb834768aa128dffe4d441d04a999160ccce66b8a9a2d6a106000000d74099cda5a428", 0xa1}, {&(0x7f0000001280)="3f56c7a3751f7cd93e591d2feb8f455c06b7d9cc9f93d8ee310f6802dd65ca3967fd8ebad9a5244f589814746d807faeed11394fadda3afba5c58b5b79bd686b63fb75cb", 0x44}, {&(0x7f0000002140)="e7d774e7fdc49bc205cb600bf40216480e8cb423714c934bf97b8f75cb7c615bba8ad8242bd1967f296ec67e0cd0cd05896e1ec74cf53b4ad51e53a95d079d4579a1e1d581251eb9bca4f90538d1b82cc641d5b4a34ef9f88ddca813f0e6e415f7198814a60d36de1a31d1066448f7b12032ad6c9c8f1bf241116b67e8c824dedbcafd36abf9d0cea907776b5c16372b4d0c42852f28db9eae2bf2dad52ad35a23449aa062333fe93cc36aef3a02843385af423a17db2f9605e5e839b84b0a0c1b502c95123c7c79cd1b7b59a9b6ee855c7c0f098fee2f15d47645dd43f022a20ceb6dd94bd07afdd2cc5c3803411f580000", 0xf2}, {&(0x7f0000001d80)="1da6557754dd9629b69d7d18ab1f8b2796aec9f9b870", 0x16}, {&(0x7f0000001dc0)="5bc3a36b65db5182108439", 0xb}, {&(0x7f0000001e00)="3bb63eb7800c801627ebc2580944b6b1ff6605c7c37bda0459258f21384741e06f48da69c763f2287b68346cb81d019975fc0099ed9e720b69149fdf3351a0379cd8df4caf133ed29f74a2dd07342664d522320cce28ebbfc89451e85882b8191e5fd73c252a3333bdc52c03827fb3ea17d85a4aea2e545c1e03efb38f58a6e0a070f9d60098b36fe48217271b3123bad4cb057a16b36ea336d72d07b238c72ae47accd115bc42376c96c7781a0c94f66e3a1bd1a00b81aca86a5e337b6ee7c8006ce370dcbc092d9c3b2689", 0xcc}, {&(0x7f0000000880)="04bca73c262bc30be85afc82a4b957f3246d6608ccbfb4086d6da27c1a35acbd25d6a281d4a8bdf26e41b4fd86b730b5445925190e6dbc0d5bc9ae84616836021ef1a4c8fa38", 0x46}], 0x9, &(0x7f0000001f80)}}], 0x3, 0x20040000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) (async) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000a80), 0x181300, 0x0) close(r4) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x6, 0x7b2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa3, 0x74, 0xd5, 0x40, 0x557, 0x2007, 0x6177, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a0, 0x4, 0x9, 0x2b, 0xc0, 0x9, [{{0x9, 0x4, 0x59, 0xff, 0x7, 0xb1, 0x75, 0xd9, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1f, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x59, 0x9, 0x3, "b002e0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x7, '^q', "34f9d8"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3ff, 0x3ff, 0x4, "95af2420f4"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x20, 0x1f, "d213"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x3, 0x2, 'K>n$'}]}, @hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x71c}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x20, 0x9, 0x1f, [@generic={0x13, 0x24, "99f85b4083c55b5db5d2c722d486b19f07"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x44, 0x8, 0xff}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x4, 0xff, 0x2, [@generic={0x76, 0x7, "5f6f4959719cfcb81a87f30f6e79a1ca6cab2f7613fc014994b122f9368935cdab2d81173c8cfb9459d3d006886fd9921777e641bc494338ba449f4c07811c8b1a398d98a4320302185c54cce1b411cba6a567eb71f0408759f03f0804c76574a3a9a0eebc1f2d4400957882af92a2f49f14ca32"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x44, 0xc, 0x3ff, 0x1, 0x2e, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0xa, 0xcf9b4bfabbfea3ce, 0x20, 0x9, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x40, 0x7b, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x5}]}}]}}, {{0x9, 0x4, 0x1c, 0x7f, 0x3, 0x9c, 0xf2, 0x6a, 0xe1, [], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x9, 0xe1, 0x81}}, {{0x9, 0x5, 0x6, 0x9, 0x8, 0x8, 0xc3, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3f, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x40, 0x80, 0xc, 0x5f, 0x54, 0xde, 0x1, [], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xf9, 0xff, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x2}, @generic={0xf8, 0xf, "37fe92ed00124d4a6eb04400d4059ea53745f49f120b51e3877e414c6871c0a10e0f7d22915d4edfacbeaaf9f4f33b4a25b9be1071efb25cae705d6cc4ad5bb31a710549ad4b06e3856ecc49ea0b5ff5a788616d45dde2c2b0b62474cfd8cdaec604cedfdc01e51bc1da8ec87580852cbb2896eebd1e844748c21370603c17c066eb09b721fdcb617f3a4c880e8f91187adac6d7e66370fa04c91e3afc4b4313ca4654dd100453788ecc5ebd9dd18c5df02eb8bed606a61d359ad736cd51499db7fc5d2ba254e4b1e44e17dbd1a5b5db5a4cc61f1636f8a24ac401c003a69422cea13a0a25687b386daf74404318450dcc14c88b3d7b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x38, 0x5, 0x5, [@generic={0xe9, 0x9, "ee0121a6088e6414c22326e1232f15dfd0f854ad958d49e4447ee7f6abfe4884d2874679f795e2afbf9a2d3ed408a433d030e91b60dc3cd957f9578dac87a9af97d9675418ec219c49327818f61741e70036c2f1e4a7d6f0fe5355e1b7284a10b12e04d6baa8664bfb75a420201c85bcd3a55b2083ca956d5c535859a3ee7c68b96ce604beff001b78d64b480c176f05f0a5e79931717d75fef3dfaf2ec4e473a520e50c4057e848b16abf069153d4d7d22a0cc51edea28ef6371939ba91e64328be5a6568040388f8a491ebde36bfa8286c8022625f0fd0064953ecaeb6c03d3b0d3dc8d9a3ff"}, @generic={0x28, 0x11, "9de630817116a2be1231af79a41c8c4506cb919cffaddd412983203362a0621f0abdabb77b6b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7f, 0x9, 0x0, [@generic={0xb7, 0x21, "709aff62c893d769d114c5fc7d9c133b6b45fa69daf6f65af498ae6df2be236691e8458369d99fbf284c9e34b185b5e56e21e5b22f96d509bbab22f81104ce200a0ce693d27ccaf519406a087c37e40673a600a35f8673ea350357f164b4a6897de51c282acfc826296574bf67df378243ddd0e1944985bf016e9665916c1211df9f27dd8ad89c97ea438b48dcde458e98ae5817051b102090b0cdeaf6807ede4ecf8af55bd93a89c66368cc6676295525e4595740"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x1, 0xa7, 0xc0, [@generic={0x40, 0x31, "9ed44490b5fba7c542e13ed50e711ae45b163eb6fc57d2e689b7c969b27fb96fb77dfa34c2fb6afa64551790b0781aa7900225198df3b38dba384bbb9c77"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}]}}, {{0x9, 0x5, 0x2, 0x5abfed573469db23, 0x3ff, 0x0, 0xfc, 0x8}}, {{0x9, 0x5, 0xf, 0x11, 0x40, 0x2, 0x7f, 0x3, [@generic={0x82, 0x6, "76b48be9f69bf7b59917960ccbde2b2eaefd993de3ec28490593881c259aebad8005ec653d8045989ba4b13bef318c5181e21db15c4250f28a960b5f6e129952790ccb46b8113032818e169f1aebd44f8da011bd1f5e29ec047d4bace6288f7a357b5838fd9acbdf47d06e3de7419af59a2571cd2776105754828de52d85c905"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0x6, 0x0, [@generic={0x79, 0xf, "35655243983aeea37cf5ff9adff7f72eb534dd5d752428ba9a134e73e081afeb00d967f8f37b81fb340ea421632ba3720a4a2d02ece2d7007867ece02bdf15fb2008de1d233d57bb4cef1fdfe715e310fe5554dc18c31a6d1692c4c405aeb0a74ee046f779bf48e2946783796bb8cee46718408f7f18dc"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x2, 0xb8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x363}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x9, 0x4, [@generic={0xf2, 0xc, "8514cf1ddf9e21e31289553f70a1382ca07febfa0c8967a4dbfbdf2aca33dc3dd8fe95205cd899b380f8ac52591e98bc054f02991382924ce67f55f37cb6d50fbe365dbfd04380be06bf41e12806a1ffe87599a1692be6a550e35c102fe203481788936f4cfd673a87781708298c480869d2fb6528b209735f2bb20c7334995633798a7c8fbf71ba842f552553459e917f3b0ddae303ad1c9d4df4e7fbd5a148ab3cc9c4a2f0062c3e1f48c56234ebdd324898cdca0648a71dab3b1c19feab4df9e7bc4bf9175383b5ce06d161355296ea740fbf89a1ce78e30cdd20448e11a90f1000"/240}, @uac_iso={0x7, 0x25, 0x1, 0xb6f9fa11200908a8, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x53, 0x40}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x9, 0xff}}]}}, {{0x9, 0x4, 0xa3, 0x1f, 0x5, 0x7e, 0xa1, 0xb3, 0xfe, [], [{{0x9, 0x5, 0x8, 0x4, 0x400, 0xcc, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x2, 0x5, 0x80}}, {{0x9, 0x5, 0x4, 0x1c, 0x3ff, 0xf9, 0x5, 0x5, [@generic={0xd, 0xe, "8017ecdd79ff991dbc59b9"}, @generic={0x4d, 0x30, "0b50a415d970c9a11bc7a837642b256a225d70f6848a3d3b436316523c025a0c152840772112a1dcf30710393480807e89d7ecd7730b4824595dc0f01a6ffcd915371b64d3e127b8aae354"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7e, 0xc1, 0x3f}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x4, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6b}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x3f, 0x7f, 0x6, 0xff, 0x4}, 0x79, &(0x7f0000001040)={0x5, 0xf, 0x79, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2d3cf13a79d0076aac403f976f8005e0"}, @generic={0x37, 0x10, 0x4, "1edf86a6b8b92f54c6b57d5cb40d7301bf07d5f6f4cb7d70a53b13b78c6dd97b60d0cdf5984ad5f91fb47ba933539b8bfc7c5a8b"}, @ss_container_id={0x0, 0x10, 0x4, 0xff, "bbaca32af0c2b2d8754bbef5c2d99070"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x4, 0x80, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "20fe8169e02c51142ecaa1591fef50c8"}, @ss_cap={0x0, 0x10, 0x3, 0x0, 0x8, 0x1f, 0x20, 0x6}]}, 0x7, [{0x4, &(0x7f0000000900)=@lang_id={0x1f, 0x3, 0x100c}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0xc0, &(0x7f0000000980)=@string={0xc0, 0x3, "f70bf9cea3e59de22671365ab63274ae8851f51592cd140ca8e4f5c9c8b6e17fb422a8d94d4bd3af96282fe5914eb2b45199c922daf82374e87e16b4269071d0124d740a887e66f995fd6b80da788c09165f4c10472ed4e938f91e8fa6107829d790aa632cd60e24031318fa1fcc076680e1d22b34a68733ebbb123b5bbd9a52e973ffb46bce5a199ed50e3ff0b4f093b4d1a3e0d1a93de06c4a97009abb84838e3c31be0fb27aecc8e2f05b504b754cd25734bf2883952a9b5ab5375d8f"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x443}}, {0x54, &(0x7f0000001000)=ANY=[@ANYRES64=r3]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x84b}}, {0x97, &(0x7f0000000b40)=@string={0x97, 0x3, "488838bbb351b63b6e56d00bb3776b5393d4627f7857dacd557843d3e83bde624b5a25481048c23153fd0fd338f7907454a96e595d117020ba258e9cbdc3f4f754b6ae8ab91d2bbf350011d58fa1a30aa80f0fd9d708094ef8a77f8ca5de947fa91b9ca6a6feff8a31df55f666e74992d82580af563f3ffdac9645dc46d69c286db5d8606da24eb32ec896a93888256779861a05d4"}}]}) (async, rerun: 64) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1d, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x6c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x0, 0x1, 0x1f, 0x40, 0x3}, 0xdf, &(0x7f0000000d00)={0x5, 0xf, 0xdf, 0x2, [@generic={0xcf, 0x10, 0x4, "dd2d577b1ba5b41343e4ce427683b24f900803fc9aa45381d30c3eea23baafdcec76ba3e373fbe6956bb03494148af80d6b7f39199b35bcc8f715a442cc900ee65af8c6e22ec2f31b7cc06c3f592ec8e057012a5aff6f013b2c7dd0558410c655f338c7c993200f3f6db86d3c1cb3ecb72b6dd743023853e7bf743d659888127505bbf074d7f443abc9807071305312687d876e05e2dfbe68547e3a189a65e1f1de5a45d43d47fc33541344587b9fb29324d0c89ee62c01972b406aabd0fe80ba558d5ff69d1f4d2a92e6079"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x3, 0x4, 0x8}]}, 0x3, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x41d}}, {0x101, &(0x7f0000000e80)=@string={0x101, 0x3, "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"}}]}) 15:13:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3159.493271][ T5144] UDC core: couldn't find an available UDC or it's busy: -16 [ 3159.511601][ T5144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3159.541000][ T5074] usb 3-1: device descriptor read/64, error 18 [ 3159.748755][ T5144] UDC core: couldn't find an available UDC or it's busy: -16 [ 3159.756768][ T5144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3159.806550][ T5313] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 3159.961022][ T5074] usb 3-1: reset low-speed USB device number 113 using dummy_hcd 15:13:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000ac0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async, rerun: 64) r1 = syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001100), 0x680000, 0x0) (rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001540), {[{{@arp={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xff, 0x1, 0xa, {@mac=@random="551e9241be9f", {[0xff, 0x0, 0xff]}}, {@empty, {[0x7f, 0x0, 0xff, 0x0, 0x25492523e5a85fe7, 0xff]}}, 0x2, 0xa1e6, 0x200, 0x8001, 0x6, 0x9, 'veth1_to_hsr\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x252}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @loopback, 0x1, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @remote, 0xffffffff, 0xff, 0x2, 0x0, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8001, 0xff, 0x1, 0x7d2, 0x9, 0x1, 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @private=0xa010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) ptrace$cont(0x9, r1, 0x8e6, 0x80000000) (async) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x5, 0x3, 0x4, 0x2}}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000001300)=[{0xe8, 0x103, 0x6, "9b552511229774beed99662fc6c2b118fae0bce991018ed17550ebac5c85c3316181963ee2872b12e5e3e6c86fe8e20a1abcc7d6c647ed7b622aec117ca649bfd2ad50d96eb277a7f2c54f2346232d1a61b5f419bfb2b6921a5e8a55fbef2038401bdf169903889537561739c1dd03bfa8c01ccdc648dfdcb76b0a479eaceb9fd81a9bf894268a4e904274c33dc40f1e156e2fc1dd758b7e4fbe30931d79c0cb3124f371c01e57c16c12d4fe39ef46d0625d3d9fa369dcb299fd1e622c8779b7c68707d319947c834ab7caeae282b93cf20b29b655747e"}], 0xe8}}, {{&(0x7f0000001400)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)="0fd076ce6d7e15bbab56d472a8f735dbd19b2777b7a94ef2b72b72050fa530f11c82bbd8c32fc13a66bbf24858f4450c1825c3f2b6f654953f65c035736e8e2512c8f9f37def94", 0x47}, {&(0x7f0000001500)="07726b5b8c688e102933e1122dc76037590acf4876b7bbe78693d8615058b381b90b2a3a1eebcf36b242444d1be015c8302ea1462e811b8f808abe21", 0x3c}, {&(0x7f00000011c0)="b90b9ad9f0fcdb36f126a9145b9fa2a3f72b30352d270ee571fa4b7cb7c235eccdb295add5a3b98685edbd95ea57d418fffbc5c88bca4e44b2ddcb3dcb3ba8cbc37bfff41a57dd9ede2c11c658984d39ebe05fcdd13e4ccedf35e40c8cd160b686c123725774e505a3274d63af508cc019cbd5896c5de30c726a75cc483afe79a593c2d03b8d7753276643d46673959c1e5867ebf2185010", 0x98}, {&(0x7f0000001580)="e2315267459bb01413ad1f55c3d9a7573c16be775e92837af6c80bd58860cf79da16bea335e6dd396dffe40686ecc3", 0x2f}, {&(0x7f0000002080)="09e1a0fd2d60fc2a2074699367fcc88fc747327f560da6398e4058692e75ed11df038d0639c1e76235b95ead6835c46cf8e33ad6d0fd23a35076d3584589a22366bfe9aa645b5aeac4a66b5a7d0a0d7455711171ae50175963196f33182e7e6ea7019f57684c761a4435d15cd06b17658685d87a3ce379f4e38367db825c513b2e01dc2ea506e22c948ac882dc0e982aab7ff4b3d28341443b2cc83d078b45202bd24482f24a139e8e922766de", 0xad}, {&(0x7f0000001680)="867d50005c18da7d192a22008a9a1ea132bb087b1e304fd6df1c4cd193a9bcd019710b0fccf810a9ed183248bc5290e06b371ba64c944692766ec4b87e7a2a7f97dc8396025fde956f2e035dacf3c1bd6f8c726e54945cb3221220e8a1b7237e55c074ba5cb8b5f81941aca9af47136200a5ddaa9350dc6ad66d4767169200012a4b42b359bfdf", 0x87}, {&(0x7f0000001740)="5936c8032d58928232cb1845c160686095e9c6754b7f99f23e396995ef776484", 0x20}, {&(0x7f0000001780)="717bcd92ac337d84824f5048aaead29056cd22d883b4395487afa3a2bded98e4fcb79dfb5705a7090618e45ee8e2f9ed554be03c01d51b0d60ff691669e75a3b0567520f4dd801138daae8002d481e864786c702377ac8e64930cc42b8878adf8dbe5b131c0c55f764617c42e1d922972fd46258eab86caf860fc6a14f32b9", 0x7f}, {&(0x7f0000001f00)="a7575b854c845d5acb322a889cb9fed1fa2c468ea35d60a90a4af739b9e965b7a5bb18937a5496d1dccb21d54e65375a7134986cfd6af07a789338db501642fe51ff7050f4451bd93e5bff538cd8917866c9d8ec8d7fea1b66bcda", 0x5b}], 0x9}}, {{&(0x7f0000001800)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000019c0)="28b0a21aecfcc8690f048544a567ef4c58f38517546139ef6c9966bf0febcd18d99a47014314c52c898b2abcdd91a11418477d67ac25668aedfa3be9e45c006b56cda868af80352dd6a42caa695a314027838f79b1a025ac3a76674ac40f81c365654879bcc320bf86522ae60e026f61614d04b62dc8a28ee2155d64740213147c", 0x81}, {&(0x7f0000001a80)="99dd706e4883f9418f2249c306b722f7573e6782e3182e7bc299259077f572e499aee2a0a67857a1dcbd7c3e272b4b2637d9ceb5212adbb0aa6663d2b6d31487b72f563735ac0f9e4cfafb70ac2e82842c05dd553d17dcfc8a458c48843e2f75460e5100305f7c367f8af046e602465530e444036b255c6db1691cb80017876bbfad1e790fd24bda7a69f0f08f4803ebe32247f1153c613967b887d7ee1016036c15d5f44c244f5ed9519876c720aeaa9493f12f03f6d392d26f91a23e648a30c06c05abfb3103c1f805b637345afa01fb32b200461b658d12c9f01a069cce0f13a4de5f15cf65dfae48811f42d6e0160c69f69e", 0xf4}, {&(0x7f0000001b80)="7b2fb9ec42f1b71a268eb17ddbe26ac4000632efabf8782501eff0e317784f9cdd9f770443b15c02033358148290431898912c807fcc7d5cc5f3e786e4b434233fa20a059bc46eb113286f53969c6b5aa7f362eeeeb243916f9bd43cab2f9a0e8ce12ed41e08db02e5dd17bd4a04c426a29ed977458fa099d6cca1949e84fb834768aa128dffe4d441d04a999160ccce66b8a9a2d6a106000000d74099cda5a428", 0xa1}, {&(0x7f0000001280)="3f56c7a3751f7cd93e591d2feb8f455c06b7d9cc9f93d8ee310f6802dd65ca3967fd8ebad9a5244f589814746d807faeed11394fadda3afba5c58b5b79bd686b63fb75cb", 0x44}, {&(0x7f0000002140)="e7d774e7fdc49bc205cb600bf40216480e8cb423714c934bf97b8f75cb7c615bba8ad8242bd1967f296ec67e0cd0cd05896e1ec74cf53b4ad51e53a95d079d4579a1e1d581251eb9bca4f90538d1b82cc641d5b4a34ef9f88ddca813f0e6e415f7198814a60d36de1a31d1066448f7b12032ad6c9c8f1bf241116b67e8c824dedbcafd36abf9d0cea907776b5c16372b4d0c42852f28db9eae2bf2dad52ad35a23449aa062333fe93cc36aef3a02843385af423a17db2f9605e5e839b84b0a0c1b502c95123c7c79cd1b7b59a9b6ee855c7c0f098fee2f15d47645dd43f022a20ceb6dd94bd07afdd2cc5c3803411f580000", 0xf2}, {&(0x7f0000001d80)="1da6557754dd9629b69d7d18ab1f8b2796aec9f9b870", 0x16}, {&(0x7f0000001dc0)="5bc3a36b65db5182108439", 0xb}, {&(0x7f0000001e00)="3bb63eb7800c801627ebc2580944b6b1ff6605c7c37bda0459258f21384741e06f48da69c763f2287b68346cb81d019975fc0099ed9e720b69149fdf3351a0379cd8df4caf133ed29f74a2dd07342664d522320cce28ebbfc89451e85882b8191e5fd73c252a3333bdc52c03827fb3ea17d85a4aea2e545c1e03efb38f58a6e0a070f9d60098b36fe48217271b3123bad4cb057a16b36ea336d72d07b238c72ae47accd115bc42376c96c7781a0c94f66e3a1bd1a00b81aca86a5e337b6ee7c8006ce370dcbc092d9c3b2689", 0xcc}, {&(0x7f0000000880)="04bca73c262bc30be85afc82a4b957f3246d6608ccbfb4086d6da27c1a35acbd25d6a281d4a8bdf26e41b4fd86b730b5445925190e6dbc0d5bc9ae84616836021ef1a4c8fa38", 0x46}], 0x9, &(0x7f0000001f80)}}], 0x3, 0x20040000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) (async, rerun: 32) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000a80), 0x181300, 0x0) close(r4) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_connect(0x6, 0x7b2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa3, 0x74, 0xd5, 0x40, 0x557, 0x2007, 0x6177, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a0, 0x4, 0x9, 0x2b, 0xc0, 0x9, [{{0x9, 0x4, 0x59, 0xff, 0x7, 0xb1, 0x75, 0xd9, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1f, 0x2, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x59, 0x9, 0x3, "b002e0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x7, '^q', "34f9d8"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3ff, 0x3ff, 0x4, "95af2420f4"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x20, 0x1f, "d213"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x3, 0x2, 'K>n$'}]}, @hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x71c}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x20, 0x9, 0x1f, [@generic={0x13, 0x24, "99f85b4083c55b5db5d2c722d486b19f07"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x44, 0x8, 0xff}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x4, 0xff, 0x2, [@generic={0x76, 0x7, "5f6f4959719cfcb81a87f30f6e79a1ca6cab2f7613fc014994b122f9368935cdab2d81173c8cfb9459d3d006886fd9921777e641bc494338ba449f4c07811c8b1a398d98a4320302185c54cce1b411cba6a567eb71f0408759f03f0804c76574a3a9a0eebc1f2d4400957882af92a2f49f14ca32"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x44, 0xc, 0x3ff, 0x1, 0x2e, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0xa, 0xcf9b4bfabbfea3ce, 0x20, 0x9, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x40, 0x7b, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x5}]}}]}}, {{0x9, 0x4, 0x1c, 0x7f, 0x3, 0x9c, 0xf2, 0x6a, 0xe1, [], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x9, 0xe1, 0x81}}, {{0x9, 0x5, 0x6, 0x9, 0x8, 0x8, 0xc3, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3f, 0x4, 0x3}}]}}, {{0x9, 0x4, 0x40, 0x80, 0xc, 0x5f, 0x54, 0xde, 0x1, [], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xf9, 0xff, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x2}, @generic={0xf8, 0xf, "37fe92ed00124d4a6eb04400d4059ea53745f49f120b51e3877e414c6871c0a10e0f7d22915d4edfacbeaaf9f4f33b4a25b9be1071efb25cae705d6cc4ad5bb31a710549ad4b06e3856ecc49ea0b5ff5a788616d45dde2c2b0b62474cfd8cdaec604cedfdc01e51bc1da8ec87580852cbb2896eebd1e844748c21370603c17c066eb09b721fdcb617f3a4c880e8f91187adac6d7e66370fa04c91e3afc4b4313ca4654dd100453788ecc5ebd9dd18c5df02eb8bed606a61d359ad736cd51499db7fc5d2ba254e4b1e44e17dbd1a5b5db5a4cc61f1636f8a24ac401c003a69422cea13a0a25687b386daf74404318450dcc14c88b3d7b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x38, 0x5, 0x5, [@generic={0xe9, 0x9, "ee0121a6088e6414c22326e1232f15dfd0f854ad958d49e4447ee7f6abfe4884d2874679f795e2afbf9a2d3ed408a433d030e91b60dc3cd957f9578dac87a9af97d9675418ec219c49327818f61741e70036c2f1e4a7d6f0fe5355e1b7284a10b12e04d6baa8664bfb75a420201c85bcd3a55b2083ca956d5c535859a3ee7c68b96ce604beff001b78d64b480c176f05f0a5e79931717d75fef3dfaf2ec4e473a520e50c4057e848b16abf069153d4d7d22a0cc51edea28ef6371939ba91e64328be5a6568040388f8a491ebde36bfa8286c8022625f0fd0064953ecaeb6c03d3b0d3dc8d9a3ff"}, @generic={0x28, 0x11, "9de630817116a2be1231af79a41c8c4506cb919cffaddd412983203362a0621f0abdabb77b6b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7f, 0x9, 0x0, [@generic={0xb7, 0x21, "709aff62c893d769d114c5fc7d9c133b6b45fa69daf6f65af498ae6df2be236691e8458369d99fbf284c9e34b185b5e56e21e5b22f96d509bbab22f81104ce200a0ce693d27ccaf519406a087c37e40673a600a35f8673ea350357f164b4a6897de51c282acfc826296574bf67df378243ddd0e1944985bf016e9665916c1211df9f27dd8ad89c97ea438b48dcde458e98ae5817051b102090b0cdeaf6807ede4ecf8af55bd93a89c66368cc6676295525e4595740"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x1, 0xa7, 0xc0, [@generic={0x40, 0x31, "9ed44490b5fba7c542e13ed50e711ae45b163eb6fc57d2e689b7c969b27fb96fb77dfa34c2fb6afa64551790b0781aa7900225198df3b38dba384bbb9c77"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}]}}, {{0x9, 0x5, 0x2, 0x5abfed573469db23, 0x3ff, 0x0, 0xfc, 0x8}}, {{0x9, 0x5, 0xf, 0x11, 0x40, 0x2, 0x7f, 0x3, [@generic={0x82, 0x6, "76b48be9f69bf7b59917960ccbde2b2eaefd993de3ec28490593881c259aebad8005ec653d8045989ba4b13bef318c5181e21db15c4250f28a960b5f6e129952790ccb46b8113032818e169f1aebd44f8da011bd1f5e29ec047d4bace6288f7a357b5838fd9acbdf47d06e3de7419af59a2571cd2776105754828de52d85c905"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0x6, 0x0, [@generic={0x79, 0xf, "35655243983aeea37cf5ff9adff7f72eb534dd5d752428ba9a134e73e081afeb00d967f8f37b81fb340ea421632ba3720a4a2d02ece2d7007867ece02bdf15fb2008de1d233d57bb4cef1fdfe715e310fe5554dc18c31a6d1692c4c405aeb0a74ee046f779bf48e2946783796bb8cee46718408f7f18dc"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x2, 0xb8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x363}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x9, 0x4, [@generic={0xf2, 0xc, "8514cf1ddf9e21e31289553f70a1382ca07febfa0c8967a4dbfbdf2aca33dc3dd8fe95205cd899b380f8ac52591e98bc054f02991382924ce67f55f37cb6d50fbe365dbfd04380be06bf41e12806a1ffe87599a1692be6a550e35c102fe203481788936f4cfd673a87781708298c480869d2fb6528b209735f2bb20c7334995633798a7c8fbf71ba842f552553459e917f3b0ddae303ad1c9d4df4e7fbd5a148ab3cc9c4a2f0062c3e1f48c56234ebdd324898cdca0648a71dab3b1c19feab4df9e7bc4bf9175383b5ce06d161355296ea740fbf89a1ce78e30cdd20448e11a90f1000"/240}, @uac_iso={0x7, 0x25, 0x1, 0xb6f9fa11200908a8, 0x4, 0x3}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x53, 0x40}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x9, 0xff}}]}}, {{0x9, 0x4, 0xa3, 0x1f, 0x5, 0x7e, 0xa1, 0xb3, 0xfe, [], [{{0x9, 0x5, 0x8, 0x4, 0x400, 0xcc, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x2, 0x5, 0x80}}, {{0x9, 0x5, 0x4, 0x1c, 0x3ff, 0xf9, 0x5, 0x5, [@generic={0xd, 0xe, "8017ecdd79ff991dbc59b9"}, @generic={0x4d, 0x30, "0b50a415d970c9a11bc7a837642b256a225d70f6848a3d3b436316523c025a0c152840772112a1dcf30710393480807e89d7ecd7730b4824595dc0f01a6ffcd915371b64d3e127b8aae354"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7e, 0xc1, 0x3f}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x4, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6b}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x3f, 0x7f, 0x6, 0xff, 0x4}, 0x79, &(0x7f0000001040)={0x5, 0xf, 0x79, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2d3cf13a79d0076aac403f976f8005e0"}, @generic={0x37, 0x10, 0x4, "1edf86a6b8b92f54c6b57d5cb40d7301bf07d5f6f4cb7d70a53b13b78c6dd97b60d0cdf5984ad5f91fb47ba933539b8bfc7c5a8b"}, @ss_container_id={0x0, 0x10, 0x4, 0xff, "bbaca32af0c2b2d8754bbef5c2d99070"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x4, 0x80, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "20fe8169e02c51142ecaa1591fef50c8"}, @ss_cap={0x0, 0x10, 0x3, 0x0, 0x8, 0x1f, 0x20, 0x6}]}, 0x7, [{0x4, &(0x7f0000000900)=@lang_id={0x1f, 0x3, 0x100c}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0xc0, &(0x7f0000000980)=@string={0xc0, 0x3, "f70bf9cea3e59de22671365ab63274ae8851f51592cd140ca8e4f5c9c8b6e17fb422a8d94d4bd3af96282fe5914eb2b45199c922daf82374e87e16b4269071d0124d740a887e66f995fd6b80da788c09165f4c10472ed4e938f91e8fa6107829d790aa632cd60e24031318fa1fcc076680e1d22b34a68733ebbb123b5bbd9a52e973ffb46bce5a199ed50e3ff0b4f093b4d1a3e0d1a93de06c4a97009abb84838e3c31be0fb27aecc8e2f05b504b754cd25734bf2883952a9b5ab5375d8f"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x443}}, {0x54, &(0x7f0000001000)=ANY=[@ANYRES64=r3]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x84b}}, {0x97, &(0x7f0000000b40)=@string={0x97, 0x3, "488838bbb351b63b6e56d00bb3776b5393d4627f7857dacd557843d3e83bde624b5a25481048c23153fd0fd338f7907454a96e595d117020ba258e9cbdc3f4f754b6ae8ab91d2bbf350011d58fa1a30aa80f0fd9d708094ef8a77f8ca5de947fa91b9ca6a6feff8a31df55f666e74992d82580af563f3ffdac9645dc46d69c286db5d8606da24eb32ec896a93888256779861a05d4"}}]}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1d, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x6c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x0, 0x1, 0x1f, 0x40, 0x3}, 0xdf, &(0x7f0000000d00)={0x5, 0xf, 0xdf, 0x2, [@generic={0xcf, 0x10, 0x4, "dd2d577b1ba5b41343e4ce427683b24f900803fc9aa45381d30c3eea23baafdcec76ba3e373fbe6956bb03494148af80d6b7f39199b35bcc8f715a442cc900ee65af8c6e22ec2f31b7cc06c3f592ec8e057012a5aff6f013b2c7dd0558410c655f338c7c993200f3f6db86d3c1cb3ecb72b6dd743023853e7bf743d659888127505bbf074d7f443abc9807071305312687d876e05e2dfbe68547e3a189a65e1f1de5a45d43d47fc33541344587b9fb29324d0c89ee62c01972b406aabd0fe80ba558d5ff69d1f4d2a92e6079"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x3, 0x4, 0x8}]}, 0x3, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x41d}}, {0x101, &(0x7f0000000e80)=@string={0x101, 0x3, "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"}}]}) [ 3160.163616][ T5155] UDC core: couldn't find an available UDC or it's busy: -16 [ 3160.171936][ T5313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3160.190979][ T5313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3160.200476][ T5313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3160.221251][ T5155] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3160.231332][ T5313] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3160.241450][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.281584][ T5151] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3160.302468][ T5313] hub 5-1:1.0: bad descriptor, ignoring hub [ 3160.308816][ T5313] hub: probe of 5-1:1.0 failed with error -5 [ 3160.637356][ T5151] UDC core: couldn't find an available UDC or it's busy: -16 [ 3160.661846][ T5151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09af3f57e8cc45d0b9dddeb5766eff0f9696860fecf3b40400000102090000052406000105240800000d240f01000000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x5816, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000aff000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3161.043923][ T5162] UDC core: couldn't find an available UDC or it's busy: -16 [ 3161.072165][ T5162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3165.051146][ T5074] usb 3-1: device descriptor read/8, error -110 [ 3165.460993][ T5074] usb 3-1: reset low-speed USB device number 113 using dummy_hcd [ 3165.571140][ T5074] usb 3-1: device descriptor read/8, error -32 [ 3165.694148][T13827] usb 3-1: USB disconnect, device number 113 [ 3165.695993][ T5074] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3165.707003][ T5119] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3165.713214][ T5112] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3165.719214][ T5150] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3165.744689][ T5313] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 3165.760149][ T5147] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3165.764713][ T5313] cdc_wdm 5-1:1.0: Unknown control protocol [ 3165.786686][ T5161] cdc_wdm 3-1:1.0: Error autopm - -16 15:13:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09af3f57e8cc45d0b9dddeb5766eff0f9696860fecf3b40400000102090000052406000105240800000d240f01000000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x5816, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000aff000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09af3f57e8cc45d0b9dddeb5766eff0f9696860fecf3b40400000102090000052406000105240800000d240f01000000000000"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x5816, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000aff000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) [ 3165.844660][ T5313] usb 5-1: USB disconnect, device number 52 [ 3166.051811][ T5167] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.059787][ T5167] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x51f6, 0x0, 0x3, 0x4, 0x0, r3}, &(0x7f0000667000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="baf80c66b8e6242c8266efbafc0cb0d6ee0f015c032e2e0fa0ea00385a00baf80c66b8ec23728b66efbafc0c66b80000000066efdcfe2e65660f38812866b8010000000f01d9ba4000ed660f65750e", 0x4f}], 0x1, 0x0, &(0x7f0000000180)=[@cr0={0x0, 0x28}, @cr4={0x1, 0x321}], 0x2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1194}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x829f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private2, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @mcast2}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc09a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4080}, 0x40011) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:13:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000000000109025c00052406000105240800000006241a200000090581164c00"/62], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000666000/0x1000)=nil, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 64) r3 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(r3, 0x2, 0x80, &(0x7f0000000040)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) fcntl$setstatus(r5, 0x4, 0x40000) 15:13:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09af3f57e8cc45d0b9dddeb5766eff0f9696860fecf3b40400000102090000052406000105240800000d240f01000000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) syz_io_uring_setup(0x5816, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000aff000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 15:13:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a09af3f57e8cc45d0b9dddeb5766eff0f9696860fecf3b40400000102090000052406000105240800000d240f01000000000000"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) syz_io_uring_setup(0x5816, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000aff000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3166.196351][ T5189] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.208578][ T5182] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.250450][ T5189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.288621][ T5182] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.297539][ T5198] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.335133][ T5198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.369664][ T5202] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.403249][ T5202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.493322][ T5313] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 3166.534596][ T5182] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.547372][ T5177] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.559522][ T5177] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.567819][ T5182] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x1, 0xe8, {0xe8, 0x4, "28e61051c0d2365d6b0ee75773bc2ce15b0cc0ccd9ae5bca92c9739f6e52e4a320f28c6dccaff246fcc226531405c36e0a8bbc658d17ac130c7fd75fefb53430f415227dca3a0a3464314443674e280009bf145429341c69611e2bfde533000bb949de8f7480d6fc481100c67b8bf72a366488506ca96ddcd15b30d14477a419437cac46e7c21671f883704cc16fd30ab4407faac77d09f33317c73c830ea5d102539bd55758aeb47fa6caaeed1a2bdf77ad9fdae912baa40c5c8a2406e050bcb5a0c087934cb9e580c6c31a812bf42639ce5fe5427df6e0c941e4e3a004db102c58c086dc32"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x3, 0xa0, "439c9ee9434131303784a2a11054930dda2623d1326fe961774417587e24548b7778d9d6d5b4c1b3e0cb4178bf7451ca68901b5d5420fe4641810d9e4d06c7ddc7b679908a982dfbc9bcb43d3bd0f8e3eb8efb246fb44aae4d26c7eb697bf50355982461290ed38b7855f84482678075268bf5d7e809e41c1c6cbe337457c0eeacf0eb116801010a54805ba029fd7e7946ca5b2913e52cce88858a6a4dd3dcc0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x0, 0x4, 0x2, 0xff, 0x8, 0x0, 0x6e6, 0x400, 0xfff9, 0x5, 0x416}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) readahead(r5, 0x101, 0xde) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r6 = socket(0x2, 0x3, 0xffffffff) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3ccc00001000040027bd7000fedbdf251d01010015000400010000e000590700c13f79283825acc9020000e22611403edd7e100600000008000a002f814466a4b742c165ea43038fc4d0a74f9df6ac3a79aded6205ab142605442eaf889e8f62cb4330c44612891df6c7a30e9ce93fdfaaa89ea2ebd47c9e5de4ecde8c43162ec180018b1dd2c4562a3624c94e9a8c184e1cf29892424ba81ffa7573a63f1f64b9cd211c89bdbb27f4b813f4d4a65b64326007b5a56e66d75a1b5cfd872e6e0d6baba899f5485112", @ANYRES32=0x0, @ANYBLOB="08000500758d0b749197012572860a3cc34932affbb6f6812ccbc43d511835a94aac2defd279cdb6d68cf58f6f10664747a437535143335924825687a05ca9536e0010de2501c58d9d9e37e8d38f54160f18ee662ce5620b91f3de68a8ea441b84bdb57f807050a7fb038fbf4e911167c3e27150937eae1b668d495622988901a8a4e5c39c0edb3d82fc02aaa68fa0c802624efaeaba63cef5e90f9afaa77f4cb11e50bce5e34124b860e9b5b2bbcbe5e9a1d0462862cad490ea6e8fa12d4350bdc2281b7d9107453d6543a3ca5f00000000000200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4) write(r1, &(0x7f0000000000)="e48eafbda7f8fb67d8acadb7aca763201f1b6910e2bade0b76ab7582765230512f5ba2a90645c9cf398a28cc6e74b78048a7ec0d9afa1c7430e4495d5f5f8ac58e2439451234e5f8d0f33948fe5d437f89f98f112b47ab7852ab2c528b5d3d3e05e49dfcfbb4f6ac3ccb2f884c0aefe3767c6a3b1cbe77447e4489738f1f745fcfbc", 0x82) [ 3166.711170][T13827] usb 3-1: new low-speed USB device number 114 using dummy_hcd 15:13:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESDEC=r3, @ANYRES16, @ANYRES64=r3, @ANYRES64], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3166.809848][ T5226] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.834183][ T5226] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.855625][ T5232] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.871257][ T5313] usb 5-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 3166.889189][ T5313] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3166.900163][ T5313] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3166.911814][ T5232] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.914574][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3166.976204][ T5234] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.995726][ T5234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3167.091151][T13827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3167.121067][T13827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3167.130568][T13827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3167.139992][ T5226] UDC core: couldn't find an available UDC or it's busy: -16 [ 3167.155690][ T5226] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3167.161022][T13827] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3167.190955][T13827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:13:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1194}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x829f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private2, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @mcast2}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc09a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4080}, 0x40011) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) (async) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async, rerun: 64) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (rerun: 64) [ 3167.241635][ T5200] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3167.262578][T13827] hub 3-1:1.0: bad descriptor, ignoring hub [ 3167.269217][T13827] hub: probe of 3-1:1.0 failed with error -5 [ 3167.294667][T13827] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3167.308760][T13827] cdc_wdm 3-1:1.0: Unknown control protocol [ 3167.334214][ T5234] UDC core: couldn't find an available UDC or it's busy: -16 [ 3167.371992][ T144] usb 5-1: USB disconnect, device number 53 [ 3167.387257][ T5234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1194}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x829f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private2, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @mcast2}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc09a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4080}, 0x40011) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f0000000540)={0x0, 0xacf3, 0x1, 0x0, 0x361}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3167.704388][ T5259] UDC core: couldn't find an available UDC or it's busy: -16 [ 3167.712496][ T5259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r3, 0x0, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x51f6, 0x0, 0x3, 0x4, 0x0, r3}, &(0x7f0000667000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="baf80c66b8e6242c8266efbafc0cb0d6ee0f015c032e2e0fa0ea00385a00baf80c66b8ec23728b66efbafc0c66b80000000066efdcfe2e65660f38812866b8010000000f01d9ba4000ed660f65750e", 0x4f}], 0x1, 0x0, &(0x7f0000000180)=[@cr0={0x0, 0x28}, @cr4={0x1, 0x321}], 0x2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) readahead(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0x51f6, 0x0, 0x3, 0x4, 0x0, r3}, &(0x7f0000667000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="baf80c66b8e6242c8266efbafc0cb0d6ee0f015c032e2e0fa0ea00385a00baf80c66b8ec23728b66efbafc0c66b80000000066efdcfe2e65660f38812866b8010000000f01d9ba4000ed660f65750e", 0x4f}], 0x1, 0x0, &(0x7f0000000180)=[@cr0={0x0, 0x28}, @cr4={0x1, 0x321}], 0x2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:13:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x1, 0xe8, {0xe8, 0x4, "28e61051c0d2365d6b0ee75773bc2ce15b0cc0ccd9ae5bca92c9739f6e52e4a320f28c6dccaff246fcc226531405c36e0a8bbc658d17ac130c7fd75fefb53430f415227dca3a0a3464314443674e280009bf145429341c69611e2bfde533000bb949de8f7480d6fc481100c67b8bf72a366488506ca96ddcd15b30d14477a419437cac46e7c21671f883704cc16fd30ab4407faac77d09f33317c73c830ea5d102539bd55758aeb47fa6caaeed1a2bdf77ad9fdae912baa40c5c8a2406e050bcb5a0c087934cb9e580c6c31a812bf42639ce5fe5427df6e0c941e4e3a004db102c58c086dc32"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x3, 0xa0, "439c9ee9434131303784a2a11054930dda2623d1326fe961774417587e24548b7778d9d6d5b4c1b3e0cb4178bf7451ca68901b5d5420fe4641810d9e4d06c7ddc7b679908a982dfbc9bcb43d3bd0f8e3eb8efb246fb44aae4d26c7eb697bf50355982461290ed38b7855f84482678075268bf5d7e809e41c1c6cbe337457c0eeacf0eb116801010a54805ba029fd7e7946ca5b2913e52cce88858a6a4dd3dcc0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x0, 0x4, 0x2, 0xff, 0x8, 0x0, 0x6e6, 0x400, 0xfff9, 0x5, 0x416}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) readahead(r5, 0x101, 0xde) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r6 = socket(0x2, 0x3, 0xffffffff) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3ccc00001000040027bd7000fedbdf251d01010015000400010000e000590700c13f79283825acc9020000e22611403edd7e100600000008000a002f814466a4b742c165ea43038fc4d0a74f9df6ac3a79aded6205ab142605442eaf889e8f62cb4330c44612891df6c7a30e9ce93fdfaaa89ea2ebd47c9e5de4ecde8c43162ec180018b1dd2c4562a3624c94e9a8c184e1cf29892424ba81ffa7573a63f1f64b9cd211c89bdbb27f4b813f4d4a65b64326007b5a56e66d75a1b5cfd872e6e0d6baba899f5485112", @ANYRES32=0x0, @ANYBLOB="08000500758d0b749197012572860a3cc34932affbb6f6812ccbc43d511835a94aac2defd279cdb6d68cf58f6f10664747a437535143335924825687a05ca9536e0010de2501c58d9d9e37e8d38f54160f18ee662ce5620b91f3de68a8ea441b84bdb57f807050a7fb038fbf4e911167c3e27150937eae1b668d495622988901a8a4e5c39c0edb3d82fc02aaa68fa0c802624efaeaba63cef5e90f9afaa77f4cb11e50bce5e34124b860e9b5b2bbcbe5e9a1d0462862cad490ea6e8fa12d4350bdc2281b7d9107453d6543a3ca5f00000000000200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4) write(r1, &(0x7f0000000000)="e48eafbda7f8fb67d8acadb7aca763201f1b6910e2bade0b76ab7582765230512f5ba2a90645c9cf398a28cc6e74b78048a7ec0d9afa1c7430e4495d5f5f8ac58e2439451234e5f8d0f33948fe5d437f89f98f112b47ab7852ab2c528b5d3d3e05e49dfcfbb4f6ac3ccb2f884c0aefe3767c6a3b1cbe77447e4489738f1f745fcfbc", 0x82) 15:13:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) readahead(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1194}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x829f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private2, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @mcast2}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc09a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4080}, 0x40011) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000500)) r3 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3167.861975][ T5313] usb 3-1: USB disconnect, device number 114 [ 3167.891249][ T5259] cdc_wdm 3-1:1.0: Error autopm - -16 [ 3167.981872][ T5259] UDC core: couldn't find an available UDC or it's busy: -16 [ 3167.989730][ T5259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xf144, 0x0, 0x1}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) 15:13:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x1, 0xe8, {0xe8, 0x4, "28e61051c0d2365d6b0ee75773bc2ce15b0cc0ccd9ae5bca92c9739f6e52e4a320f28c6dccaff246fcc226531405c36e0a8bbc658d17ac130c7fd75fefb53430f415227dca3a0a3464314443674e280009bf145429341c69611e2bfde533000bb949de8f7480d6fc481100c67b8bf72a366488506ca96ddcd15b30d14477a419437cac46e7c21671f883704cc16fd30ab4407faac77d09f33317c73c830ea5d102539bd55758aeb47fa6caaeed1a2bdf77ad9fdae912baa40c5c8a2406e050bcb5a0c087934cb9e580c6c31a812bf42639ce5fe5427df6e0c941e4e3a004db102c58c086dc32"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x3, 0xa0, "439c9ee9434131303784a2a11054930dda2623d1326fe961774417587e24548b7778d9d6d5b4c1b3e0cb4178bf7451ca68901b5d5420fe4641810d9e4d06c7ddc7b679908a982dfbc9bcb43d3bd0f8e3eb8efb246fb44aae4d26c7eb697bf50355982461290ed38b7855f84482678075268bf5d7e809e41c1c6cbe337457c0eeacf0eb116801010a54805ba029fd7e7946ca5b2913e52cce88858a6a4dd3dcc0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x0, 0x4, 0x2, 0xff, 0x8, 0x0, 0x6e6, 0x400, 0xfff9, 0x5, 0x416}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) readahead(r5, 0x101, 0xde) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r6 = socket(0x2, 0x3, 0xffffffff) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3ccc00001000040027bd7000fedbdf251d01010015000400010000e000590700c13f79283825acc9020000e22611403edd7e100600000008000a002f814466a4b742c165ea43038fc4d0a74f9df6ac3a79aded6205ab142605442eaf889e8f62cb4330c44612891df6c7a30e9ce93fdfaaa89ea2ebd47c9e5de4ecde8c43162ec180018b1dd2c4562a3624c94e9a8c184e1cf29892424ba81ffa7573a63f1f64b9cd211c89bdbb27f4b813f4d4a65b64326007b5a56e66d75a1b5cfd872e6e0d6baba899f5485112", @ANYRES32=0x0, @ANYBLOB="08000500758d0b749197012572860a3cc34932affbb6f6812ccbc43d511835a94aac2defd279cdb6d68cf58f6f10664747a437535143335924825687a05ca9536e0010de2501c58d9d9e37e8d38f54160f18ee662ce5620b91f3de68a8ea441b84bdb57f807050a7fb038fbf4e911167c3e27150937eae1b668d495622988901a8a4e5c39c0edb3d82fc02aaa68fa0c802624efaeaba63cef5e90f9afaa77f4cb11e50bce5e34124b860e9b5b2bbcbe5e9a1d0462862cad490ea6e8fa12d4350bdc2281b7d9107453d6543a3ca5f00000000000200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4) write(r1, &(0x7f0000000000)="e48eafbda7f8fb67d8acadb7aca763201f1b6910e2bade0b76ab7582765230512f5ba2a90645c9cf398a28cc6e74b78048a7ec0d9afa1c7430e4495d5f5f8ac58e2439451234e5f8d0f33948fe5d437f89f98f112b47ab7852ab2c528b5d3d3e05e49dfcfbb4f6ac3ccb2f884c0aefe3767c6a3b1cbe77447e4489738f1f745fcfbc", 0x82) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x1, 0xe8, {0xe8, 0x4, "28e61051c0d2365d6b0ee75773bc2ce15b0cc0ccd9ae5bca92c9739f6e52e4a320f28c6dccaff246fcc226531405c36e0a8bbc658d17ac130c7fd75fefb53430f415227dca3a0a3464314443674e280009bf145429341c69611e2bfde533000bb949de8f7480d6fc481100c67b8bf72a366488506ca96ddcd15b30d14477a419437cac46e7c21671f883704cc16fd30ab4407faac77d09f33317c73c830ea5d102539bd55758aeb47fa6caaeed1a2bdf77ad9fdae912baa40c5c8a2406e050bcb5a0c087934cb9e580c6c31a812bf42639ce5fe5427df6e0c941e4e3a004db102c58c086dc32"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x3, 0xa0, "439c9ee9434131303784a2a11054930dda2623d1326fe961774417587e24548b7778d9d6d5b4c1b3e0cb4178bf7451ca68901b5d5420fe4641810d9e4d06c7ddc7b679908a982dfbc9bcb43d3bd0f8e3eb8efb246fb44aae4d26c7eb697bf50355982461290ed38b7855f84482678075268bf5d7e809e41c1c6cbe337457c0eeacf0eb116801010a54805ba029fd7e7946ca5b2913e52cce88858a6a4dd3dcc0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x0, 0x4, 0x2, 0xff, 0x8, 0x0, 0x6e6, 0x400, 0xfff9, 0x5, 0x416}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0xfffb}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) readahead(r5, 0x101, 0xde) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) (async) socket(0x2, 0x3, 0xffffffff) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3ccc00001000040027bd7000fedbdf251d01010015000400010000e000590700c13f79283825acc9020000e22611403edd7e100600000008000a002f814466a4b742c165ea43038fc4d0a74f9df6ac3a79aded6205ab142605442eaf889e8f62cb4330c44612891df6c7a30e9ce93fdfaaa89ea2ebd47c9e5de4ecde8c43162ec180018b1dd2c4562a3624c94e9a8c184e1cf29892424ba81ffa7573a63f1f64b9cd211c89bdbb27f4b813f4d4a65b64326007b5a56e66d75a1b5cfd872e6e0d6baba899f5485112", @ANYRES32=0x0, @ANYBLOB="08000500758d0b749197012572860a3cc34932affbb6f6812ccbc43d511835a94aac2defd279cdb6d68cf58f6f10664747a437535143335924825687a05ca9536e0010de2501c58d9d9e37e8d38f54160f18ee662ce5620b91f3de68a8ea441b84bdb57f807050a7fb038fbf4e911167c3e27150937eae1b668d495622988901a8a4e5c39c0edb3d82fc02aaa68fa0c802624efaeaba63cef5e90f9afaa77f4cb11e50bce5e34124b860e9b5b2bbcbe5e9a1d0462862cad490ea6e8fa12d4350bdc2281b7d9107453d6543a3ca5f00000000000200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x4) (async) write(r1, &(0x7f0000000000)="e48eafbda7f8fb67d8acadb7aca763201f1b6910e2bade0b76ab7582765230512f5ba2a90645c9cf398a28cc6e74b78048a7ec0d9afa1c7430e4495d5f5f8ac58e2439451234e5f8d0f33948fe5d437f89f98f112b47ab7852ab2c528b5d3d3e05e49dfcfbb4f6ac3ccb2f884c0aefe3767c6a3b1cbe77447e4489738f1f745fcfbc", 0x82) (async) [ 3168.217313][ T5287] UDC core: couldn't find an available UDC or it's busy: -16 [ 3168.225772][ T5287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) syz_usb_disconnect(r2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESDEC=r3, @ANYRES16, @ANYRES64=r3, @ANYRES64], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f00000000c0), &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) (async) syz_usb_disconnect(r2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESDEC=r3, @ANYRES16, @ANYRES64=r3, @ANYRES64], 0x0) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") (async) [ 3168.271295][ T144] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 3168.341829][ T5292] UDC core: couldn't find an available UDC or it's busy: -16 [ 3168.349957][ T5292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3168.401173][ T5313] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 3168.444546][ T5287] UDC core: couldn't find an available UDC or it's busy: -16 [ 3168.462345][ T5287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3168.472615][ T5295] UDC core: couldn't find an available UDC or it's busy: -16 [ 3168.498591][ T5295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 15:13:34 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x969, &(0x7f0000000540)={0x0, 0xacf3, 0x1, 0x0, 0x361}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async, rerun: 32) syz_usb_disconnect(r2) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") 15:13:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10002) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010006090000082502000000000000000000025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c1410d29a"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x969, &(0x7f00000000c0)={0x0, 0xddf9, 0x4, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000e8ff84ffff170000", @ANYRES32=r1, @ANYBLOB="362c340800000000000000000094290400004ddc3bb064c73a9405de56533a0ac9aec424f705b6ea8ba5f453f3eb0cbc06678266e618c7a9ca847ef9189fee1aa718d2a089d7212b9433c5a2331b21c36f93275a6f88b87e90741962336f32"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000180)=0x1) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20010, r3, 0x8000000) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095cb0e5d399f93522880adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x1, 0x4000}) 15:13:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41008080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) [ 3168.703171][ T144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3168.718972][ T144] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3168.742486][ T144] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3168.759770][ T144] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3168.771015][ T144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.791349][ T5313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3168.806769][ T5320] ------------[ cut here ]------------ [ 3168.821451][ T5266] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3168.832552][ T5320] WARNING: CPU: 1 PID: 5320 at kernel/kthread.c:524 kthread_bind_mask+0x35/0xc0 [ 3168.835290][ T5295] UDC core: couldn't find an available UDC or it's busy: -16 [ 3168.850208][ T5313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3168.860297][ T5295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3168.868777][ T5313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 3168.880784][ T5313] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3168.890748][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.904813][ T5324] UDC core: couldn't find an available UDC or it's busy: -16 [ 3168.915589][ T5320] Modules linked in: [ 3168.915650][ T144] hub 5-1:1.0: bad descriptor, ignoring hub [ 3168.920406][ T5320] CPU: 0 PID: 5320 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0 [ 3168.920462][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3168.920481][ T5320] RIP: 0010:kthread_bind_mask+0x35/0xc0 [ 3168.920534][ T5320] Code: fb e8 9f 15 2a 00 be 02 00 00 00 48 89 df e8 12 d1 03 00 31 ff 48 89 c5 48 89 c6 e8 15 18 2a 00 48 85 ed 75 12 e8 7b 15 2a 00 <0f> 0b 5b 5d 41 5c 41 5d e9 6e 15 2a 00 e8 69 15 2a 00 4c 8d ab 80 [ 3168.920564][ T5320] RSP: 0018:ffffc90015b0fc00 EFLAGS: 00010212 [ 3168.920590][ T5320] RAX: 000000000000207a RBX: ffff88807714d700 RCX: ffffc90003da1000 [ 3168.920610][ T5320] RDX: 0000000000040000 RSI: ffffffff814f0605 RDI: 0000000000000003 [ 3168.920648][ T5320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 3168.920666][ T5320] R10: ffffffff814f05fb R11: 0000000000000001 R12: ffffffff8db70d18 [ 3168.920686][ T5320] R13: ffff888024e76c40 R14: ffff88801ad52820 R15: ffff88801ad52800 [ 3168.920726][ T5320] FS: 00007f1ddc961700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 3168.920757][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3168.920777][ T5320] CR2: 00007fbdfded1000 CR3: 0000000016023000 CR4: 00000000003526f0 [ 3168.920796][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3168.921006][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3168.921047][ T5320] Call Trace: [ 3168.921056][ T5320] [ 3168.921070][ T5320] init_rescuer+0x141/0x1d0 [ 3168.921192][ T5320] alloc_workqueue+0xbf7/0xf00 [ 3168.921346][ T5320] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3168.921385][ T5320] ? init_srcu_struct_fields+0xcb2/0x1360 [ 3168.921540][ T5320] ? kvm_mmu_init_tdp_mmu+0x61/0x230 [ 3168.952044][ T144] hub: probe of 5-1:1.0 failed with error -5 [ 3168.956142][ T5283] raw-gadget gadget: fail, usb_ep_enable returned -22 15:13:35 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x450, 0x0, 0x61, 0x148, 0x40a, 0x148, 0x430, 0x223, 0x240, 0x430, 0x205, 0xc0, 0x0, {[{{@ip={@local={0xac, 0x9}, @empty=0x204, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x34000000f0030000, 0x2b0}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500)) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a200000090581164c"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x969, &(0x7f0000000540)={0x0, 0xacf3, 0x1, 0x0, 0x361}, &(0x7f0000666000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000740)=0x1) (async) syz_usb_disconnect(r2) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xf8, 0x80, &(0x7f0000000780)="24c256f5c3b1a2905e9fa25a712214b909ecaedd7c99aa4bd0afd6adab2f900fc73834f1cce8d360ea3b4add9a5f38f87c48bb6fee2b711ac5cc219b17fb67ea7b19750f4bfb2a7f3dd5154fa6f975be7ad511ff1b15afe946073d7281346da095adcabc4ede05c15ae9a46cfdb567c2c2b10edf6b5390074c5ff745f2213f0e") [ 3169.112560][ T5324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3169.129710][ T5346] UDC core: couldn't find an available UDC or it's busy: -16 [ 3169.164495][ T5346] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3169.166051][ T5320] kvm_mmu_init_tdp_mmu+0x8e/0x230 [ 3169.174163][ T5313] hub 3-1:1.0: bad descriptor, ignoring hub [ 3169.201087][ T5313] hub: probe of 3-1:1.0 failed with error -5 [ 3169.232718][ T144] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3169.249419][ T5313] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 3169.250011][ T144] cdc_wdm 5-1:1.0: Unknown control protocol [ 3169.263772][ T5313] cdc_wdm 3-1:1.0: Unknown control protocol [ 3169.267544][ T5320] kvm_mmu_init_vm+0x128/0x210 [ 3169.316574][ T5351] UDC core: couldn't find an available UDC or it's busy: -16 [ 3169.320005][ T5320] kvm_arch_init_vm+0x64/0x680 [ 3169.336514][ T5320] kvm_dev_ioctl+0xc00/0x1c70 [ 3169.342209][ T5320] ? kvm_stat_data_open+0x380/0x380 [ 3169.347855][ T5320] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3169.354890][ T5320] ? kvm_stat_data_open+0x380/0x380 [ 3169.357680][ T144] usb 5-1: USB disconnect, device number 54 [ 3169.360978][ T5320] __x64_sys_ioctl+0x193/0x200 [ 3169.372082][ T5320] do_syscall_64+0x35/0xb0 [ 3169.376910][ T5320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3169.385362][ T5351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3169.388890][ T5320] RIP: 0033:0x7f1ddb8890e9 [ 3169.402726][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3169.515049][T27183] usb 3-1: USB disconnect, device number 115 [ 3169.595324][ T5320] RSP: 002b:00007f1ddc961168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3169.606393][ T5320] RAX: ffffffffffffffda RBX: 00007f1ddb99bf60 RCX: 00007f1ddb8890e9 [ 3169.640092][ T5320] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 3169.649510][ T5320] RBP: 00007f1ddb8e308d R08: 0000000000000000 R09: 0000000000000000 [ 3169.660495][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3169.669873][ T5320] R13: 00007f1ddbecfb1f R14: 00007f1ddc961300 R15: 0000000000022000 [ 3169.679211][ T5320] [ 3169.682581][ T5320] Kernel panic - not syncing: panic_on_warn set ... [ 3169.689166][ T5320] CPU: 1 PID: 5320 Comm: syz-executor.1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0 [ 3169.699584][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3169.709641][ T5320] Call Trace: [ 3169.712924][ T5320] [ 3169.715855][ T5320] dump_stack_lvl+0xcd/0x134 [ 3169.720463][ T5320] panic+0x2d7/0x636 [ 3169.724396][ T5320] ? panic_print_sys_info.part.0+0x10b/0x10b [ 3169.730391][ T5320] ? __warn.cold+0x1d1/0x2c5 [ 3169.734988][ T5320] ? kthread_bind_mask+0x35/0xc0 [ 3169.739935][ T5320] __warn.cold+0x1e2/0x2c5 [ 3169.744362][ T5320] ? kthread_bind_mask+0x35/0xc0 [ 3169.749304][ T5320] report_bug+0x1bd/0x210 [ 3169.753644][ T5320] handle_bug+0x3c/0x60 [ 3169.757906][ T5320] exc_invalid_op+0x14/0x40 [ 3169.762415][ T5320] asm_exc_invalid_op+0x12/0x20 [ 3169.767273][ T5320] RIP: 0010:kthread_bind_mask+0x35/0xc0 [ 3169.772828][ T5320] Code: fb e8 9f 15 2a 00 be 02 00 00 00 48 89 df e8 12 d1 03 00 31 ff 48 89 c5 48 89 c6 e8 15 18 2a 00 48 85 ed 75 12 e8 7b 15 2a 00 <0f> 0b 5b 5d 41 5c 41 5d e9 6e 15 2a 00 e8 69 15 2a 00 4c 8d ab 80 [ 3169.792438][ T5320] RSP: 0018:ffffc90015b0fc00 EFLAGS: 00010212 [ 3169.798511][ T5320] RAX: 000000000000207a RBX: ffff88807714d700 RCX: ffffc90003da1000 [ 3169.806482][ T5320] RDX: 0000000000040000 RSI: ffffffff814f0605 RDI: 0000000000000003 [ 3169.814452][ T5320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 3169.822418][ T5320] R10: ffffffff814f05fb R11: 0000000000000001 R12: ffffffff8db70d18 [ 3169.830389][ T5320] R13: ffff888024e76c40 R14: ffff88801ad52820 R15: ffff88801ad52800 [ 3169.838367][ T5320] ? kthread_bind_mask+0x2b/0xc0 [ 3169.843310][ T5320] ? kthread_bind_mask+0x35/0xc0 [ 3169.848254][ T5320] init_rescuer+0x141/0x1d0 [ 3169.852761][ T5320] alloc_workqueue+0xbf7/0xf00 [ 3169.857544][ T5320] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 3169.863285][ T5320] ? init_srcu_struct_fields+0xcb2/0x1360 [ 3169.869034][ T5320] ? kvm_mmu_init_tdp_mmu+0x61/0x230 [ 3169.874341][ T5320] kvm_mmu_init_tdp_mmu+0x8e/0x230 [ 3169.879464][ T5320] kvm_mmu_init_vm+0x128/0x210 [ 3169.884235][ T5320] kvm_arch_init_vm+0x64/0x680 [ 3169.889010][ T5320] kvm_dev_ioctl+0xc00/0x1c70 [ 3169.893861][ T5320] ? kvm_stat_data_open+0x380/0x380 [ 3169.899097][ T5320] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3169.905373][ T5320] ? kvm_stat_data_open+0x380/0x380 [ 3169.910598][ T5320] __x64_sys_ioctl+0x193/0x200 [ 3169.915384][ T5320] do_syscall_64+0x35/0xb0 [ 3169.919816][ T5320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3169.925719][ T5320] RIP: 0033:0x7f1ddb8890e9 [ 3169.930141][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3169.949750][ T5320] RSP: 002b:00007f1ddc961168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3169.958171][ T5320] RAX: ffffffffffffffda RBX: 00007f1ddb99bf60 RCX: 00007f1ddb8890e9 [ 3169.966148][ T5320] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 3169.974116][ T5320] RBP: 00007f1ddb8e308d R08: 0000000000000000 R09: 0000000000000000 [ 3169.982128][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3169.990098][ T5320] R13: 00007f1ddbecfb1f R14: 00007f1ddc961300 R15: 0000000000022000 [ 3169.998084][ T5320] [ 3170.001484][ T5320] Kernel Offset: disabled [ 3170.006097][ T5320] Rebooting in 86400 seconds..