)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002940)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002900)={&(0x7f0000001500)={0x13e4, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x400}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12a0, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xae, 0x0, "2a1ba7daab891e532190ff9415ad459ef86516657677b73d960ef972f39435f68d70d8fce5d789d07885280a29d11326eb81523e23d4423ab3be401f8bd2fcd575760d8113173f31d070bcdfc1aa91107a33160d4e8017427a4e7a87b2713d07d7a8e46e77d78b72a61bd8df71250e63f5f2584f6d50941c95ac8ccb595f07ee77afa16f907686748f4e291196ce3b6dc326e430d9e5c833600ebd5e29e1ff441cd5a6ac56ce3ba92de6"}, @NL80211_BAND_5GHZ={0xb6, 0x1, "cbb01167ff3d3ae320b31dd0f1b0b30e19e0e0b08687faf172e9b3afea0b6484e6c5f59f4bc2b0e8350c208b47658dbbd3eb3f25d7746ae8bb4b619eea28d2690af92c28cb243a500915d76f396ea91435aabe749e9aab5dff89762475257fa417d5f66c507abf5a9602596b42588201dd387a49ae9c2de03eb28a1823d43db8fa17dccedbcf9daae46c5a2d40da78803696eb3604f136a9bf6d1576687803ebace209f18e6b9962d59de7a231053e8ac53b"}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_60GHZ={0x43, 0x2, "810d829d01952baee1ee1a39c1e36b815f3d1820e91bb82e26505fad6ea5018c0cd0c98b1f1c72acd473350fe4607686880bb668754f85f985eba79f3ef566"}, @NL80211_BAND_5GHZ={0xe5, 0x1, "0bc9087e7626bcad461fe992456cdd9f8b88607db1c27ae8208d264de1d601af07ff2527ead3f0d17aff2833f31e46386ec526b671c9c2fb0395836096a172b73cdbf3ef1a366b35e1ce70dde029974f918afb69363b0ac3a4307e48c43370c098cef301cf677ea734cac80d93c6e7e0d03d37abad55946f4cbef7bfc72258a2f01528ed04f8128b3c891d5779412c3c8aa4cf72269f9c1f5a532b07b5aec8ac318f82b6049b4a826d172e48d6fcb3acd73e624590ef8cda02d94d0966adc280d2a52fd8a4bc55c2d478ec94f9ed29ce794fc7b9da878b2b044f6b4d60cd5ee766"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SCAN_SUPP_RATES={0xfc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, "84ec27d42032cdd3387a520ba8c92e07c03e18fdcfa125d5e60022f69ef97f43ef62d0a3b7cf92b5ea3cecad2ace6167f01d3dd583be566599ae9ae36f79ca317e2da77dbfe311a5dbbcac356547a559a28825a589f168c477179d85c3ff859e0670fb7f0f4d61db87ace2878e500812d122b03952da939e480e8a58236b4aea1d4b4af165e188358170d1d1665f24c7f689b910fc69054b"}, @NL80211_BAND_60GHZ={0x5c, 0x2, "1afe3bf72f538036c02da9bc0bfc81da4b85b6ec7d2fe030bf4e928e3e867911ed8a8d3d399c946b7bf520bb5720b1aa518f4488af0a7ef1a63938170176831608f8586782a0cb2a3fb28f850a2339364ee4290fd09eff1d"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x4000}, 0x24044) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2221.143303][T25703] usb 2-1: can't set config #1, error -71 [ 2221.150663][T25703] usb 2-1: USB disconnect, device number 62 17:55:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2221.344048][T22664] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2221.352440][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2221.368703][T22664] usb 4-1: USB disconnect, device number 39 17:55:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xa}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2221.553379][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2221.562503][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.570789][T17408] usb 3-1: Product: syz [ 2221.577429][T17408] usb 3-1: Manufacturer: syz [ 2221.582109][T17408] usb 3-1: SerialNumber: syz [ 2221.583164][T25703] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2221.693230][ T5484] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2221.863351][ T5484] usb 5-1: device descriptor read/8, error -61 [ 2221.973234][T25703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.133086][ T5484] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2222.143214][T25703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2222.160200][T25703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.168257][T25703] usb 2-1: Product: syz [ 2222.172828][T25703] usb 2-1: Manufacturer: syz [ 2222.186348][T25703] usb 2-1: SerialNumber: syz [ 2222.303267][ T5484] usb 5-1: device descriptor read/8, error -61 [ 2222.423425][ T5484] usb usb5-port1: unable to enumerate USB device 17:55:34 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x3}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xe}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x1100, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) getrusage(0x0, &(0x7f0000000840)) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000800)) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0x22, {0x22, 0x4, "61ac0c61694adc9bec1ab44b05e10702bbca9e29b8d2695537ad6bf0e0f05798"}}, &(0x7f0000000040)={0x0, 0x3, 0x84, @string={0x84, 0x3, "e42481756b23b585b5d14f010d5404fedb1ae7e1e115d6786ca9f262f50e13f5da008920fc4b3cc1e8ac61b3df83e2f1c138f248f6e91084a268c8b7e2ea8bd45ea7f8fa2fd9ad572f54cafc036095d81783affc5fc4ed1c334abc6cf33cc1b97ad8ad80bd638775ed11775bd7df10d70a1c35fd96be46903ff35e96ac503c6d7ac6"}}, &(0x7f0000000100)={0x0, 0xf, 0x106, {0x5, 0xf, 0x106, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0xfb, 0x80, 0x8, 0x20}, @generic={0xd8, 0x10, 0x3, "7fd5ed7f8686cd34e64cbac25e956b39c36051eb08bffaa363df4bcf5f626b2c2f5fa2816ed04af0c16a1f520ba69a10144f259f30bcbc44cbdab2d4913a66c420e39802671efc8388edaf46dd49fba4c93411c3bf09ec02ab3fa0b6189a7e0d21701aa25ede55fb24423c210e4b72403fe73e39763c3b0a0587992ce24d44b9493a1bda64f1368abbc4dbbefbd9d5ed64b3a0c9c740f280afbf84f2319050af20b93120b17d4a03a74bff21532a0800c3c10d9bcec46ef3b36523357d23cd1b3b320cf33d9d884ffdade6ec3a03edffd4d591137c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xa5, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xcc, "524192a53e62d6c47b0f8ab8f7ac3428"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x7f, 0xbd, "d302baa0", "b13400c4"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0x2, 0x0, 0x8a, 0x800, 0x7}}}, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x17}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x80, [0xff]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "aab8"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xed}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "1f2f"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x3}}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@generic={0x1, 0x748000, 0x1}) [ 2222.693091][T17408] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2222.699753][T17408] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2222.719776][T17408] cdc_ncm 3-1:1.0: setting rx_max = 2048 17:55:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xf}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2222.910784][T17408] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2222.929101][T17408] usb 3-1: USB disconnect, device number 104 [ 2222.951596][T17408] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2223.140958][T22664] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2223.234661][ T5484] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2223.353211][T25703] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2223.359687][T25703] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2223.383008][T22664] usb 4-1: Using ep0 maxpacket: 8 [ 2223.389386][T25703] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2223.567505][T25703] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2223.622144][T25703] usb 2-1: USB disconnect, device number 63 [ 2223.628929][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2223.643170][T22664] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 2223.662296][T25703] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2223.665593][T22664] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 2223.692849][T17408] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2223.712147][T22664] usb 4-1: Product: syz [ 2223.733607][T22664] usb 4-1: config 0 descriptor?? [ 2223.813178][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2223.832511][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.857861][ T5484] usb 5-1: Product: syz [ 2223.870107][ T5484] usb 5-1: Manufacturer: syz [ 2223.886807][ T5484] usb 5-1: SerialNumber: syz [ 2224.053098][T22664] usb 4-1: ignoring: probably an ADSL modem [ 2224.094784][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2224.302901][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2224.312222][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.322152][T17408] usb 3-1: Product: syz [ 2224.328197][T17408] usb 3-1: Manufacturer: syz [ 2224.332921][T25704] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2224.333025][T17408] usb 3-1: SerialNumber: syz 17:55:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x48}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109f850710d8e6e026400020100000009040524060001052400000006000f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009058202000200000009050302000200000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000001c0)=0x4) r2 = dup(r1) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)={0xffff, 0x7, 0x4, 0x100000, 0x2, {}, {0x2, 0x0, 0x4, 0x4, 0x20, 0x1f, "adacfe4b"}, 0x7334, 0x4, @offset=0x1, 0xed1a, 0x0, r2}) close(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2224.392944][T17408] usb 3-1: can't set config #1, error -71 [ 2224.401065][T17408] usb 3-1: USB disconnect, device number 105 [ 2224.512979][T22664] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2224.528182][T22664] usb 4-1: USB disconnect, device number 40 17:55:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x4c}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2224.713108][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2224.882890][T17408] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2224.883088][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2224.900808][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.910244][T25704] usb 2-1: Product: syz [ 2224.914975][T25704] usb 2-1: Manufacturer: syz [ 2224.920473][T25704] usb 2-1: SerialNumber: syz 17:55:36 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x148) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x10003, 0x0, &(0x7f0000ffc000/0x2000)=nil}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x60}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2225.023012][T25704] cdc_ncm 2-1:1.0: bind() failure [ 2225.044647][T25704] cdc_ncm 2-1:1.1: bind() failure [ 2225.052860][ T5484] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2225.062952][ T5484] cdc_ncm 5-1:1.0: setting rx_max = 16384 17:55:36 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020009000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2225.097787][T25704] usb 2-1: USB disconnect, device number 64 [ 2225.277670][ T5484] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2225.303216][T17408] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2225.312206][T17408] usb 3-1: can't read configurations, error -61 [ 2225.329576][ T5484] usb 5-1: USB disconnect, device number 90 [ 2225.355948][ T5484] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2225.504578][T17408] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2225.512794][T25704] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2225.532700][ T3011] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2225.872942][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.903658][ T3011] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.914751][ T3011] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 256 [ 2225.932768][T17408] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2225.941649][T17408] usb 3-1: can't read configurations, error -61 [ 2225.948548][T17408] usb usb3-port1: attempt power cycle [ 2226.032651][ T5484] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2226.046373][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2226.056120][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.070589][T25704] usb 2-1: Product: syz [ 2226.078939][T25704] usb 2-1: Manufacturer: syz [ 2226.088903][T25704] usb 2-1: SerialNumber: syz [ 2226.097214][ T3011] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2226.106988][ T3011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.129290][ T3011] usb 4-1: Product: syz [ 2226.133638][ T3011] usb 4-1: Manufacturer: syz [ 2226.138590][ T3011] usb 4-1: SerialNumber: syz [ 2226.392971][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2226.413541][T10046] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2226.572818][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2226.582033][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.598001][ T5484] usb 5-1: Product: syz [ 2226.602223][ T5484] usb 5-1: Manufacturer: syz [ 2226.614396][ T5484] usb 5-1: SerialNumber: syz [ 2226.682718][T17408] usb 3-1: new high-speed USB device number 108 using dummy_hcd 17:55:38 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x68}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2226.814225][ T5484] cdc_ncm 5-1:1.0: bind() failure [ 2226.843664][ T5484] cdc_ncm 5-1:1.1: bind() failure [ 2226.879012][ T5484] usb 5-1: USB disconnect, device number 91 17:55:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x6c}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2226.946586][T17408] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2226.968459][T17408] usb 3-1: can't read configurations, error -61 17:55:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x74}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x7a}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2227.073877][T10046] raw-gadget gadget: fail, usb_ep_enable returned -22 17:55:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xfc}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2227.137402][T17408] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2227.262719][T25704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2227.269274][ T5484] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2227.282437][T25704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2227.290046][T25704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2227.296081][ T3011] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2227.304382][ T3011] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2227.320906][ T3011] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 2227.498530][T25704] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2227.514625][ T3011] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 17:55:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)=0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2227.578213][ T3011] usb 4-1: USB disconnect, device number 41 [ 2227.592598][T17408] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2227.594379][T25704] usb 2-1: USB disconnect, device number 65 [ 2227.600188][T17408] usb 3-1: can't read configurations, error -71 [ 2227.600792][T17408] usb usb3-port1: unable to enumerate USB device [ 2227.627420][ T3011] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 2227.657203][T25704] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2227.672548][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2227.863021][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2227.872086][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.902411][ T5484] usb 5-1: Product: syz [ 2227.907504][ T5484] usb 5-1: Manufacturer: syz [ 2227.932674][ T5484] usb 5-1: SerialNumber: syz [ 2228.222618][T17408] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2228.268734][T10189] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2228.332456][T25704] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2228.632492][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.692740][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.822711][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2228.831802][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.839967][T17408] usb 3-1: Product: syz [ 2228.844957][T17408] usb 3-1: Manufacturer: syz [ 2228.850810][T17408] usb 3-1: SerialNumber: syz [ 2228.862847][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2228.878726][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.903226][T25704] usb 2-1: Product: syz [ 2228.907828][T25704] usb 2-1: Manufacturer: syz [ 2228.914209][T25704] usb 2-1: SerialNumber: syz 17:55:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6558, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:40 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x3}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2229.042542][T25704] cdc_ncm 2-1:1.0: bind() failure [ 2229.061903][T25704] cdc_ncm 2-1:1.1: bind() failure [ 2229.102367][ T5484] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2229.110354][T25704] usb 2-1: USB disconnect, device number 66 [ 2229.119047][ T5484] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2229.161307][T10211] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 2229.327048][ T5484] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2229.342501][T22664] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2229.378909][ T5484] usb 5-1: USB disconnect, device number 92 [ 2229.396713][ T5484] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2229.772480][T22664] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2229.972335][T22664] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2229.981508][T22664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.991632][T22664] usb 4-1: Product: syz [ 2229.997605][T17408] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2230.005802][T22664] usb 4-1: Manufacturer: syz [ 2230.010488][T17408] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2230.019400][T22664] usb 4-1: SerialNumber: syz [ 2230.025342][T17408] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2230.088061][ T5484] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2230.237103][T17408] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2230.265879][T17408] usb 3-1: USB disconnect, device number 110 [ 2230.283230][T17408] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2230.462666][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2230.632782][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2230.641895][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.660830][ T5484] usb 5-1: Product: syz [ 2230.667010][ T5484] usb 5-1: Manufacturer: syz [ 2230.679190][ T5484] usb 5-1: SerialNumber: syz 17:55:42 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f090581030002d680000904010000020d00000904010102020d00000905820200020000003ca964efff8be5558b00861d679efa0905030200023a5e16a2898739300d67d077c46162783f40"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @broadcast, 0x4e24, 0x0, 'dh\x00', 0x0, 0x7, 0x73}, 0x2c) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:42 executing program 1: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES16, @ANYRES32=r0, @ANYRES64=r0], 0x0) pkey_free(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_STATFS(r3, &(0x7f0000000340)={0x60, 0x0, 0x0, {{0x9, 0x200, 0xfffffffffffffd75, 0xff, 0x7fff, 0x4, 0x7ffd, 0x100}}}, 0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xb3, 0x80) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000180)={0x10, 0xfffffeff, {0x51, 0xffff, 0x200, {0x80, 0x4}, {0x8, 0x100}, @cond=[{0x8, 0x6, 0x8e8, 0x1000, 0x5, 0x40}, {0xa71, 0xfff, 0x4, 0x74, 0x5, 0x6}]}, {0x57, 0x2, 0x1, {0x6, 0x8b}, {0x7fff, 0x1}, @ramp={0x3, 0xea6, {0x6, 0x2, 0x4, 0xfff}}}}) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2230.782331][ T5484] usb 5-1: can't set config #1, error -71 [ 2230.801801][ T5484] usb 5-1: USB disconnect, device number 93 17:55:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2230.998344][T25704] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2231.192263][T22664] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2231.198741][T22664] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 2231.202017][ T5484] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2231.367723][T25704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2231.437191][T22664] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 2231.473466][T22664] usb 4-1: USB disconnect, device number 42 [ 2231.496927][T22664] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 2231.532431][T25704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2231.561251][T25704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.578106][ T5484] usb 5-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 2231.601985][T25704] usb 3-1: Product: syz [ 2231.606484][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 2231.643060][T25704] usb 3-1: Manufacturer: syz [ 2231.647688][T25704] usb 3-1: SerialNumber: syz 17:55:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:43 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000140)=0x6) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:43 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1ea40000112030109026400bc8702010000000904000001023adf29f0a3d4b9ff880d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2231.683127][ T5484] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2231.732185][T25704] usb 3-1: can't set config #1, error -71 [ 2231.739362][T25704] usb 3-1: USB disconnect, device number 111 [ 2231.922406][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2231.931501][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.969413][ T5484] usb 5-1: Product: syz [ 2231.978860][ T5484] usb 5-1: Manufacturer: syz [ 2231.983974][ T5484] usb 5-1: SerialNumber: syz 17:55:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000740)={{0x1, 0x0, 0x80, {0x1000, 0xf000, 0x3}}, "be343e656113187ad38680fa5ba98b599648dc75b09e336de168a861aafb6179de22d46f3649616e51165be5bf9c97a649c73b84b894b4f31e0b1aa7120f305b512cb280ed58ee591cdd842ade3107ffb5718f8874f9c3ab684dc5054970f01af7632a3aab56c3d9e243c907b76df17a071aa31dc228a4488ecda4dda36eaef7ca8945ddfe0bdbb560140438a6b2c664e7572e93b03aca008783f623172659a93dd2105ddd4ae10ab2b43082bee1a32437ef56e119de01ff9e2ef6d0178a9adae94e0c92e1dfa69ca639536221331f1c7e75786a7e75c4a033df35f86f5ba3fd28c034555b2ed550a4e6decd044379ce6df0f1ebf80a28e8f050416fcefb5794e6f41bf4d2a70d81a5d0a8199141384d42cba5aef3bdf4cb3daa4ac86cb407aac205d4d9c086a5c9e6de09ccf76812b31464ab2792452b1341d706e64d6119db76038ac1a8e35ba464d527048ac734b6516791d2e2516a1f5735796d3c1195a40bead95a69598899183f8002f3ec87afb7f1a35ceab7da3d65261d8b9186403e163108aaa3bd770c557b8672d01d9e965673a0cfc7c91c9895fb6920e622b45450e530872aea12338da41a2ab9c173435fc654de3ccec1fe7ce32e2c815d12409e1d7ade1fc59ab6c6bccc4747f548f70dabdd7a34da300cef34749768879fc27d16c099230a7a3b132944c2eaa8d5338d9205657fdd8619c9790e873980674b2f030748ed6b2cbad7e9ab79a96d9e2c32170079a68c5b6c702fa6a9cd54a9617c7900fae60f014583ca7b6278951e97aa8678ac23f86c976e881df6db856ac7f9832e76df6c521f3adb6ab6f86578e131a416ca0937ac5ed209d6ebca0b67f3eb90cdf2e5facc3ea6d72fd416c86a2bece75f8af89cc76a02c1a02bfd546666d28c60daa64b252c54c00bdd28282c890552b5c03f57b196176f2398820178f0c308f48d28b62338761a254852ee2269c6e06ea481ee967a8152aa649ba9db6ba789010035ffa8a34246eae69972d7195a413a3d07c40d29836a996fb6f6ec12815388db85108f9021f46c1b4a2fec871aaba971d3ed0a01be0a4d5be9435113059eefe2af60e738cef9fbcc68dda59f3a85e52126ef6bcae9cdbac2044448877a3eaae1594c2801a5c392c7dcec7028d7f4e37e6faaaf3524b9c3ebbd1b924758dfdbd4dbf948107e4d56213a5553d7b7ea6f26800855436f7c4b38b24ff95fd54d98e87217b8512f7b23682c0359aabf913ec0afd9c609e8f09f9c881e722d30c0c020109d66ae480b8d98940f077bca7db4f31fd15e67045aa7593e4103a28d90135ea49afb166c3e74ad60b6b7ca5854dbd6df92d57a6eef87615ae7932d54a03ad7fe0988afba01559d502359935c4be6ebb7103d0ec960d27b6cd9b0ee4a63ecddfb7fd063a50add698d548c438621224fa4a2a8258b8b15533efe833c6c4a33d45ce62197a6d935071d5d87b1da5a7c2bb1715e641cfc257c297b1e43bcb56405e6c1a53186b51501b74c3c563257b8dfbb895918351a5bfa4f7cafed3e978e0688e9e5c35f697cad94934f20d95d445ab1611212898dd590a2a1a082dbbf335d92adc32c2c1af5f4a6507b2b77d5c63e74cd832980d524f0bcd564d523bf8b24d0b11f49d464521731a7b51db3a96de3187c35d5376602691dffd700fff9f3946072f099426f119fbeb7233547a35b1d9550f8ce1f422a3eb8c7aaa25a2546c0d1abd17c519ec49e2ac5137f14b42a3274c6748a715b2d52f1b7892c1fbd258c36dd3c92cfd53dfaa49863b64000242b35ac15e7d3c8a25f6b06454f4b7aaf4a06c7db1f3fb1d367426068491ddbefb4c2f361a2ea503dd0b1f8c82f3bdc5ab12b5a14a1aa07e3bfef01947885f6f26cc9f4eb299c2025cbf8a45fbda9bb333eef4b1a7a0ca235a52a3b04c998e70962f493eba4cdacc565f1e6a754bec93ff4bb999ae00b85593e6d4841da08c0e1594cfd78acfae6ddfa38efd8f66a22b6208b9dcf28ec129c01dd2cfd3bca063efbcf80e6440397501033c4ee0efc8f7e48dc618db4228d873cbe71d68eeb6f20749db5b560158da8c4efb816f882df8bcd344ea2284942ab564111726a3499e6f69a97b5ba6cf03a4cbc9cf24440d5d43ad0da74bd95fff3c162f83253a9d4b0445d954441ed762e7b3ca73bf047535ec9c631c381264775021622d19da426518edddc42490ec6132d4fd58ebde957b2edbe4aa21ba43fed8ef40a8c257a21c711c16968de017d834f999fefdfdc71d4edeb9a5790337a8ab31f84e7e5dfcb0bd8e19871a60521f673a4ad787114ccbb6548162b917e02b4e2c3799781af3bf5f0651afdb6dd310283b98b8cfd906dc5c81bf22ffe620fe8944774450b4e230172a9e4b60542480dec7e8d1a3bd3580dc7e4b44346ad7f45e4a482e5c76c41ea30aaef731741f71e2ade5ff4b24e1eccb22260e2e27a0b824f146be48ecd481e009bb87823fd6e33672ca6e7962abfbdb6a7b9e1891ebf086cf372baa6eeaeb9edb706afac23976811c039f9314d9d6810b74d2e86b0fe16ed325fdc8294a271f41abfffe2c450862ecac1c52cc3eae7223aaf5893e7d2653df26254a372148a27b332d51376d192de457d37abe2a0aefeeffefb37b43e7727e8fc5530df009d0a9a00822a59d5daf5b964d433608e1611a0bcb7b058d98938d40df7964c03807e58aab815e2bbd365db8ba9d35d09ed204a7abba8bec0f0f1844e0411f482d98fbc061bcc1f87dae039a632eec68161f1bec45fc3a878ed37278257b323ddba025bd05911f272e537ca4bd7a490ac35a5c944d07e9c9b368b721f3afd732f7819b09a0dddc85805bb3eed614eb08469aa9e6ae165369a70109429e2b19d68ba8c378efde4216fd03c30e280b7356cf7964e44bbd23aabd4278397c8e4a06d1205c66cad441458c305a549575e621f6fa542bce749256fa6c7403d2bf9c5a9e182baef69c584211f21dae5a79578464e5b0128ef6b136a92f4d777d1e07f92e50c93333fe8aee2b9b4ce23ed9c843dca643b5d82a872ced8f0188a02785ab21df4ede205c6776b07d90d63cae1edfef03ec9fbc55c54cf49c77067b024f5251baf89b359bc25410f8990742de083c970c52914974e46a93bfa65218c11bad15943892f6b65e59eeb91e5a0f36b7fdf4203188662d714a654a8b162cd86df859d9bbfc7fbadb09e1eef17fe1dca6b38f7930cdf996fecb1ed4d3083f8af71b1f6138e557023ad4486ee9daf65b60aaa309f417bd5ab64665375be15a9ecf8209ca185c15bfcca58d5b286784917036d1f3466a84e285097a7d87089d725a781200b5dbbdfe5b858d7d26e27d355b98260893b9b7988858d8d1393948b954331330561b1d412037b7c522ed0a91e7ee8a39c59c2baf0e7c4d0ec13aba6813ff531e4233b4046f9f8fda3b1deb6c56342d558a34575ed98dca8fa3c61063cf57826a4709e0f3c2de6ad8f45a71392c4a3230aae85ea0dfb9d68f886e6a50ce121d30bc5ab3ff024209ff45f3a55eca0d1e2f9ff41dfc33e6ed6c09fdc363f6eff5d9badd19b4493e80c30335a362b90cda6e8157b70ba6ea08fa33d1b10124d44c8b49a27acb8f7c79226f36272be31d3a2b4d7ee18189c9a7cae70f5628993c5ad8b6f9a8cc71d499e1ec196ba3a992ec566e65640f79700e348d2c175bc467b87d0ce748617815652e6c5d2d887a9102bbf763f20167f28696cfc51d870be730f971839809af855c9bef5134bc1013ac882491c840fbdd7a300eaf7b5498c90ee6a080707cf48aaca75356b0a08a1af9a74a00b8465b6a0c03de0ddd77b6f45c48f480d0afa0fb8fd83dfe3f77f8343d327cd5f0a22a7bfdb840617889325a9b0b73eee6e99f0b552371b7383294aab850e694854b1bffd11b77f62b2af9fbec5d0db0507562e4547e32369bd243d5f3d2797732df013dcaf7c97e47e2b51ac7d309b6e3896fb7e2a20186bfc93dcbe0af1c83175f26232c2f8477f742c908a162ce34353fdb6872c614f6360e168d6c8c611d172a16e72f14f818f1c9ac036c9852ee204f096b6effa47f08be0f53e0e93b068e472c96ea38369bd814938a023b914e663cd5a0616071b6207e21bee135013ede4e4014bcb87d49f0044e19edc4d44a5194e67938a2a78330eb8b7acc5551257305766f0823bff0c91b289c1baf82f80f13dbd8d732f64b43291fecfce002bc1968f879dcb90176b783bb1b74935d9a2720d9e23120a55b035067bc9450a7af8de555ec0a165e3c2f5c21e7c8fa84aa98e4da9bca0c395352716f17417691551f2a033d740834529a6b39d6304aec6a7b05ad7c16cf523ab7643cf75b72bb5867b33346476b006bd78deb4b0c9d09d07219913012722329c6c15fd7284156dc306916b8c47cb3e86a2cfe1c5727697ad1605897aa225a9b7baad67661edf009e9c7291255a2d165703d925bdf2a9ba5c20dc3a5b9496e5db7cb31cdb55fba82cfeff67d6b487fc7deb9ba7c87982eba0b5022d9f6a8c1e8ed99972a705c2a4849cb14e4bdb5debedf055333e7c94c9996eb1adb9d6470dd7933bc3b58030375096716527fa70803d24f0040d67e639ab5c8ee5505bc1a4632d7a75793993525db12fe44223fc010afac1976a334e1181c726002836d7d1edcb9672b9f130b4ce0f44ee6af981a06db1965bb6035f77204b0258305b20673ca929f6708bd10dd0ca571ab246720cac3e9ced7f2cf519231f6be8869c922489e7c2893abf3218f1b9e09724b8a684e54c0bd4c243601a741a35d7b3706a35fcabe02e1fed0aeac49d29e239f73a0928e30c5ae597b94e383597f0bb45729912ebdf972fafbada304f820ffd54dc165a080c3d3308383efb29b587943704eb5c5f5471708f8b545d4123751feeeb1c3b2899cf3c2c33a4a87533683e46224d77cee69342d22cfcad0c371f503c40058f21ccdbe76e94169a1df0777c2e15d287203fde175e7ad41e8f5edab1d83060a5a70f1852c77e386bab18c26f6c9b300fc3b16e5dbf46a542d82e17836435e362a055582cb221b1a50bcdd261995e36d2feb06629b62f210db0d39f24c1728bdf785be140a665737fdd687a2dbc9b2242b2ba663289a7eef7797d2c8aeb7f541a4c053f19e309dca63f629c38e74edcacfb3e7feb2c58b20d144d0d1737b594dbaf484432cdb3b19a1f75ea4e2e1be6806bb38111104c40ca6b69fc676c4c3011f0a08f61ff4dc2fbca6283361f86798270057fc24976fc458c9541ce60758a8d2b4119e4e726396a62ca9e174598a3d6e89000ee1c2dd2411a0759c26c5c7a5150f4a385eb8c891d8a4693b4e7221c82423ea830e217c1159a85c72c042a93be23c808589a4a1b8921bdfd453df6be3a3f1ab71d146b02d51cfa649ecc57892165f6f0eaf188df14f486e7eecb720d779d630ad95dea71481671f4ccd2199c5ac203bdcd10f0da7e9c9523fbe566d6b959edd41bd3f8c325afc2ab9e2abea61c044a2499819b28b61e7aa66261bd6d1fb1bebf304a97d7eceb2ecd96b988bb8d4257f4834ba379fd0f6d7d68379ef23e05a6b8d004db837bf13a2730c13bc7241d5832ad072a705f3654ef98f991d618d47ada4e93173f7bdc61873cdda46bc58e44c8c22264eb167a6448b1399572356e5a6007eed1ebd794440495524ec086e2427597a86a6507d90bc39e35056e6531e8235340c5bcd99f9944e790fd7d248e8071b0692112eaca2119fe30ef86f312953997e4eea75cad96dcec305931e7d40f56e350b91378088439aac11acf5707f8", "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"}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000000)='ipvlan0\x00'}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1f, 0x3a, &(0x7f0000000340)="d398f7a12f18a15a9cf897403e400e098d93e3407cc57a67428b329e229527da89e0d58ea5c248851d1dee5ab9589763c7f6f244b6d62027db7a469a7c26c1bf34fdd5f0eb4efff5e809e6a640672c44ac2d272b96e6a0213dc3f7061d78a2a2f08b1dacfd5236e40a3f2cad08290184077f4a279cb7a8e8fd0b57e44aa50e2e8abfce58e1b26966ea028840913c4046d6972cb773c1283f5feefcad156dc491989da4433ce02c0b8c3343f0ac0de80b4658ddc4bd251bae17ca0070b853bbc8bba136f84447e7ca6239c178e778dd285be44715f31fcc8a8c442c6d0d7b4482a84d4388828326554af0a8fb474d0303f0d9652d50c6befde3fb95a3d9b26ab390625ac15471dd4dc4ae00701ba0ef347412af459de978ce5b7484248ba56a041193cded82258c9bd4bf58189989b068f7b48345c4404eea595d66e9d509445108f965d0d26e92f2a835b539a100499f216bfcf97a14004023cf70719b60e02c1a3a370781fed78542e4eaee06d70f869a359cbdab13fc999900b75f16337040b6cf661f2bdbab8545e120e015fd1d6364568e2062df99ebfb4c99fcac07863e32eab5639327e3c88de87005c9fb5468b61132e25a034c4cec10eb0f29404debf7439ef4d4444265b6fe1274c70cc186ae764b125d587cc2699c3c3e3449a7db9eeb99af474ffcf2b616c15683e1bfc07a2632abd03f48d4528851933b8a78be74d6c8633774f717b162cd9ccfa0e5db0dd7767b9e5ac98c2ef8cfa40cba59413de1224553d7d7cd048f0b20a38f8a155983b3e3a48b9b9f2c718fe438e9b23d5a6fa97973b22888e4e76a2657d63d70f2dad57d293836a0679cd118debe051d37190c2c111b6f9c38bb0fafb1aa6a6ec0fd7bb3cdfb65191074820d832db2996770c4427ff39819b6885b70b7ad963737a8131df54b0287ff8c7c9c07d7bc52613a47796e61d581f4e1f2da63d94c326b59164c493449208c84ef8d7d6b9d44f3d3be303491e8568b18bef4392bc5556a416b3bab7c2d40700ee35c1ad63b4b457dce2cc5c6bf67c4f2dccd7a74907d72cba20c716f8e5be1b3c3d6c34772585d1e696f8cfd4bd5079678fda02396be16519a858852230ee1b2d286ef8b68a17c44d0bac286242bc6ef70b71ceae2b42585f616642061641230fd189be81132639c0b3567cae0e58fd56dd7323ceda316bf9dfa3f32af0b847a8b44d9c189ced34c9c2aee0785fb4e670dedb8cdf37a2fe75ea9168aeaca11bde09a541cae7c028eebfdd959973ad8698c1c963395aa4deab68882cedef1771d72307afcfe9f319c79e58b883dabbcb4c61e9d5176debd5d33c18e6ea2f95065538e3b4405666ca360974a20b98b047673f5658df238798f906944302a81574378d427a96c7c24d16096175601732191eef95a38399fa2d49d310b5eb1bab35eef89d500b3c2"}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) rename(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)='./file0\x00') bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000002980)={{0x5, 0x4, 0x8000, 0x7, 'syz1\x00', 0xf86}, 0x2, 0x40, 0x29, 0x0, 0x2, 0x4, 'syz0\x00', &(0x7f00000002c0)=['wlan1\x00', 'nl80211\x00'], 0xe, [], [0x7, 0x7fff, 0xffe5, 0x4]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) [ 2232.052072][T17408] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2232.262006][T25704] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2232.453223][T17408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.622238][T25704] usb 3-1: config 135 has too many interfaces: 188, using maximum allowed: 32 [ 2232.631266][T25704] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.643871][T25704] usb 3-1: config 135 has 0 interfaces, different from the descriptor's value: 188 [ 2232.662798][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2232.672265][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.680403][T17408] usb 2-1: Product: syz [ 2232.684844][T17408] usb 2-1: Manufacturer: syz [ 2232.689580][T17408] usb 2-1: SerialNumber: syz [ 2232.812204][T25704] usb 3-1: New USB device found, idVendor=0525, idProduct=eaa1, bcdDevice= 0.40 [ 2232.821294][T25704] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 2232.841952][T25704] usb 3-1: Product: syz [ 2232.846132][T25704] usb 3-1: Manufacturer: syz [ 2232.850710][T25704] usb 3-1: SerialNumber: syz [ 2233.151911][ T5484] cdc_ncm 5-1:1.0: bind() failure [ 2233.159470][ T5484] cdc_ncm 5-1:1.1: bind() failure [ 2233.361283][ T6589] usb 5-1: USB disconnect, device number 94 [ 2233.503818][T25704] usb 3-1: USB disconnect, device number 112 [ 2233.811897][T17408] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2233.818365][T17408] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2233.827796][T17408] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2234.046626][T17408] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2234.087923][T17408] usb 2-1: USB disconnect, device number 67 [ 2234.102583][T17408] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2234.132202][T25704] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2234.271747][ T6589] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2234.501767][T25704] usb 5-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 2234.512165][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 2234.531705][T25704] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 17:55:46 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x10000, 0x45, 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x51e4, 0x8, 0xffff, 0x401]}, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) fanotify_init(0x10, 0x2) 17:55:46 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000624, 0xa, &(0x7f00000001c0)={0x77359400}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x2c6200, 0x15) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000280)={0x400, 0x2, &(0x7f0000000140)=[0x4, 0x100], &(0x7f0000000180)=[0x1, 0x1, 0xe9e, 0x20, 0x9, 0x5], &(0x7f00000001c0)=[0x3d4, 0x7, 0x7, 0x8001], &(0x7f0000000240)=[0x7], 0x0, 0x8}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfeff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2234.652446][ T6589] usb 3-1: config 135 has too many interfaces: 188, using maximum allowed: 32 [ 2234.661358][ T6589] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.672222][ T6589] usb 3-1: config 135 has 0 interfaces, different from the descriptor's value: 188 [ 2234.745646][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2234.761173][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.782177][T25704] usb 5-1: Product: syz [ 2234.793135][T25704] usb 5-1: Manufacturer: syz [ 2234.821731][T17408] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2234.852720][T25704] usb 5-1: can't set config #1, error -71 17:55:46 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) semctl$GETPID(0xffffffffffffffff, 0x4, 0xb, &(0x7f0000000380)=""/206) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2234.873983][T25704] usb 5-1: USB disconnect, device number 95 [ 2234.957496][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=eaa1, bcdDevice= 0.40 [ 2234.974774][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 2234.996982][ T6589] usb 3-1: Product: syz [ 2235.004295][ T3011] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2235.033590][ T6589] usb 3-1: can't set config #135, error -71 [ 2235.044380][ T6589] usb 3-1: USB disconnect, device number 113 17:55:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2235.221905][T17408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2235.271871][T25704] usb 5-1: new high-speed USB device number 96 using dummy_hcd 17:55:47 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x8000) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2235.381748][ T3011] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2235.411593][ T6589] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2235.471739][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2235.485896][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.503090][T17408] usb 2-1: Product: syz [ 2235.507579][T17408] usb 2-1: Manufacturer: syz [ 2235.541707][T17408] usb 2-1: can't set config #1, error -71 [ 2235.552034][ T3011] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2235.563183][T17408] usb 2-1: USB disconnect, device number 68 [ 2235.575155][ T3011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.611106][ T3011] usb 4-1: Product: syz 17:55:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xff0f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2235.636168][ T3011] usb 4-1: Manufacturer: syz [ 2235.642053][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2235.665542][ T3011] usb 4-1: SerialNumber: syz 17:55:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2235.781885][ T6589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2235.836490][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2235.851207][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.868138][T25704] usb 5-1: Product: syz [ 2235.875853][T25704] usb 5-1: Manufacturer: syz [ 2235.887412][T25704] usb 5-1: SerialNumber: syz [ 2235.959695][T17408] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2235.981962][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2235.992407][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.013367][ T6589] usb 3-1: Product: syz [ 2236.020567][ T6589] usb 3-1: Manufacturer: syz [ 2236.031393][ T6589] usb 3-1: SerialNumber: syz [ 2236.392013][T17408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2236.581986][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2236.591830][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.599857][T17408] usb 2-1: Product: syz [ 2236.607681][T17408] usb 2-1: Manufacturer: syz [ 2236.612665][T17408] usb 2-1: SerialNumber: syz [ 2236.981699][ T3011] cdc_ncm 4-1:1.0: bind() failure [ 2237.031548][ T3011] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 2237.051557][T25704] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2237.058146][ T3011] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 2237.065175][T25704] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2237.091571][ T3011] usbtest: probe of 4-1:1.1 failed with error -71 [ 2237.108314][ T3011] usb 4-1: USB disconnect, device number 43 [ 2237.164102][T10450] udc-core: couldn't find an available UDC or it's busy [ 2237.171256][T10450] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2237.241578][ T6589] cdc_ncm 3-1:1.0: bind() failure [ 2237.266285][T25704] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2237.281851][ T6589] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 2237.303733][ T6589] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 2237.332082][T25704] usb 5-1: USB disconnect, device number 96 [ 2237.342524][ T6589] usbtest: probe of 3-1:1.1 failed with error -71 [ 2237.381841][T25704] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2237.401719][ T6589] usb 3-1: USB disconnect, device number 114 [ 2237.751662][T17408] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2237.758760][T17408] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2237.777655][T17408] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2237.980562][T17408] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2237.994351][ T6589] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2238.019705][T17408] usb 2-1: USB disconnect, device number 69 [ 2238.034116][T17408] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2238.041625][T25704] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2238.401410][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2238.424170][ T6589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2238.571722][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2238.580809][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.588949][T25704] usb 5-1: Product: syz [ 2238.593696][T25704] usb 5-1: Manufacturer: syz [ 2238.598606][T25704] usb 5-1: SerialNumber: syz [ 2238.601884][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2238.624831][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.651964][ T6589] usb 3-1: Product: syz [ 2238.665009][ T6589] usb 3-1: Manufacturer: syz [ 2238.677138][ T6589] usb 3-1: SerialNumber: syz [ 2238.721323][T17408] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2238.751663][ T6589] usb 3-1: can't set config #1, error -71 [ 2238.765851][ T6589] usb 3-1: USB disconnect, device number 115 17:55:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x2, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:50 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:50 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x200}, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_INSTALLED(r2, 0x80024322) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2238.851479][T25704] cdc_ncm 5-1:1.0: bind() failure [ 2238.862901][T25704] cdc_ncm 5-1:1.1: bind() failure [ 2238.902400][T25704] usb 5-1: USB disconnect, device number 97 17:55:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2239.139770][T17408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2239.311253][ T6589] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2239.341655][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2239.342056][T25704] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2239.350719][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:55:51 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000180)=0x8001, 0x4) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4) 17:55:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x48}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2239.383852][T17408] usb 2-1: Product: syz [ 2239.388113][T17408] usb 2-1: Manufacturer: syz [ 2239.401357][T17408] usb 2-1: SerialNumber: syz [ 2239.441532][T17408] usb 2-1: can't set config #1, error -71 [ 2239.467566][T17408] usb 2-1: USB disconnect, device number 70 17:55:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4c}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, 0x0, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2239.701563][ T6589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2239.711324][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2239.881535][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2239.890638][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.901540][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2239.907298][T25704] usb 5-1: Product: syz [ 2239.910596][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.916114][T25704] usb 5-1: Manufacturer: syz [ 2239.931477][T25704] usb 5-1: SerialNumber: syz [ 2239.944385][ T6589] usb 3-1: Product: syz [ 2239.955666][ T6589] usb 3-1: Manufacturer: syz [ 2239.966345][ T6589] usb 3-1: SerialNumber: syz [ 2239.991505][T17408] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2240.381344][T17408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.571268][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2240.580349][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.598326][T17408] usb 2-1: Product: syz [ 2240.607784][T17408] usb 2-1: Manufacturer: syz [ 2240.616776][T17408] usb 2-1: SerialNumber: syz [ 2241.091158][T25704] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2241.091175][ T6589] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2241.091199][ T6589] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2241.097789][T25704] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2241.111960][ T6589] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2241.314695][T25704] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2241.371891][ T6589] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2241.381137][T25704] usb 5-1: USB disconnect, device number 98 [ 2241.424149][T25704] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2241.437885][ T6589] usb 3-1: USB disconnect, device number 116 [ 2241.468035][ T6589] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2241.801185][T17408] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2241.830932][T17408] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2241.838362][T17408] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2242.030283][T17408] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2242.057381][T17408] usb 2-1: USB disconnect, device number 71 [ 2242.075793][T17408] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2242.156933][T22664] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2242.164647][ T6589] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2242.561134][ T6589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.572238][T22664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.761022][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2242.770137][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.781483][T17408] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2242.789417][T22664] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2242.799645][T22664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.808021][ T6589] usb 3-1: Product: syz [ 2242.812363][ T6589] usb 3-1: Manufacturer: syz [ 2242.816972][ T6589] usb 3-1: SerialNumber: syz [ 2242.822143][T22664] usb 5-1: Product: syz [ 2242.840116][T22664] usb 5-1: Manufacturer: syz [ 2242.859489][T22664] usb 5-1: SerialNumber: syz 17:55:54 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020904000001020d0000052406000002240000000d240f0100000000000000000006241a00b77b7eed2216493393b307be000008241c000000ad7f090581030002ae00200904010000020d00000904010102020d0000090582ca1595d5ff6b035af652344a6513f68ad93ed53598fc21031c4dec6e000e5fdacbe8b28d0e3022a51fb9fa4fa587feed31cf"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x0, 0xffffffffffffff81, 0x4, 0x5, 0x0, 0x5, 0x0, 0x2, 0x9, 0x2, 0x80, 0x653f, 0x1f, 0x1, 0x7]}, &(0x7f0000000000)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x60}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, 0x0, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:54 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x6, 0xa07f) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2242.891113][T22664] usb 5-1: can't set config #1, error -71 [ 2242.901028][ T6589] usb 3-1: can't set config #1, error -71 [ 2242.908466][T22664] usb 5-1: USB disconnect, device number 99 [ 2242.934642][ T6589] usb 3-1: USB disconnect, device number 117 [ 2243.181172][T17408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.361231][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2243.370308][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.378612][T17408] usb 2-1: Product: syz [ 2243.385671][T17408] usb 2-1: Manufacturer: syz [ 2243.390290][T17408] usb 2-1: SerialNumber: syz 17:55:55 executing program 1: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x89100) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d000005240600010524000000796bda7d3cafa90d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904806ffc295f3e0151a6ecf555010000020d00000904010102020d00000905820200020000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(r2, 0x127d, &(0x7f0000000280)=0x2) 17:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, 0x0, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x68}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2243.442356][T22664] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2243.451364][ T6589] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2243.491250][T17408] usb 2-1: can't set config #1, error -71 [ 2243.499973][T17408] usb 2-1: USB disconnect, device number 72 17:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6c}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2243.831578][T22664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.881226][ T6589] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2243.888833][ T6589] usb 3-1: can't read configurations, error -61 [ 2243.970760][T17408] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2244.040821][T22664] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2244.050037][T22664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.061582][ T6589] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2244.078514][T22664] usb 5-1: Product: syz [ 2244.082835][T22664] usb 5-1: Manufacturer: syz [ 2244.087447][T22664] usb 5-1: SerialNumber: syz [ 2244.351272][T17408] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 2244.362306][T17408] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2244.371718][T17408] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2244.502389][ T6589] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2244.509996][ T6589] usb 3-1: can't read configurations, error -61 [ 2244.519907][ T6589] usb usb3-port1: attempt power cycle [ 2244.560822][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2244.569924][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.582145][T17408] usb 2-1: Product: syz [ 2244.587377][T17408] usb 2-1: Manufacturer: syz [ 2244.592417][T17408] usb 2-1: SerialNumber: syz [ 2244.652305][T17408] cdc_ncm 2-1:1.0: bind() failure [ 2245.240675][T22664] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2245.247446][T22664] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2245.260542][ T6589] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2245.455242][T22664] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2245.490727][T22664] usb 5-1: USB disconnect, device number 100 [ 2245.498633][T22664] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2245.561097][ T6589] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2245.568718][ T6589] usb 3-1: can't read configurations, error -61 [ 2245.761023][ T6589] usb 3-1: new high-speed USB device number 121 using dummy_hcd 17:55:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x74}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2246.030603][ T6589] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2246.044147][ T6589] usb 3-1: can't read configurations, error -71 17:55:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2246.072507][ T6589] usb usb3-port1: unable to enumerate USB device [ 2246.210509][T27246] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2246.558658][T25704] usb 2-1: USB disconnect, device number 73 [ 2246.580729][T27246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2246.760538][T27246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2246.769641][T27246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.788055][T27246] usb 5-1: Product: syz [ 2246.794856][T27246] usb 5-1: Manufacturer: syz [ 2246.799450][T27246] usb 5-1: SerialNumber: syz 17:55:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7a}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:58 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000180)={0x2, "f034c8650cd5111cf0d7c40f1965e20c7ddc29938598d266959a1814bd2a6b65", 0x1, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC=r5], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000680)={r5, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000f00)=ANY=[@ANYRES32, @ANYBLOB="0021cd9c59e89a43e801b2bb2d9849419a5784e2b6e62aff1b4599dc46a1e2a237102cf3bad696df18e5cf31a0b951b64d2a93d91e5a77f2160dad07000000ec8580b1ad2da5aab9eabfe77fac7eb69e8df77ef41f664da749d73b774ba27e2c4399e8d9db49ce2e57ef29b9fc7d0748ea330b627eed580f048fd2a4980ac9749e1dc42fd1c60fa3890ddb5414a3874fde629818711ab1d688124fbfbc48a93a44e3257d77a4d0acda5997d05f1a31fde045cb61e661d95a4b358c17ab3ea1140432a53c7f2211d8914cf1b8a7d6edb3ba62aa60c7bc21a881a745", @ANYRESDEC=r5]) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000340)={r5, 0x1886f445, 0x1, [0xa8d3, 0x400, 0x0, 0x6, 0x8], [0x69, 0x3, 0x20, 0xffff, 0x4, 0x78, 0x80000001, 0x6, 0x1, 0x7, 0x9, 0x3, 0x8, 0x0, 0x7, 0x4, 0x30c4, 0x1f, 0x100, 0x40, 0xa5, 0x8, 0x8000, 0x9, 0x8, 0x40, 0x7, 0x2, 0x7ff, 0x1, 0x9, 0x2, 0x4, 0x6, 0x1, 0x5, 0x7, 0x100000000, 0x18d, 0x2, 0x5, 0x1, 0x2, 0x0, 0x3800, 0x0, 0x0, 0x1, 0x6, 0x81, 0x4, 0x1ff, 0x401, 0x0, 0x8, 0x8, 0x6, 0x80, 0x20, 0x10e, 0xc6f1, 0x100000000, 0x8c6, 0xfffffffffffffff9, 0x100000001, 0x7, 0x401, 0x3, 0x6ab8, 0x8, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0x3, 0xdf, 0x3, 0xc45, 0x9, 0x2, 0x80000000, 0x8, 0x7fffffff, 0xff, 0x6, 0x3, 0x0, 0xbb, 0x5d, 0x200, 0x9, 0x74, 0x6, 0x2, 0x2, 0x400, 0xb31, 0x3f, 0xff, 0xce, 0x2, 0xfffffffffffffffd, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x80000001, 0x10001, 0xfffffffffffffffc, 0x6cb98066, 0x4, 0x8, 0xc3, 0x1, 0x6, 0x2, 0x3, 0x800, 0x200]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:58 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x20c00, 0x102, 0x2}, 0x18) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4, 0x20001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000240)={0x0, 0xfff, 0x40}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000180)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:55:58 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10002, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8810) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'vlan0\x00'}) [ 2246.874272][T27246] usb 5-1: can't set config #1, error -71 [ 2246.905161][T27246] usb 5-1: USB disconnect, device number 101 17:55:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r1, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r1, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf0}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r1, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:59 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2247.201727][T25703] usb 3-1: new high-speed USB device number 122 using dummy_hcd 17:55:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfc}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:59 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:55:59 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2247.390719][T27246] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2247.560408][T25703] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.730610][T25703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2247.739742][T25703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.759946][T27246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.771042][T25703] usb 3-1: Product: syz [ 2247.775692][T25703] usb 3-1: Manufacturer: syz [ 2247.786337][T25703] usb 3-1: SerialNumber: syz [ 2247.940682][T27246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2247.949773][T27246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.960955][T27246] usb 5-1: Product: syz [ 2247.965846][T27246] usb 5-1: Manufacturer: syz [ 2247.973941][T27246] usb 5-1: SerialNumber: syz [ 2248.930377][T25703] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2248.936867][T25703] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2248.946366][T25703] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2249.130339][T27246] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2249.137037][T27246] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2249.159790][T25703] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2249.176923][T25703] usb 3-1: USB disconnect, device number 122 [ 2249.184588][T25703] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2249.333402][T10899] device vlan0 left promiscuous mode [ 2249.547160][T27246] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2249.616470][T27246] usb 5-1: USB disconnect, device number 102 [ 2249.651330][T27246] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2249.930075][T22664] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2250.300372][ T6589] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2250.340716][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2250.510521][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2250.519735][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.531517][T22664] usb 3-1: Product: syz [ 2250.536268][T22664] usb 3-1: Manufacturer: syz [ 2250.541219][T22664] usb 3-1: SerialNumber: syz 17:56:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xb1, {0x1a}}}, 0x0) 17:56:02 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2250.605501][T22664] usb 3-1: can't set config #1, error -71 [ 2250.619509][T22664] usb 3-1: USB disconnect, device number 123 [ 2250.706035][ T6589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2250.870134][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2250.879398][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.889213][ T6589] usb 5-1: Product: syz [ 2250.895100][ T6589] usb 5-1: Manufacturer: syz [ 2250.899709][ T6589] usb 5-1: SerialNumber: syz 17:56:02 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d00008524b4490105240000000d240f010041f0eded8203024c000000000000030006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d00000905820200e60dac83e9715bc6c0ff44cb13ebd3e8f4592ccbfccc98fd10c4496a6198ae8005513424c5176574a5da03100e2b58c54ba71835a9027601dd9898304120c7a3074bdec79a054bfdc9746c212a904496c8f09f0d064bb258ecbf6265da16"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xec, 0x30100) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x300}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:02 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:02 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010000000002640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009050daac0b9033908db0503020002"], 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="2c0b4010", @ANYRESOCT=r0, @ANYBLOB="02002cbd2600ffdbdfc007008000052e0038fe767f00000029e2fa01000000050029"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c00c}, 0x8800) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) getpid() ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000002b40)) getegid() r5 = getpid() sched_setscheduler(r5, 0x6, &(0x7f00000002c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000028c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000029c0)=0xe8) sendmsg$unix(r3, &(0x7f0000002ac0)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000000280)="85be4fa7e4133ea0e0d7becc232bf22ccd1e2ca4ab3c4de5f87d685e78f897292353a5b0a99e16af9790e7b8a4fcfe", 0x2f}, {&(0x7f00000003c0)="3a5f48e8b6720904273bfb3fbfa804e1c38d678add2ee3bbc6903c27b26502d38b623021f5ac29cd46cf82785ff00259aa1239410fa95563cd5f4f8559efedc709bd6a07470c352744f8d2f9e798bc71ca1679b51423b29d4c934918234c5159396cd5578f54a4c68e953e16db5971d6858519e00a516292238cb02f6db73e8f1c77f2c535c55320cafdf8fa47ed0e181401a4cca07404176a74e78218aa5d15f0db73fa46e18b945730001867abf0be1e23030387d96a5c668cb39330c3f131bc7ffb4c1555e615b711cab73cab98e8fd268701dd4a1c86", 0xd8}, {&(0x7f00000004c0)="4665d72be7a9ae6bf13a80ff42e2067545e9675fa7861e42fab1ef7bef6418b65193723dd28acda991aa21eef0a2717b95e95fa33e6a639a3a5918739aff900375c4022d27c3536fb701822da9774970103a", 0x52}, {&(0x7f0000000540)="82825c80e4bd944350dc32e86da853bde9f103ed0abaed4a05db6856335260d0d969e75f8587f21e3b450887bb5d0ac87750f468e8811be3bfb6e7609e3901d3267b6ac6e2353b11b966f543cbd5ac1c92715bfde72f465c70f641bac57dff00c8321c59da3e21b56dee171dafacd9608c18702ec977e2b7608111ed393c0ecc263d3889223c584f66ad8a741936a8e621ec58e1e730afc35fba4052cb49c2ac46ab1e488df5b00218e7b52ce02855cdf31b60aa532b9ef36b3a23b94d62b15dfdb3c3ccbe5c27ab88fe29cd91d574", 0xcf}, {&(0x7f0000000640)="6f139cbf167ea13bce2cc451cfafaff8ed323089cad6275096902f162e33fc", 0x1f}, {&(0x7f0000000680)="5b9da77ef33e5749a449c17ccea766ae57e259eb759b74633c08c8ca73", 0x1d}, {&(0x7f00000006c0)="65dd3afca2c9d5c91191fbf96d9390199ca24bd403aad86652f62b9b2f21519dd18f8c1a593785c72fbf3fcd56dfdbd297cb3de174fcdd99c5a10c8d36569d5f730b0381e13bde5434ce2e572fccb36aa73d9313bcc07b9aa9b34509be32396465106566ad40e8feb66b1da37705cd85527b152f4aa99a35398a964738fb94c8dec702e6e4a4c366ce8b0c2d6b3bcc63324ac2d24f10e9ad090ad9de243971540de1167bff10e2fd1aef", 0xaa}], 0x7, &(0x7f0000002a00)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x90, 0x90}, 0x4000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2251.061212][T22664] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2251.080436][ T6589] cdc_ncm 5-1:1.0: bind() failure [ 2251.099682][ T6589] cdc_ncm 5-1:1.1: bind() failure [ 2251.143624][ T6589] usb 5-1: USB disconnect, device number 103 17:56:03 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x500}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2251.420384][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.431832][T17408] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2251.600050][ T6589] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2251.607912][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2251.617128][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.637983][T22664] usb 3-1: Product: syz [ 2251.642410][T22664] usb 3-1: Manufacturer: syz [ 2251.647019][T22664] usb 3-1: SerialNumber: syz [ 2251.840308][T17408] usb 2-1: config 1 has an invalid descriptor of length 133, skipping remainder of the config [ 2251.850825][T17408] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2251.869586][T17408] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2251.940754][ T6589] usb 5-1: no configurations [ 2251.945386][ T6589] usb 5-1: can't read configurations, error -22 [ 2252.100038][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2252.109238][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.120894][ T6589] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2252.129330][T17408] usb 2-1: Product: syz [ 2252.133760][T17408] usb 2-1: Manufacturer: syz [ 2252.138851][T17408] usb 2-1: SerialNumber: syz [ 2252.201248][T17408] cdc_ncm 2-1:1.0: bind() failure [ 2252.419965][ T6589] usb 5-1: no configurations [ 2252.424909][ T6589] usb 5-1: can't read configurations, error -22 [ 2252.438062][ T6589] usb usb5-port1: attempt power cycle [ 2252.759954][T22664] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2252.766424][T22664] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2252.775523][T22664] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2252.998457][T22664] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2253.041987][T22664] usb 3-1: USB disconnect, device number 124 [ 2253.048814][T22664] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2253.159835][ T6589] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2253.324860][ T6589] usb 5-1: no configurations [ 2253.329504][ T6589] usb 5-1: can't read configurations, error -22 [ 2253.489926][ T6589] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2253.649853][ T6589] usb 5-1: no configurations [ 2253.655113][ T6589] usb 5-1: can't read configurations, error -22 [ 2253.671765][ T6589] usb usb5-port1: unable to enumerate USB device [ 2253.749776][T22664] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2254.120604][T27246] usb 2-1: USB disconnect, device number 74 [ 2254.147411][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:56:06 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) vmsplice(r3, &(0x7f0000001500)=[{&(0x7f0000000000)="77d636a1c61d2b406c41b857dceb3aca558c0490d4035653bb2177de08a503", 0x1f}, {&(0x7f0000000140)="cd1390c0dc783b576dd4c1930ab2d6150d2d15f4572e3770960503b0726bcaa41272a318145e886646eb1b4bd8ecfcde2e6d90ea9775823b6ed0b7ddd13ce7c0ac440b7f", 0x44}, {&(0x7f0000000340)="ff4c443edcef1f31abf854a607941d7f67ce3aec195930968b4b9e55d3d7ea9ab9c198a2da90a4b1a6613f4cda52fac518210b166f620100d19591fea5d539fe00c815eb545b66c8c594103084faa50ce1d159e4b15b45f2e5f561717c84d90aed2877a16013be72fef601e2877aa0d3ddd9aef923c0830319461c25653be25629080c9dc378639039680949ef4f3e18d9ebd8f009327ae1ca4374200a4953b11cf949fe17924e28bfbac1d8446514bc7cf04260621f8b8c7bc5ec4a6a8c82b27fe848e93cdd0ca2bde33320e9dd0437ab23cd41c3ffade5d83cdf9817439967f7a865dcca6598cfe7f7e9ce28ec", 0xee}, {&(0x7f0000000440)="341dc909abec14e52074af6543e73a56c119dc2816ac1d4b245686fb1a2d365436d3cbd7bfada9e157f5725104a3324357bdd3aab478e9998d5aec6db5c330b25b4a2af682893b144084c5583fc67b9ea169e189701170e1001feca9d865bc4998b900b43e0c665d4e71b42a8fac5184597395a55722b14e6ac348e1b20a71249aee25210c79ca36fa319fd635d2027eb1a95c562a0e089997217c0357098f977e7c85ee983978a0", 0xa8}, {&(0x7f0000000240)="2f2ab07fa993cc68f883bd51143008680a89e8f57d7cb4d6d23c22440bdd45a9679d07e984fd827bd2618727324e9e467522a834ecf8715dbcabc881028813a0fe6e50d0e4e1", 0x46}, {&(0x7f0000000500)="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", 0x1000}], 0x6, 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2254.349864][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2254.359044][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.389154][T22664] usb 3-1: Product: syz 17:56:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x600}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:06 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:06 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'bond0\x00', {0x779}, 0x2}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$FITHAW(r2, 0xc0045878) [ 2254.407503][T22664] usb 3-1: Manufacturer: syz [ 2254.435931][T22664] usb 3-1: SerialNumber: syz [ 2254.480562][T22664] usb 3-1: can't set config #1, error -71 [ 2254.504521][T22664] usb 3-1: USB disconnect, device number 125 17:56:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x700}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2254.739612][T17408] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 2254.774578][ T6589] usb 5-1: new high-speed USB device number 108 using dummy_hcd 17:56:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x900}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2254.909755][T22664] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2254.949613][T17408] usb 2-1: device descriptor read/64, error 18 [ 2255.190132][ T6589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2255.239895][T17408] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2255.330134][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2255.379731][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2255.388992][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.404353][ T6589] usb 5-1: Product: syz [ 2255.408519][ T6589] usb 5-1: Manufacturer: syz [ 2255.420852][ T6589] usb 5-1: SerialNumber: syz [ 2255.439681][T17408] usb 2-1: device descriptor read/64, error 18 [ 2255.509959][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2255.519328][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.535310][T22664] usb 3-1: Product: syz [ 2255.543537][T22664] usb 3-1: Manufacturer: syz [ 2255.548153][T22664] usb 3-1: SerialNumber: syz [ 2255.561120][T17408] usb usb2-port1: attempt power cycle [ 2256.309496][T17408] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 2256.489870][T17408] usb 2-1: device descriptor read/8, error -61 [ 2256.579551][ T6589] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2256.586148][ T6589] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2256.709530][T22664] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2256.716510][T22664] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2256.726428][T22664] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2256.802960][T17408] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 2256.823643][ T6589] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2256.856531][ T6589] usb 5-1: USB disconnect, device number 108 [ 2256.880071][ T6589] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2256.938307][T22664] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2256.999601][T22664] usb 3-1: USB disconnect, device number 126 [ 2257.019614][T17408] usb 2-1: device descriptor read/8, error -61 [ 2257.028209][T22664] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2257.139603][T17408] usb usb2-port1: unable to enumerate USB device [ 2257.579612][ T6589] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2257.719332][T17408] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2257.989767][ T6589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2258.109986][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2258.169469][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2258.178546][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.195433][ T6589] usb 5-1: Product: syz [ 2258.205014][ T6589] usb 5-1: Manufacturer: syz [ 2258.214719][ T6589] usb 5-1: SerialNumber: syz [ 2258.249442][ T6589] usb 5-1: can't set config #1, error -71 [ 2258.267121][ T6589] usb 5-1: USB disconnect, device number 109 [ 2258.309361][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2258.318549][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.330407][T17408] usb 3-1: Product: syz [ 2258.334592][T17408] usb 3-1: Manufacturer: syz [ 2258.339907][T17408] usb 3-1: SerialNumber: syz 17:56:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000180)=0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xa00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:10 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/347, @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0xf, 0xa, 0x7) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, r2, 0x16}, 0x10) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x0, 0x10, 0xee, {0xee, 0x5, "307d8ad42b009b9d5c548db8d8fb1f44f9edb3a76d82f6c38a2167f657878056a3c4ea3d21ba96503799b9e7077ad8705429c7ed97700d050a8df842f826b5b6ade21823d6e795c2d2ab8cd170fd80edf198c6a3a1a6fc5146e58da9aca53aaacd83286c86684e3acdfa481ff8f28aa0ad1d86534c0168082140b28c6e27ec754fe2432c70eb8861ae33c25ddaf805983b53a1782db5d2bff78b210843cd0a60f6f6ccdbb54a88881af3e18cdc9b37de6c520429c4169d62a36082d18ca4d11351a1f33d42af4badb68ca370098026e7d5cb8dca007f269d7be654ff10bf6ece6d40b2d62d4db7325d8f0323"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x40, 0xb, 0x88, "378719e351e5f1383a215a8ecd3592ec563e6e4c9ed4470bb2b0dee5aaf4c98c890c38ba52b3f6a351d76946967d0f5322720e8861048bb764a06c7eba5e5c34e6104480996fe815827bcd8cae4fbb98245e51f3edd39ee0568efa1fd1483af88f7c72cf94e32fcfdeabfc66ad64b6679283af8cbc9c1ddb1a55cfbde4329dc7dd6525f7c2adfdb2"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x5, 0xff, 0x0, 0x1000, 0xffff, 0xed5, 0x41, 0x400, 0x8d2, 0x7, 0xfff, 0x2}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x81}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x6f}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280)='NLBL_CIPSOv4\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f0000000140)="9e11f157fbd7683cc40ae00114fe42a01e086a6b084882afb1cd1dee89d0fbe486a16e0b9bf1c44abd9124046ee143857e57b92c42239fccc4e5c25229ad85d2174dfd78d34bde3521f07d6a8b24b650197de5913d869d749d59323c275f83ce915c7fdaab3f0a78ea52306d84f62dbbb5491d62b76fcd04138ac67a0cf8bb44f47e9c6e136e7d7912355ecfd57261ab52de5d0ce196b03f443b9a9da9cc0e6f4b5c1a776871e5", &(0x7f0000000000)=""/34, 0x4}, 0x20) 17:56:10 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000200000000000000ad7f0905810300020000000904010000020d08000000000000000d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x2, 0x80, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a23200b7e8"}, {0x5, 0x24, 0x0, 0xc7}, {0xd, 0x24, 0xf, 0x1, 0x462a7ea, 0x0, 0x7, 0x40}, {0x6, 0x24, 0x1a, 0xfc, 0x1a}, [@country_functional={0x12, 0x24, 0x7, 0x80, 0x1f, [0x400, 0x8, 0x3, 0xffff, 0xf4f, 0x9]}, @mbim={0xc, 0x24, 0x1b, 0x653, 0x1f, 0x3, 0x9, 0x1c, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4, 0x5}, @acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x1, 0x94}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x2, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x4, 0xbc}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0x4, 0x5, 0xff, 0x9}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x416}}, {0x7a, &(0x7f00000003c0)=@string={0x7a, 0x3, "393af739703261277aa1250bd63337ca67c66dd654781ef99bfcd4f98889aabead26159b13e2bda00874be8a5cd7f38c7fc84968a6346122bc589949cc0e03abd62d6ca4d88b2a0b422c690cf31736a35c8fdf79c446fb9b6da439c6d86dfb176790198980e7984d4d37758386cb319734213f60e045efad"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x448}}, {0x2d, &(0x7f00000004c0)=@string={0x2d, 0x3, "3c707ff8e1e47c74e4cde07ac39efd852c7e2704f430a91dad7cdb37d1b4c0eca398e27d78a1bc33b238ca"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x23, 0xa9, {0xa9, 0xc, "0ece3b09d9fdb79ef63f2e9cac754afad2ba422183d8561533737c53352ded9ec883dc3400f67a87dd63f0c1fe6e9bf9d83589365645ebf0a1ee350e3a57560c4f0d28f283b54d6b39bc60d0c592ede515382ee9c15a1c5dcc0c9e163368fdbf22160dda621b2b4ef26d89214d4f1f37ed4a222a6439857cf9e39521fa491f8f58b736fe010ef25d034e96c984aa40aa4aa7362d336e2fb9ecb6c69ccf31c5bc084fded7a4677d"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0x17, 0xab, "d8d367bc51da60129d68b52be6d0b826927f4813988c00d524aa7159a09b6906ad4f6bb818f1a9a4e0f397cdba1d59fc2f74f8c36b4430ef1d555c956c2d7eb654950acbaa639cd9e4bf31db4af22e9224cb0471f391e275c542d86af54e81f5aa588c68cce3172729ce3d51c1d69f59cc82018f6f909071f8b2502058f91b61fd0b833c8279ed4dbb79b3d39c7f498a93e68f9020b1738636778a9e6967c01403ce178152cf5fda112f5d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x4, 0x0, 0xffffffff, 0x2, 0xf2f, 0xfff, 0x7, 0x4a, 0x33, 0x3, 0x5, 0x3ff}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2}, &(0x7f0000000900)={0x20, 0x89, 0x2, 0x1}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) socket$phonet(0x23, 0x2, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) [ 2258.469481][T17408] cdc_ncm 3-1:1.0: bind() failure [ 2258.478122][T17408] cdc_ncm 3-1:1.1: bind() failure [ 2258.552790][T17408] usb 3-1: USB disconnect, device number 127 17:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2258.783716][T25703] usb 2-1: new high-speed USB device number 79 using dummy_hcd 17:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2258.949191][ T6589] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2259.039224][T17408] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2259.069368][T25703] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 2259.149385][T25703] usb 2-1: config 0 has no interfaces? [ 2259.229319][T25703] usb 2-1: config 0 has no interfaces? [ 2259.309316][T25703] usb 2-1: config 0 has no interfaces? [ 2259.349646][ T6589] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.360257][ T6589] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2259.369486][ T6589] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2259.389444][T25703] usb 2-1: config 0 has no interfaces? [ 2259.439686][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.469154][T25703] usb 2-1: config 0 has no interfaces? [ 2259.549141][T25703] usb 2-1: config 0 has no interfaces? [ 2259.579498][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2259.588561][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.605701][ T6589] usb 5-1: Product: syz [ 2259.613684][ T6589] usb 5-1: Manufacturer: syz [ 2259.618275][ T6589] usb 5-1: SerialNumber: syz [ 2259.629392][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2259.629398][T25703] usb 2-1: config 0 has no interfaces? [ 2259.645115][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.661778][T17408] usb 3-1: Product: syz [ 2259.666037][T17408] usb 3-1: Manufacturer: syz [ 2259.672048][T17408] usb 3-1: SerialNumber: syz [ 2259.690277][ T6589] cdc_ncm 5-1:1.0: bind() failure [ 2259.709412][T25703] usb 2-1: config 0 has no interfaces? [ 2259.869481][T25703] usb 2-1: New USB device found, idVendor=0525, idProduct=a48e, bcdDevice= 0.40 [ 2259.878560][T25703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.888245][T25703] usb 2-1: Product: syz [ 2259.899104][T25703] usb 2-1: Manufacturer: syz [ 2259.903719][T25703] usb 2-1: SerialNumber: syz [ 2259.910689][T25703] usb 2-1: config 0 descriptor?? [ 2260.245588][T11277] udc-core: couldn't find an available UDC or it's busy [ 2260.252640][T11277] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2260.530494][T11229] udc-core: couldn't find an available UDC or it's busy [ 2260.537479][T11229] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2260.571701][T25703] usb 2-1: USB disconnect, device number 79 [ 2260.849051][T17408] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2260.856032][T17408] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2260.865581][T17408] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2261.084532][T17408] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2261.116453][T17408] usb 3-1: USB disconnect, device number 2 [ 2261.125255][T17408] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2261.338907][T22664] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2261.648992][T22664] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 2261.749641][T22664] usb 2-1: config 0 has no interfaces? [ 2261.818941][T27246] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2261.839135][T22664] usb 2-1: config 0 has no interfaces? [ 2261.919143][T22664] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 2261.926837][T22664] usb 2-1: can't read configurations, error -71 [ 2262.179326][T27246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2262.348948][T27246] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2262.358023][T27246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.372603][T27246] usb 3-1: Product: syz [ 2262.376767][T27246] usb 3-1: Manufacturer: syz [ 2262.389304][T27246] usb 3-1: SerialNumber: syz 17:56:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x16e7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d00000524066d4a12ccc21a6b97f2000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d00000905820200027ca5b3faaf8193efc01ffce29204f9390ddf660e3865"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r7, r5}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x5, 0x60000, "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", 0x1f, 0x9, 0x6, 0x8, 0xff, 0x2, 0x80}, r7}}, 0x120) 17:56:14 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xfffe}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 2262.504537][T27246] cdc_ncm 3-1:1.0: bind() failure [ 2262.524694][T27246] cdc_ncm 3-1:1.1: bind() failure [ 2262.566584][T27246] usb 3-1: USB disconnect, device number 3 17:56:14 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002c9d7e73f6902f2a183f4e9c5f8a5adb0d47d9bcc0475f9c4850e14a7d0226927ef323b5e5720d49c700f2bfc5eb96f04edaae3a4a2013c1fc7a1ffcca2fcb92aaedf94bf47ca144a1667c1640364a3d8aec1b932be01ed8c3c08ddb0b1f8a2ed6d3bd6ee54c65ec0b2abad1c0d6ca8c966110dfb91fddf75ad4070"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2262.699082][T17408] usb 5-1: USB disconnect, device number 110 17:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1f00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r2, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2262.998854][T27246] usb 3-1: new high-speed USB device number 4 using dummy_hcd 17:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) [ 2263.049803][T22664] usb 2-1: new high-speed USB device number 81 using dummy_hcd 17:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) [ 2263.190510][T17408] usb 5-1: new high-speed USB device number 111 using dummy_hcd 17:56:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2263.359035][T27246] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.369357][T27246] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2263.378241][T27246] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2263.438980][T22664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.558984][T27246] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2263.568161][T27246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.585606][T27246] usb 3-1: Product: syz [ 2263.589757][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.601088][T27246] usb 3-1: Manufacturer: syz [ 2263.606226][T27246] usb 3-1: SerialNumber: syz [ 2263.648067][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2263.657281][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.661250][T27246] cdc_ncm 3-1:1.0: skipping garbage [ 2263.676474][T27246] cdc_ncm 3-1:1.0: bind() failure [ 2263.697095][T22664] usb 2-1: Product: syz [ 2263.720557][T22664] usb 2-1: Manufacturer: syz [ 2263.725185][T22664] usb 2-1: SerialNumber: syz [ 2263.769696][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2263.779384][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.787656][T17408] usb 5-1: Product: syz [ 2263.801962][T17408] usb 5-1: Manufacturer: syz [ 2263.812683][T17408] usb 5-1: SerialNumber: syz [ 2264.938716][T22664] cdc_ncm 2-1:1.0: bind() failure [ 2264.958749][T22664] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 2264.988962][T22664] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 2264.996049][T17408] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2265.004754][T17408] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2265.012252][T22664] usbtest: probe of 2-1:1.1 failed with error -71 [ 2265.026134][T22664] usb 2-1: USB disconnect, device number 81 [ 2265.203347][T17408] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2265.257799][T17408] usb 5-1: USB disconnect, device number 111 [ 2265.285875][T17408] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM 17:56:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2265.566229][T25703] usb 3-1: USB disconnect, device number 4 [ 2265.651429][T25704] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2265.978451][T17408] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2266.018644][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.188523][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2266.197710][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.209848][T25704] usb 2-1: Product: syz [ 2266.214120][T25704] usb 2-1: Manufacturer: syz [ 2266.221032][T25704] usb 2-1: SerialNumber: syz 17:56:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2266.389242][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.408499][T25704] cdc_ncm 2-1:1.0: bind() failure [ 2266.436967][T25704] cdc_ncm 2-1:1.1: bind() failure [ 2266.466741][T25704] usb 2-1: USB disconnect, device number 82 [ 2266.619377][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2266.628638][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.636739][T17408] usb 5-1: Product: syz [ 2266.642790][T17408] usb 5-1: Manufacturer: syz [ 2266.649136][T17408] usb 5-1: SerialNumber: syz 17:56:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000000)='syzkaller0\x00'}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000030d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00100904010102020d000009058202000200000009e402020002", @ANYRESDEC=r3, @ANYRES16=r0, @ANYRES64=r1], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000900080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000800090001000000080001007063690011000200303030303a30303a31302e300000000008000300030000000800090002000000080001007063690011000200303030303a30303a31302e300000000008000300000000000800090002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4045) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) 17:56:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100001000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d0000090401010202ffff00000582020002000000090503020002", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="1835ccab9c64b32316a910a2897a8a02e432cb5a62c7094842e5bd9ac780c6f585b93d6c6bf48b4edbd682d349a23af242953248dccd7a3ad4f5b55cd8907efeb0441d808c28ff"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000140)=""/89) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'wlan1\x00', {'gre0\x00'}, 0x1}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:18 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902648002010000000925000001020d0000052406010105240000000d24280100000000000000000006241a00001008241c000000ad6f0905810300020000000904010000020d0000090401010202d524577a17f216134a7fb3868e72d0360d00be6ad77acef0e06cee78138411f1c6efbcc345a599c2c81ef9f7e4c7c2aa58fe68f521c3e90c4e21f0daf3d9ffad0bb75567f66b226aaf9c70e3ccfac37eafcefc7be395d85139f63e38b407f89a42ac9ea6a9aa895c146ee8482b810e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2266.721969][T17408] usb 5-1: can't set config #1, error -71 [ 2266.763535][T17408] usb 5-1: USB disconnect, device number 112 17:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:56:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={0x0}}, 0x0) 17:56:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4c00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2267.055335][ T5484] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2267.073329][T22664] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2267.198283][T17408] usb 5-1: new high-speed USB device number 113 using dummy_hcd 17:56:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2267.418615][ T5484] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2267.428955][ T5484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.443683][ T5484] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2267.479052][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.490025][T22664] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2267.598460][T17408] usb 5-1: config index 0 descriptor too short (expected 32868, got 100) [ 2267.607340][T17408] usb 5-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 2267.619902][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2267.629306][T17408] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2267.636246][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.644477][T17408] usb 5-1: config 1 has no interface number 0 [ 2267.652064][ T5484] usb 2-1: Product: syz [ 2267.659209][ T5484] usb 2-1: Manufacturer: syz [ 2267.664032][ T5484] usb 2-1: SerialNumber: syz [ 2267.667584][T17408] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2267.699042][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2267.708109][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.741917][T22664] usb 3-1: Product: syz [ 2267.750884][T22664] usb 3-1: Manufacturer: syz [ 2267.761384][T22664] usb 3-1: SerialNumber: syz [ 2267.898507][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2267.907583][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.917558][T17408] usb 5-1: Product: syz [ 2267.922735][T17408] usb 5-1: Manufacturer: syz [ 2267.928049][T17408] usb 5-1: SerialNumber: syz [ 2267.969404][T17408] cdc_ncm 5-1:1.1: bind() failure [ 2268.808250][ T5484] cdc_ncm 2-1:1.0: bind() failure [ 2268.815814][ T5484] cdc_ncm 2-1:1.1: bind() failure [ 2268.908281][T22664] cdc_ncm 3-1:1.0: bind() failure [ 2269.022913][ T6589] usb 2-1: USB disconnect, device number 83 [ 2269.149649][T22664] cdc_ncm 3-1:1.1: bind() failure [ 2269.169462][T22664] usb 3-1: USB disconnect, device number 5 [ 2269.818069][T22664] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2269.844296][T25703] usb 5-1: USB disconnect, device number 113 [ 2269.878667][T11183] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2270.258138][T22664] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2270.268666][T22664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2270.283352][T22664] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2270.368165][T22664] usb 2-1: string descriptor 0 read error: -71 [ 2270.382309][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2270.400618][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:56:22 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640000010000000904000001020d0000052406000105240000000d240f0f00000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002f3431ffc6f4efb0e45a5a4f949dbb9bc7349980b957903"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x7, 0x2, 0x9, 0x8001, 0xfff, 0x74]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:22 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d000005240600010524000000f9865592eb0d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(r0, 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000240)={0x20, 0x5, 0xd549, {0x1f, 0x7fff}, 0x1ff, 0x5}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x20, 0xfffe, 0xfffffff8, 0x0, 0x0, 0x0, 0x8, 0x3, 0x5, 0xffff, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 17:56:22 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002002ace2505a1a440000102030109026400020100000009f8ffff00020d00000524060001052400010000240f0100000000000000000006241a00000008241c090000007f0905810300020000000904010000020d000009040101020a0d000009058202070000000000000002000264900087bd8e9925e0147fb104d0cb39ee28dc6b2d16527b2c88d1cd418335364ac64d188baff957eabc3918aefa0d4c60bef0b456"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f00000002c0)) wait4(r1, &(0x7f0000000240), 0x1, &(0x7f0000000280)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth1\x00', @dev}) 17:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={0x0}}, 0x0) [ 2270.448215][T22664] usb 2-1: can't set config #1, error -71 [ 2270.483335][T11183] usb 3-1: unable to read config index 0 descriptor/all [ 2270.497247][T22664] usb 2-1: USB disconnect, device number 84 [ 2270.503747][T11183] usb 3-1: can't read configurations, error -71 17:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={0x0}}, 0x0) 17:56:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6800}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, 0x0, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, 0x0, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, 0x0, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6c00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2270.818009][T25703] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2270.896900][T22664] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2270.904897][T11183] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2271.057884][T25703] usb 5-1: Using ep0 maxpacket: 8 [ 2271.108459][T22664] usb 2-1: device descriptor read/64, error 18 [ 2271.258448][T25703] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 2271.267671][T25703] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 2271.277627][T25703] usb 5-1: Product: syz [ 2271.287933][T11183] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 2271.290665][T25703] usb 5-1: config 0 descriptor?? [ 2271.301850][T11183] usb 3-1: config 1 has an invalid interface number: 1 but max is -1 [ 2271.330335][T11183] usb 3-1: config 1 has an invalid interface number: 1 but max is -1 [ 2271.356921][T11183] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 0 [ 2271.377821][T22664] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2271.411784][T11183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2271.567984][T25703] usb 5-1: ignoring: probably an ADSL modem [ 2271.598106][T22664] usb 2-1: device descriptor read/64, error 18 [ 2271.628310][T11183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2271.637557][T11183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.649615][T11183] usb 3-1: Product: syz [ 2271.658798][T11183] usb 3-1: Manufacturer: syz [ 2271.663574][T11183] usb 3-1: SerialNumber: syz [ 2271.719558][T22664] usb usb2-port1: attempt power cycle [ 2271.848294][T25703] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2271.865726][T25703] usb 5-1: USB disconnect, device number 114 [ 2272.447927][T22664] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2272.547814][T25703] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2272.548146][T22664] usb 2-1: Invalid ep0 maxpacket: 206 [ 2272.717915][T22664] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2272.787695][T25703] usb 5-1: Using ep0 maxpacket: 8 [ 2272.788174][T11183] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2272.807642][T11183] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2272.816306][T11183] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2272.822533][T22664] usb 2-1: Invalid ep0 maxpacket: 206 [ 2272.828390][T22664] usb usb2-port1: unable to enumerate USB device [ 2272.987792][T25703] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 2272.998042][T25703] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 2273.006202][T25703] usb 5-1: Product: syz [ 2273.013769][T25703] usb 5-1: config 0 descriptor?? [ 2273.029482][T11183] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2273.092279][T11183] usb 3-1: USB disconnect, device number 7 [ 2273.118638][T11183] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2273.287870][T25703] usb 5-1: ignoring: probably an ADSL modem [ 2273.387908][T25703] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2273.404120][T25703] usb 5-1: USB disconnect, device number 115 [ 2273.767589][ T5484] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2274.127840][ T5484] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 2274.135946][ T5484] usb 3-1: config 1 has an invalid interface number: 1 but max is -1 [ 2274.151311][ T5484] usb 3-1: config 1 has an invalid interface number: 1 but max is -1 [ 2274.164973][ T5484] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 0 [ 2274.177670][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2274.347655][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2274.356782][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.371586][ T5484] usb 3-1: Product: syz [ 2274.375764][ T5484] usb 3-1: Manufacturer: syz [ 2274.387674][ T5484] usb 3-1: SerialNumber: syz 17:56:26 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x6d, {0x6d, 0xf, "50c945f38eebaa8c4441f4c7a97891d8249854f3974f9508b0b43c23c7847f275ad81bad86f68e0bb6d7e8d04ff64f33b8a885e87100f1ab8d3554699c61812b31ac7d512bcbc3686b2ba3055376caad1652fbdeac8c640e3d3d768f054002fa1e574991919ccef8bb3fea"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0x31, 0x3f, "2860c2b2ed2b9c0870a460dfbf243f897520e294be2462d62c5f262efa4052bd9530edcbd8ce02e9b3d7038098a7aa00b8b40c05d061e7ba6e2662b6cca8e2"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xe1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x3, 0x401, 0x3, 0x1, 0x8, 0x931, 0x1, 0x6, 0xff, 0x401, 0x5, 0x55}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x59ed}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:26 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x40, 0xf, 0x81, {0x81, 0xf, "da9c14a0e755ee648fbf7146de5c20cd96da10b7f10b6eb1b9cc79a698fc978d85f7bfbf0da8fc892ea87ce459cdd5dcc4accf0e35891cfe667f37e586eb641b1fc868d2af8cb828f42be59f1874dcf389235980ca5a136257feb9547b8b662a3d2393602f1135b142a5d0d78e0000b6f58256aadf2590eea9c86c016a3957"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2450}}, &(0x7f0000000240)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0x9, "8aa6"}, @global=@item_012={0x2, 0x1, 0x8, '*\\'}, @global=@item_4={0x3, 0x1, 0x9, "79f43a73"}, @global=@item_012={0x2, 0x1, 0x4, "3112"}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xe8d}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x20, 0xb, 0xdf, "baabdd063b19afd7bb98a444a1030a8b6cf7d347bd91981f22261ae14b76bf24080233370c61fa1a9ccadeba513ed33894119115365249f1ed1689a3c3398d8bb927ed932a063c265dc7ed168a8a4a73aed665a27ea854d3fe8818341722f5f2257707595996b694b0de501963a910ac5fbd1cf76278d4ff4f021a938a0553ee0bf6c203682a738082cf75c9ae55d5585899ae3c0602841c998bcba96c08f7b7f36bd57905372dab68c2b5a40cc79318097fe5110d1f1a89c63fa14e15648724ec302a85cd5ae7c296ff9620aed60b98c6bcf1b1bc3fb77d4004168a233036"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x1, 0x6d, "45011573e3d77dfaf664c4cf8abfa345762f4033d427f3e94492c968e6183ffaf66c482f118dbdee40e3b440631ff2338d295fbbffd47ed89e49a7c34eeecc31d1ff62bec6066560d752e4fcc8814719e524ba874d7afa1f4161795e5c14b80a786dadbcb9af2be2027e686527"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7400}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:26 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000240)={0x0, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4d}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7ff}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xcb48}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40800) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2274.557654][ T5484] cdc_ncm 3-1:1.0: bind() failure [ 2274.613531][ T5484] cdc_ncm 3-1:1.1: bind() failure 17:56:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2274.657684][ T5484] usb 3-1: USB disconnect, device number 8 17:56:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7a00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x48, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x48}}, 0x0) [ 2274.865090][T25703] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2274.879950][T25704] usb 2-1: new high-speed USB device number 89 using dummy_hcd 17:56:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x40, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x0) 17:56:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x38, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x38}}, 0x0) [ 2275.047463][ T5484] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2275.227533][T25703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.238792][ T5484] usb 3-1: device descriptor read/64, error 18 [ 2275.277620][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.407585][T25703] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2275.416697][T25703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.435244][T25703] usb 5-1: Product: syz [ 2275.457485][T25703] usb 5-1: Manufacturer: syz [ 2275.462141][T25703] usb 5-1: SerialNumber: syz [ 2275.478549][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2275.488474][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.496487][T25704] usb 2-1: Product: syz [ 2275.518036][T25704] usb 2-1: Manufacturer: syz [ 2275.527600][ T5484] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2275.539100][T25704] usb 2-1: SerialNumber: syz [ 2275.727485][ T5484] usb 3-1: device descriptor read/64, error 18 [ 2275.847882][ T5484] usb usb3-port1: attempt power cycle [ 2276.557322][ T5484] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2276.619798][T11677] udc-core: couldn't find an available UDC or it's busy [ 2276.626778][T11677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2276.657415][T25703] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2276.663961][T25703] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2276.697910][T25704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2276.704365][T25704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2276.712375][T25704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2276.727649][ T5484] usb 3-1: device descriptor read/8, error -61 [ 2276.875905][T25703] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2276.907524][T25703] usb 5-1: USB disconnect, device number 116 [ 2276.914284][T25703] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2276.928703][T25704] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2276.997495][ T5484] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2277.006648][T25704] usb 2-1: USB disconnect, device number 89 [ 2277.028823][T25704] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2277.167578][ T5484] usb 3-1: device descriptor read/8, error -61 [ 2277.288605][ T5484] usb usb3-port1: unable to enumerate USB device [ 2277.647218][T25704] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2277.707284][T25703] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2278.007605][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2278.067571][T25703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2278.177500][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2278.186618][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.205465][T25704] usb 5-1: Product: syz [ 2278.211476][T25704] usb 5-1: Manufacturer: syz [ 2278.216451][T25704] usb 5-1: SerialNumber: syz [ 2278.243173][T25703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2278.255549][T25703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.277391][T25703] usb 2-1: Product: syz [ 2278.281934][T25703] usb 2-1: Manufacturer: syz [ 2278.286680][T25703] usb 2-1: SerialNumber: syz 17:56:30 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) openat(0xffffffffffffffff, 0x0, 0x80, 0x185) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2278.407547][T25704] cdc_ncm 5-1:1.0: bind() failure [ 2278.438006][T25704] cdc_ncm 5-1:1.1: bind() failure 17:56:30 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ncm(0x2, 0x109, &(0x7f0000000340)={{0x12, 0x1, 0xbf942e1d208408ea, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x2, 0x1, 0xd3, 0x50, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '<'}, {0x5, 0x24, 0x0, 0x733}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x1f, 0x40}, {0x6, 0x24, 0x1a, 0x800, 0x3a}, [@mdlm_detail={0x15, 0x24, 0x13, 0xf8, "49e54eecd3222a80dde8414a0862c1884b"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x40, 0xac}, @mdlm_detail={0x75, 0x24, 0x13, 0x4, "f20e126d34848986c8150ac774cbd9c20340a0c47e499aff2b23f121c932d11d7e0ff3095f86ba585965e91abb922a00a177bad05ccc9334c4c11e433cc558fc7d390ea35c16d6aa956bcb862a2bbe3c06c47cf17a86c295fe37c4234ab4f8d35e029e9a23ac072a566e2408603c3c20fa"}, @obex={0x5, 0x24, 0x15, 0x2}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x9b, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0x6, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xff, 0x3, 0x8, 0x20, 0x3}, 0x2f, &(0x7f0000000140)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x0, 0xf00f, 0x1, [0x0, 0xff0000, 0xffc000, 0xcf, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x7, 0xfffe}]}, 0x4, [{0xe6, &(0x7f0000000480)=@string={0xe6, 0x3, "33b7209dd5f6739dd373e6d67af00c9b0bb9ff52b2264a56455a619f028ff5a40d535c41b5c19fe652db86ccf95de49883c36011baf998ab381eb3ca6ffd0e03b736994e23f1ee5d44af5ac613bd71a74d97f07fadffc8943b69b29e596f4f7577a647071924e8a5ed3922693477e4bca227d68b0342ab7dc93a650f300a2333c63cedd13466fed45feb7d5a3ac6867aa387eb324e177bf1cad6c22d6a11e46f8e5485f098355ad770e596268d7d2618c91c2466c8936760387c9c979507406fa41cb5d7303548fd870c49b212e9ea8372eaffd8192601f725b60a5279ada8734569d5d4"}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "c3851ed5594b0ef210d3033a508c30847f8d1ead405511b95d60cd3d1f23044666051ff9630659d71929108fe409e0d257fc6d9e8ffad40fd693c156f3c60fd58ff461ca2581166d3f247ac0c5b4a845d995de265e47ff5415ee60b332b3680705b2e88f311b51407d8f95cb5c0092b95a86055c7f89f8d279562d85727cba0ec12b479c903373c02c9e1a661cc282c99a404cc0a39bec1dde63f68564d406e1a4dd314c35609b050df97ee83fc5b266a4b722e7bd59971ea73acbb981d986475576260572dbcefde641c7d6bfba2dd28e3756f9bd2ace5ff2ddf7dcfb624971cacc5a"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io$cdc_ncm(r1, 0xfffffffffffffffd, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x0, 0xe, 0xe1, "8f08a40a7448773abd8c01e323aa821614479404740b9b260737799710a22ad0306473024b688a88ba31017183731fa42f81bc9bbd3cd8468dfe0dbb1a0ab95cf056f1eb7a8a9034c6096ec76c1cca676a7388656c8e0f3029e82f3550bc14adc82f83806d6519078698c876c642e1cfa01dd4a92e99f44e08601a658b3efad305a03000f5681a94b2d1cc0953d0c9c2146f612dd7923541c61d6e54dc0502155d4f6639aaa53c1eb07df01eef1d100d25956f4c2e5a3818d29e5c1d70d79d0a62c16bcbdf5964a72e0e27e8ca821514eff9f3cf9555e8527445ee5becbe65a766"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x20, 0x1, 0x1c, 0x400, 0x8, 0x40, 0x6, 0x1, 0x401, 0x9c9c, 0x3, 0x3}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f00000009c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x80fe}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x24, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 17:56:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xb000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12ffffff010000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a005c00000000000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x8000, 0xc5, 0x0, 0xfffffbff}, {0x4, 0x4, 0x3f, 0x2}, {0x5, 0x9, 0x7, 0x6}, {0x0, 0x80, 0x0, 0x5}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x11f000, 0x0) statx(r5, &(0x7f0000000140)='./file0\x00', 0x2000, 0x100, &(0x7f0000000340)) [ 2278.460173][T25704] usb 5-1: USB disconnect, device number 117 [ 2278.507250][T25703] cdc_ncm 2-1:1.0: bind() failure [ 2278.536310][T25703] cdc_ncm 2-1:1.1: bind() failure [ 2278.578916][T25703] usb 2-1: USB disconnect, device number 90 17:56:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x1c, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}]}, 0x1c}}, 0x0) 17:56:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xc0fe}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:56:30 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d000005240600010524000000f9865592eb0d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(r0, 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000240)={0x20, 0x5, 0xd549, {0x1f, 0x7fff}, 0x1ff, 0x5}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x20, 0xfffe, 0xfffffff8, 0x0, 0x0, 0x0, 0x8, 0x3, 0x5, 0xffff, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 17:56:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe716}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2278.837434][T25704] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2278.867308][T22664] usb 3-1: new high-speed USB device number 13 using dummy_hcd 17:56:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2279.037331][T25703] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2279.067068][T22664] usb 3-1: device descriptor read/64, error 18 [ 2279.097159][ T5484] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2279.207174][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2279.337445][ T5484] usb 4-1: Using ep0 maxpacket: 8 [ 2279.357061][T22664] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2279.379624][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2279.388920][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.401119][T25703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2279.412416][T25704] usb 5-1: Product: syz [ 2279.416765][T25704] usb 5-1: Manufacturer: syz [ 2279.422811][T25704] usb 5-1: SerialNumber: syz [ 2279.537234][ T5484] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 2279.546424][ T5484] usb 4-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 2279.556873][ T5484] usb 4-1: Product: syz [ 2279.566983][T22664] usb 3-1: device descriptor read/64, error 18 [ 2279.572409][ T5484] usb 4-1: config 0 descriptor?? [ 2279.587306][T25703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2279.597516][T25703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.606668][T25703] usb 2-1: Product: syz [ 2279.627026][T25703] usb 2-1: Manufacturer: syz [ 2279.631663][T25703] usb 2-1: SerialNumber: syz [ 2279.687443][T22664] usb usb3-port1: attempt power cycle [ 2279.795010][T11794] device bond0 entered promiscuous mode [ 2279.802148][T11794] device bond_slave_0 entered promiscuous mode [ 2279.815120][T11794] device bond_slave_1 entered promiscuous mode [ 2279.848836][ T5484] usb 4-1: ignoring: probably an ADSL modem [ 2280.127981][ T5484] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2280.138004][ T5484] usb 4-1: USB disconnect, device number 44 [ 2280.407115][T22664] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2280.569534][T11814] udc-core: couldn't find an available UDC or it's busy [ 2280.579030][T11814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2280.589956][T22664] usb 3-1: device descriptor read/8, error -61 [ 2280.687454][T25704] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2280.693921][T25704] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2280.846964][T25703] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2280.853525][T25703] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2280.863278][T25703] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2280.877014][T22664] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2280.916437][T25704] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2280.953036][T25704] usb 5-1: USB disconnect, device number 118 [ 2280.975125][T25704] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2281.057181][T22664] usb 3-1: device descriptor read/8, error -61 [ 2281.083467][T25703] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2281.126364][T25703] usb 2-1: USB disconnect, device number 91 [ 2281.147199][T25703] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2281.179289][T22664] usb usb3-port1: unable to enumerate USB device [ 2281.676844][T25704] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2281.836851][T17408] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2282.036884][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2282.206875][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2282.216048][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.227347][T17408] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2282.236862][T25704] usb 5-1: Product: syz [ 2282.242394][T25704] usb 5-1: Manufacturer: syz [ 2282.257593][T25704] usb 5-1: SerialNumber: syz 17:56:34 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x200081) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x4, 0x100000000, 0x5, 0x915}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2282.327005][T25704] usb 5-1: can't set config #1, error -71 [ 2282.334675][T25704] usb 5-1: USB disconnect, device number 119 [ 2282.437084][T17408] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2282.446138][T17408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.463672][T17408] usb 2-1: Product: syz [ 2282.467975][T17408] usb 2-1: Manufacturer: syz [ 2282.472648][T17408] usb 2-1: SerialNumber: syz 17:56:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfc00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/347, @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0xf, 0xa, 0x7) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, r2, 0x16}, 0x10) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x0, 0x10, 0xee, {0xee, 0x5, "307d8ad42b009b9d5c548db8d8fb1f44f9edb3a76d82f6c38a2167f657878056a3c4ea3d21ba96503799b9e7077ad8705429c7ed97700d050a8df842f826b5b6ade21823d6e795c2d2ab8cd170fd80edf198c6a3a1a6fc5146e58da9aca53aaacd83286c86684e3acdfa481ff8f28aa0ad1d86534c0168082140b28c6e27ec754fe2432c70eb8861ae33c25ddaf805983b53a1782db5d2bff78b210843cd0a60f6f6ccdbb54a88881af3e18cdc9b37de6c520429c4169d62a36082d18ca4d11351a1f33d42af4badb68ca370098026e7d5cb8dca007f269d7be654ff10bf6ece6d40b2d62d4db7325d8f0323"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x40, 0xb, 0x88, "378719e351e5f1383a215a8ecd3592ec563e6e4c9ed4470bb2b0dee5aaf4c98c890c38ba52b3f6a351d76946967d0f5322720e8861048bb764a06c7eba5e5c34e6104480996fe815827bcd8cae4fbb98245e51f3edd39ee0568efa1fd1483af88f7c72cf94e32fcfdeabfc66ad64b6679283af8cbc9c1ddb1a55cfbde4329dc7dd6525f7c2adfdb2"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x5, 0xff, 0x0, 0x1000, 0xffff, 0xed5, 0x41, 0x400, 0x8d2, 0x7, 0xfff, 0x2}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x81}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x6f}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280)='NLBL_CIPSOv4\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f0000000140)="9e11f157fbd7683cc40ae00114fe42a01e086a6b084882afb1cd1dee89d0fbe486a16e0b9bf1c44abd9124046ee143857e57b92c42239fccc4e5c25229ad85d2174dfd78d34bde3521f07d6a8b24b650197de5913d869d749d59323c275f83ce915c7fdaab3f0a78ea52306d84f62dbbb5491d62b76fcd04138ac67a0cf8bb44f47e9c6e136e7d7912355ecfd57261ab52de5d0ce196b03f443b9a9da9cc0e6f4b5c1a776871e5", &(0x7f0000000000)=""/34, 0x4}, 0x20) 17:56:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x9) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2282.606838][T17408] cdc_ncm 2-1:1.0: bind() failure [ 2282.626571][T17408] cdc_ncm 2-1:1.1: bind() failure [ 2282.679634][T17408] usb 2-1: USB disconnect, device number 92 17:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfe80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2282.771460][T25704] usb 5-1: new high-speed USB device number 120 using dummy_hcd 17:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfec0}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xff00}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2282.876755][T10063] usb 3-1: new high-speed USB device number 17 using dummy_hcd 17:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x34000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2282.996883][T11183] usb 4-1: new high-speed USB device number 45 using dummy_hcd 17:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400300}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2283.147074][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.166774][T17408] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2283.237038][T10063] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.276935][T11183] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 2283.327021][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2283.336212][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.353585][T25704] usb 5-1: Product: syz [ 2283.361892][T25704] usb 5-1: Manufacturer: syz [ 2283.374676][T25704] usb 5-1: SerialNumber: syz [ 2283.377004][T11183] usb 4-1: config 0 has no interfaces? [ 2283.385064][T17408] usb 2-1: device descriptor read/64, error 18 [ 2283.427320][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2283.436412][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.459392][T10063] usb 3-1: Product: syz [ 2283.465218][T10063] usb 3-1: Manufacturer: syz [ 2283.477457][T11183] usb 4-1: config 0 has no interfaces? [ 2283.481022][T10063] usb 3-1: SerialNumber: syz [ 2283.566860][T11183] usb 4-1: config 0 has no interfaces? [ 2283.667961][T17408] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2283.675829][T11183] usb 4-1: config 0 has no interfaces? [ 2283.776787][T11183] usb 4-1: config 0 has no interfaces? [ 2283.857318][T17408] usb 2-1: device descriptor read/64, error 18 [ 2283.876888][T11183] usb 4-1: config 0 has no interfaces? [ 2283.956926][T11183] usb 4-1: config 0 has no interfaces? [ 2283.986988][T17408] usb usb2-port1: attempt power cycle [ 2284.036839][T11183] usb 4-1: config 0 has no interfaces? [ 2284.206857][T11183] usb 4-1: New USB device found, idVendor=0525, idProduct=a48e, bcdDevice= 0.40 [ 2284.215962][T11183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.235060][T11183] usb 4-1: Product: syz [ 2284.242987][T11183] usb 4-1: Manufacturer: syz [ 2284.253038][T11183] usb 4-1: SerialNumber: syz [ 2284.268707][T11183] usb 4-1: config 0 descriptor?? [ 2284.546732][T25704] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2284.553510][T25704] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2284.646646][T10063] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2284.653320][T10063] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2284.673319][T10063] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2284.736689][T17408] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2284.776214][T25704] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2284.804447][T25704] usb 5-1: USB disconnect, device number 120 [ 2284.817452][T25704] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2284.882560][T10063] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2284.926778][T17408] usb 2-1: device descriptor read/8, error -61 [ 2284.937919][T11942] udc-core: couldn't find an available UDC or it's busy [ 2284.945024][T11942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2284.956583][T10063] usb 3-1: USB disconnect, device number 17 [ 2284.985302][T10063] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2285.018339][T11183] usb 4-1: USB disconnect, device number 45 [ 2285.206501][T17408] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2285.417040][T17408] usb 2-1: device descriptor read/8, error -61 [ 2285.526521][ T6589] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2285.547120][T17408] usb usb2-port1: unable to enumerate USB device [ 2285.626424][T10063] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2285.886642][ T6589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2285.986768][T10063] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.076636][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2286.085848][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.104818][ T6589] usb 5-1: Product: syz [ 2286.109465][ T6589] usb 5-1: Manufacturer: syz [ 2286.115697][ T6589] usb 5-1: SerialNumber: syz 17:56:38 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000054006000104240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf0ffff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:38 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) openat(0xffffffffffffffff, 0x0, 0x80, 0x185) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:38 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000fc0c240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d00000905820200020000000905030200023cce0d046b459322fc1adf9e5108d12c5359a8a281eb982f1990ae48eff32e8d98f1a490349edda450a2861812d87dfe7d4aab79956234277971695664e8c6c84a69523720853bad5a463c24d61b419060c9c8a87f12"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2286.156850][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2286.194587][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.206471][ T6589] usb 5-1: can't set config #1, error -71 [ 2286.210635][T10063] usb 3-1: Product: syz [ 2286.215229][ T6589] usb 5-1: USB disconnect, device number 121 [ 2286.234889][T10063] usb 3-1: Manufacturer: syz [ 2286.248886][T10063] usb 3-1: SerialNumber: syz 17:56:38 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2286.466605][T10063] cdc_ncm 3-1:1.0: bind() failure [ 2286.490599][T10063] cdc_ncm 3-1:1.1: bind() failure 17:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2286.527263][T10063] usb 3-1: USB disconnect, device number 18 [ 2286.536833][ T5484] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2286.545808][T25704] usb 4-1: new high-speed USB device number 46 using dummy_hcd 17:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2286.741772][ T6589] usb 5-1: new high-speed USB device number 122 using dummy_hcd 17:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2286.906401][ T5484] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2286.916928][T25704] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.927973][T10063] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2286.935666][ T5484] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2286.956364][ T5484] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2287.116476][T25704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2287.125655][T25704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.137672][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2287.138008][ T6589] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2287.147927][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.157612][ T6589] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2287.174776][ T6589] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2287.176246][T25704] usb 4-1: Product: syz [ 2287.198182][ T5484] usb 2-1: Product: syz [ 2287.202377][ T5484] usb 2-1: Manufacturer: syz [ 2287.208167][ T5484] usb 2-1: SerialNumber: syz [ 2287.214528][T25704] usb 4-1: Manufacturer: syz [ 2287.227158][T25704] usb 4-1: SerialNumber: syz [ 2287.267683][ T5484] cdc_ncm 2-1:1.0: bind() failure [ 2287.309727][T10063] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2287.387834][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2287.406957][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.414979][ T6589] usb 5-1: Product: syz [ 2287.427703][ T6589] usb 5-1: Manufacturer: syz [ 2287.432336][ T6589] usb 5-1: SerialNumber: syz [ 2287.487436][ T6589] cdc_ncm 5-1:1.0: skipping garbage [ 2287.492723][ T6589] cdc_ncm 5-1:1.0: bind() failure [ 2287.496525][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2287.549286][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.591870][T10063] usb 3-1: Product: syz [ 2287.611289][T10063] usb 3-1: Manufacturer: syz [ 2287.616018][T10063] usb 3-1: SerialNumber: syz [ 2287.633701][T12064] device bond0 entered promiscuous mode [ 2287.640527][T12064] device bond_slave_0 entered promiscuous mode [ 2287.660384][T12064] device bond_slave_1 entered promiscuous mode [ 2288.536271][T25704] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2288.542985][T25704] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 2288.752588][T25704] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 2288.809711][T25704] usb 4-1: USB disconnect, device number 46 [ 2288.816367][T10063] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2288.823082][T10063] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2288.832409][T10063] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2288.838774][T25704] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 2289.030845][T10063] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2289.074707][T10063] usb 3-1: USB disconnect, device number 19 [ 2289.084021][T10063] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2289.256700][T25704] usb 2-1: USB disconnect, device number 97 17:56:41 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:41 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) openat(0xffffffffffffffff, 0x0, 0x80, 0x185) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2289.391164][ T6589] usb 5-1: USB disconnect, device number 122 [ 2289.795988][ T5484] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2289.816391][T10063] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2289.836309][T25704] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2289.925988][ T6589] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2290.156390][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.177899][T10063] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.206401][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.337018][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2290.346509][T10063] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2290.352404][ T6589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.355564][T10063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.385604][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.394026][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2290.403734][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.412886][ T5484] usb 3-1: Product: syz [ 2290.417761][T10063] usb 4-1: Product: syz [ 2290.421949][T10063] usb 4-1: Manufacturer: syz [ 2290.428371][T25704] usb 2-1: Product: syz [ 2290.434710][T25704] usb 2-1: Manufacturer: syz [ 2290.446206][ T5484] usb 3-1: Manufacturer: syz [ 2290.450839][ T5484] usb 3-1: SerialNumber: syz [ 2290.465935][T10063] usb 4-1: SerialNumber: syz [ 2290.477033][T25704] usb 2-1: SerialNumber: syz 17:56:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) inotify_init() syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2290.526106][ T5484] usb 3-1: can't set config #1, error -71 [ 2290.534843][ T5484] usb 3-1: USB disconnect, device number 20 [ 2290.576371][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2290.594061][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.637881][ T6589] usb 5-1: Product: syz [ 2290.653490][ T6589] usb 5-1: Manufacturer: syz [ 2290.674942][ T6589] usb 5-1: SerialNumber: syz 17:56:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xa000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2291.125906][ T5484] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2291.386113][ T6589] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2291.392441][ T6589] cdc_ncm 5-1:1.0: bind() failure [ 2291.409594][ T6589] cdc_ncm 5-1:1.1: bind() failure [ 2291.486114][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2291.615999][T25704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2291.622631][T25704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2291.638804][T25704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2291.666000][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2291.675114][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.694141][ T5484] usb 3-1: Product: syz [ 2291.698816][T10063] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2291.706501][ T5484] usb 3-1: Manufacturer: syz [ 2291.712541][ T5484] usb 3-1: SerialNumber: syz [ 2291.717605][T10063] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 2291.830478][T25704] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2291.870847][T25704] usb 2-1: USB disconnect, device number 98 [ 2291.893577][T25704] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2291.947511][T10063] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 2292.010190][T10063] usb 4-1: USB disconnect, device number 47 [ 2292.037273][T10063] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 17:56:44 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1f000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x11000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2292.519002][T22664] usb 5-1: USB disconnect, device number 123 [ 2292.595741][T25704] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2292.905844][ T5484] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2292.912479][ T5484] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2292.923976][ T5484] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2292.955799][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2293.015675][T22664] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2293.129574][ T5484] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2293.141928][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2293.169090][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.198799][ T5484] usb 3-1: USB disconnect, device number 21 [ 2293.205725][T22664] usb 5-1: device descriptor read/64, error 18 [ 2293.208223][T25704] usb 2-1: Product: syz [ 2293.220635][ T5484] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2293.241502][T25704] usb 2-1: Manufacturer: syz 17:56:45 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x6, {0x8, 0x6, 0x1ff, 0xffff}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="7065726d686174203078300400000030303030303030303030315e00007d002a7d3a2d2a230d3a976a2bc611a8e757282b262c7d0085805b5c2329002523b47d2f002b257d002600"], 0x40) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2293.252259][T25704] usb 2-1: SerialNumber: syz 17:56:45 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x8000) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x20000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2293.308627][T25704] usb 2-1: can't set config #1, error -71 [ 2293.348475][T25704] usb 2-1: USB disconnect, device number 99 [ 2293.475702][T22664] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2293.625722][ T6589] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2293.666071][T22664] usb 5-1: device descriptor read/64, error 18 [ 2293.795839][T22664] usb usb5-port1: attempt power cycle [ 2293.835658][T25704] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2293.885563][T11183] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2294.005669][ T6589] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.195630][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.197269][ T6589] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2294.227992][ T6589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.242335][ T6589] usb 4-1: Product: syz [ 2294.250205][ T6589] usb 4-1: Manufacturer: syz [ 2294.254801][ T6589] usb 4-1: SerialNumber: syz [ 2294.325864][T11183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.365683][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2294.374773][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.383071][T25704] usb 2-1: Product: syz [ 2294.390200][T25704] usb 2-1: Manufacturer: syz [ 2294.394901][T25704] usb 2-1: SerialNumber: syz [ 2294.525950][T11183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2294.535158][T22664] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2294.543084][T11183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.563591][T11183] usb 3-1: Product: syz [ 2294.568001][T11183] usb 3-1: Manufacturer: syz [ 2294.572603][T11183] usb 3-1: SerialNumber: syz 17:56:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x5537bce4, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:46 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) r1 = semget$private(0x0, 0x5, 0x41) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x7, 0x8001, 0x3, 0x1f, 0x6, 0x1, 0x4]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1='\x00\x00\x11\x11\"\"33'}}) r5 = dup(r2) epoll_create(0xff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open$dir(&(0x7f0000000040)='./file1\x00', 0x200000841, 0x0) set_thread_area(&(0x7f0000000080)={0x5, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r6) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(0xffffffffffffffff, 0x0, r8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)) [ 2294.665751][T11183] usb 3-1: can't set config #1, error -71 [ 2294.681554][T11183] usb 3-1: USB disconnect, device number 22 [ 2294.715781][T22664] usb 5-1: device descriptor read/8, error -61 17:56:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x40000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x48000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4c000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2295.005799][T22664] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2295.176179][T11183] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2295.216039][T22664] usb 5-1: device descriptor read/8, error -61 [ 2295.335797][T22664] usb usb5-port1: unable to enumerate USB device [ 2295.425604][ T6589] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2295.433288][ T6589] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2295.455369][ T6589] cdc_ncm 4-1:1.0: setting rx_max = 2048 17:56:47 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xd0, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe164}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39eaf5d4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1bad}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20044080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x1000000000200, 0x702) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x60000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2295.545492][T25704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2295.553245][T25704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2295.565799][T11183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2295.571992][T25704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2295.652346][ T6589] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 2295.708788][ T6589] usb 4-1: USB disconnect, device number 48 [ 2295.747009][T11183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2295.761860][T25704] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2295.765783][ T6589] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 2295.789905][T11183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.821826][T11183] usb 3-1: Product: syz [ 2295.833411][T25704] usb 2-1: USB disconnect, device number 100 [ 2295.834240][T11183] usb 3-1: Manufacturer: syz [ 2295.856257][T11183] usb 3-1: SerialNumber: syz [ 2295.874885][T25704] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2296.075505][ T5484] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2296.375764][T11183] cdc_ncm 3-1:1.0: bind() failure [ 2296.417294][T11183] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 2296.445786][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2296.457542][T11183] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 2296.485487][T11183] usbtest: probe of 3-1:1.1 failed with error -71 [ 2296.507646][T11183] usb 3-1: USB disconnect, device number 23 [ 2296.542564][T25704] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2296.625698][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2296.634827][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.645680][ T5484] usb 5-1: Product: syz [ 2296.650779][ T5484] usb 5-1: Manufacturer: syz [ 2296.657092][ T5484] usb 5-1: SerialNumber: syz [ 2296.925527][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.095341][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2297.104706][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.122268][T25704] usb 2-1: Product: syz [ 2297.126831][T10063] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2297.136433][T25704] usb 2-1: Manufacturer: syz [ 2297.141849][T25704] usb 2-1: SerialNumber: syz 17:56:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x68000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:49 executing program 3 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:56:49 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2297.315971][T25704] cdc_ncm 2-1:1.0: bind() failure [ 2297.324618][T25704] cdc_ncm 2-1:1.1: bind() failure [ 2297.357056][T25704] usb 2-1: USB disconnect, device number 101 [ 2297.382693][T12523] FAULT_INJECTION: forcing a failure. [ 2297.382693][T12523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2297.456171][T12523] CPU: 1 PID: 12523 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2297.464641][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.474714][T12523] Call Trace: [ 2297.478003][T12523] dump_stack+0x107/0x163 [ 2297.482381][T12523] should_fail.cold+0x5/0x1f [ 2297.485455][T10063] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.486995][T12523] _copy_from_user+0x2c/0x180 [ 2297.487032][T12523] __copy_msghdr_from_user+0x91/0x4b0 [ 2297.487067][T12523] ? __ia32_sys_shutdown+0x70/0x70 [ 2297.513014][T12523] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2297.519031][T12523] sendmsg_copy_msghdr+0xa1/0x160 [ 2297.524080][T12523] ? do_recvmmsg+0x6c0/0x6c0 [ 2297.528696][T12523] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2297.536144][T12523] ? _parse_integer+0x132/0x180 [ 2297.541397][T12523] ___sys_sendmsg+0xc6/0x170 [ 2297.546230][T12523] ? sendmsg_copy_msghdr+0x160/0x160 [ 2297.552451][T12523] ? __fget_files+0x2c1/0x430 [ 2297.557145][T12523] ? lock_downgrade+0x6d0/0x6d0 [ 2297.562597][T12523] ? __fget_files+0x2e3/0x430 [ 2297.567296][T12523] ? __fget_light+0xea/0x280 [ 2297.572296][T12523] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2297.578586][T12523] __sys_sendmsg+0xe5/0x1b0 [ 2297.584585][T12523] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2297.590766][T12523] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2297.597036][T12523] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2297.603485][T12523] ? fput+0x2a/0x50 [ 2297.607331][T12523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2297.613918][T12523] do_syscall_64+0x2d/0x70 [ 2297.618352][T12523] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2297.625122][T12523] RIP: 0033:0x45e149 [ 2297.629153][T12523] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2297.648777][T12523] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 17:56:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6c000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2297.657212][T12523] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2297.659645][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2297.665202][T12523] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2297.665228][T12523] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2297.665244][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2297.665260][T12523] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2297.731570][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.751292][T10063] usb 3-1: Product: syz [ 2297.762961][T10063] usb 3-1: Manufacturer: syz [ 2297.771222][T10063] usb 3-1: SerialNumber: syz 17:56:49 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) io_uring_setup(0x697d, &(0x7f0000000140)={0x0, 0xe3f, 0x8, 0x0, 0x2a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:49 executing program 3 (fault-call:5 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2297.798816][T25704] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2297.806561][ C0] raw-gadget gadget: ignoring, device is not running [ 2297.813629][ T5484] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2297.826066][T10063] usb 3-1: can't set config #1, error -32 [ 2297.832737][ T5484] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2297.848029][T10063] usb 3-1: USB disconnect, device number 24 [ 2297.899656][T12545] FAULT_INJECTION: forcing a failure. [ 2297.899656][T12545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2297.932383][T12545] CPU: 0 PID: 12545 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2297.940836][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.951939][T12545] Call Trace: [ 2297.955627][T12545] dump_stack+0x107/0x163 [ 2297.961028][T12545] should_fail.cold+0x5/0x1f [ 2297.965872][T12545] _copy_from_user+0x2c/0x180 [ 2297.970574][T12545] iovec_from_user+0x246/0x3c0 [ 2297.976383][T12545] __import_iovec+0x65/0x500 [ 2297.981013][T12545] import_iovec+0x10c/0x150 [ 2297.986639][T12545] sendmsg_copy_msghdr+0x12d/0x160 [ 2297.991786][T12545] ? do_recvmmsg+0x6c0/0x6c0 [ 2297.997919][T12545] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2298.003929][T12545] ? _parse_integer+0x132/0x180 [ 2298.008811][T12545] ___sys_sendmsg+0xc6/0x170 [ 2298.014214][T12545] ? sendmsg_copy_msghdr+0x160/0x160 [ 2298.019531][T12545] ? __fget_files+0x2c1/0x430 [ 2298.024226][T12545] ? lock_downgrade+0x6d0/0x6d0 [ 2298.029115][T12545] ? __fget_files+0x2e3/0x430 [ 2298.033841][T12545] ? __fget_light+0xea/0x280 [ 2298.038470][T12545] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2298.045778][T12545] __sys_sendmsg+0xe5/0x1b0 [ 2298.050521][T12545] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2298.057146][T12545] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2298.064262][T12545] ? fput+0x2a/0x50 [ 2298.068856][T12545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2298.075656][T12545] do_syscall_64+0x2d/0x70 [ 2298.080541][T12545] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2298.087629][T12545] RIP: 0033:0x45e149 [ 2298.092226][T12545] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2298.113273][T12545] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2298.122668][T12545] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2298.130665][T12545] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2298.138807][T12545] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2298.147994][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2298.157150][T12545] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c 17:56:50 executing program 3 (fault-call:5 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2298.191261][ T5484] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 17:56:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2298.261359][ T5484] usb 5-1: USB disconnect, device number 2 [ 2298.286879][ T5484] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2298.379653][T12569] FAULT_INJECTION: forcing a failure. [ 2298.379653][T12569] name failslab, interval 1, probability 0, space 0, times 0 [ 2298.397895][T12569] CPU: 0 PID: 12569 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2298.407063][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2298.417592][T12569] Call Trace: [ 2298.422172][T12569] dump_stack+0x107/0x163 [ 2298.426902][T12569] should_fail.cold+0x5/0x1f [ 2298.431866][T12569] ? __alloc_skb+0x71/0x5c0 [ 2298.436712][T12569] ? __alloc_skb+0x71/0x5c0 [ 2298.441536][T12569] should_failslab+0x5/0x10 [ 2298.446342][T12569] kmem_cache_alloc_node+0x55/0x370 [ 2298.453016][T12569] __alloc_skb+0x71/0x5c0 [ 2298.457810][T12569] netlink_sendmsg+0xa00/0xe40 [ 2298.462681][T12569] ? netlink_unicast+0x7d0/0x7d0 [ 2298.467647][T12569] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2298.474804][T12569] ? netlink_unicast+0x7d0/0x7d0 [ 2298.479768][T12569] sock_sendmsg+0xcf/0x120 [ 2298.484524][T12569] ____sys_sendmsg+0x6e8/0x810 [ 2298.490432][T12569] ? kernel_sendmsg+0x50/0x50 [ 2298.495276][T12569] ? do_recvmmsg+0x6c0/0x6c0 [ 2298.500152][T12569] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2298.507066][T12569] ? _parse_integer+0x132/0x180 [ 2298.511969][T12569] ___sys_sendmsg+0xf3/0x170 [ 2298.516803][T12569] ? sendmsg_copy_msghdr+0x160/0x160 [ 2298.522119][T12569] ? __fget_files+0x2c1/0x430 [ 2298.526895][T12569] ? lock_downgrade+0x6d0/0x6d0 [ 2298.531808][T12569] ? __fget_files+0x2e3/0x430 [ 2298.536668][T12569] ? __fget_light+0xea/0x280 [ 2298.541529][T12569] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2298.547797][T12569] __sys_sendmsg+0xe5/0x1b0 [ 2298.552322][T12569] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2298.557371][T12569] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2298.563662][T12569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2298.569587][T12569] do_syscall_64+0x2d/0x70 [ 2298.574034][T12569] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2298.579951][T12569] RIP: 0033:0x45e149 [ 2298.583858][T12569] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2298.603483][T12569] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2298.611918][T12569] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2298.619903][T12569] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2298.627891][T12569] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2298.635879][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2298.643864][T12569] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2298.654578][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2298.735102][T10063] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2298.825403][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2298.834712][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.851427][T25704] usb 2-1: Product: syz [ 2298.884330][T25704] usb 2-1: Manufacturer: syz [ 2298.895625][T25704] usb 2-1: SerialNumber: syz [ 2298.946522][T10063] usb 3-1: device descriptor read/64, error 18 [ 2299.175041][ T5484] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2299.214987][T10063] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2299.405030][T10063] usb 3-1: device descriptor read/64, error 18 [ 2299.525443][T10063] usb usb3-port1: attempt power cycle [ 2299.545376][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2299.715034][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2299.724162][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.740274][ T5484] usb 5-1: Product: syz [ 2299.744446][ T5484] usb 5-1: Manufacturer: syz [ 2299.756126][ T5484] usb 5-1: SerialNumber: syz 17:56:51 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d00000905820200020000000905030200020000000000000000512f8473eee34486a6dd5abe461205805514510cd756805321dedf5448e448a90137a4e2e83b8adc312330"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=[0x5, 0x4, 0x9, 0x1d3], &(0x7f0000000240)=[0xb1], &(0x7f0000000280)=[0x1, 0x5, 0x2, 0x101, 0x10001, 0xe], &(0x7f00000002c0)=[0x1000, 0x7, 0x99, 0xfffffc00, 0xfffe, 0x5359, 0x2], 0x0, 0x6}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x74000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:51 executing program 3 (fault-call:5 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:56:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2299.925193][ T5484] cdc_ncm 5-1:1.0: bind() failure [ 2299.942880][ T5484] cdc_ncm 5-1:1.1: bind() failure [ 2299.960846][ T5484] usb 5-1: USB disconnect, device number 3 [ 2299.971619][T12604] FAULT_INJECTION: forcing a failure. [ 2299.971619][T12604] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.997075][T12604] CPU: 0 PID: 12604 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2300.005607][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.015696][T12604] Call Trace: [ 2300.018985][T12604] dump_stack+0x107/0x163 [ 2300.023621][T12604] should_fail.cold+0x5/0x1f [ 2300.029741][T12604] ? netlink_sendmsg+0xa00/0xe40 [ 2300.034703][T12604] should_failslab+0x5/0x10 [ 2300.040502][T12604] __kmalloc_node_track_caller+0x73/0x310 [ 2300.047092][T12604] ? kmem_cache_alloc_node+0x33c/0x370 [ 2300.053831][T12604] __alloc_skb+0xae/0x5c0 [ 2300.058427][T12604] netlink_sendmsg+0xa00/0xe40 [ 2300.064718][T12604] ? netlink_unicast+0x7d0/0x7d0 [ 2300.069693][T12604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2300.076375][T12604] ? netlink_unicast+0x7d0/0x7d0 [ 2300.082748][T12604] sock_sendmsg+0xcf/0x120 [ 2300.087344][T12604] ____sys_sendmsg+0x6e8/0x810 [ 2300.092133][T12604] ? kernel_sendmsg+0x50/0x50 [ 2300.096828][T12604] ? do_recvmmsg+0x6c0/0x6c0 [ 2300.101446][T12604] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2300.108163][T12604] ? _parse_integer+0x132/0x180 [ 2300.114504][T12604] ___sys_sendmsg+0xf3/0x170 [ 2300.119142][T12604] ? sendmsg_copy_msghdr+0x160/0x160 [ 2300.124455][T12604] ? __fget_files+0x2c1/0x430 [ 2300.129152][T12604] ? lock_downgrade+0x6d0/0x6d0 [ 2300.135660][T12604] ? __fget_files+0x2e3/0x430 [ 2300.140458][T12604] ? __fget_light+0xea/0x280 [ 2300.145077][T12604] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2300.151748][T12604] __sys_sendmsg+0xe5/0x1b0 [ 2300.156364][T12604] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2300.162981][T12604] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2300.169677][T12604] ? syscall_enter_from_user_mode+0x1d/0x50 17:56:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7a000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2300.175604][T12604] do_syscall_64+0x2d/0x70 [ 2300.180045][T12604] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2300.185963][T12604] RIP: 0033:0x45e149 [ 2300.189870][T12604] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2300.209498][T12604] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2300.217932][T12604] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2300.225911][T12604] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2300.233868][T12604] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.241827][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2300.250065][T12604] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c 17:56:52 executing program 3 (fault-call:5 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2300.295260][T25704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2300.306798][T25704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2300.331594][T25704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2300.344935][T10063] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2300.391073][T12622] FAULT_INJECTION: forcing a failure. [ 2300.391073][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.406144][T12622] CPU: 0 PID: 12622 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2300.415762][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.426453][T12622] Call Trace: [ 2300.429751][T12622] dump_stack+0x107/0x163 [ 2300.434113][T12622] should_fail.cold+0x5/0x1f [ 2300.439190][T12622] _copy_from_iter_full+0x1fa/0x850 [ 2300.444417][T12622] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2300.450695][T12622] ? __phys_addr_symbol+0x2c/0x70 [ 2300.455746][T12622] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2300.462186][T12622] ? __check_object_size+0x171/0x3f0 [ 2300.470510][T12622] netlink_sendmsg+0x873/0xe40 [ 2300.476795][T12622] ? netlink_unicast+0x7d0/0x7d0 [ 2300.483137][T12622] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2300.491377][T12622] ? netlink_unicast+0x7d0/0x7d0 [ 2300.497814][T12622] sock_sendmsg+0xcf/0x120 [ 2300.502261][T12622] ____sys_sendmsg+0x6e8/0x810 [ 2300.507053][T12622] ? kernel_sendmsg+0x50/0x50 [ 2300.511749][T12622] ? do_recvmmsg+0x6c0/0x6c0 [ 2300.517254][T12622] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2300.523994][T12622] ? _parse_integer+0x132/0x180 [ 2300.530468][T12622] ___sys_sendmsg+0xf3/0x170 [ 2300.535120][T12622] ? sendmsg_copy_msghdr+0x160/0x160 [ 2300.541931][T12622] ? __fget_files+0x2c1/0x430 [ 2300.546631][T12622] ? lock_downgrade+0x6d0/0x6d0 [ 2300.551603][T12622] ? __fget_files+0x2e3/0x430 [ 2300.557105][T12622] ? __fget_light+0xea/0x280 [ 2300.561715][T12622] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2300.568438][T12622] __sys_sendmsg+0xe5/0x1b0 [ 2300.574562][T12622] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2300.581107][T12622] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2300.589404][T12622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.597757][T12622] do_syscall_64+0x2d/0x70 [ 2300.602263][T12622] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2300.608883][T12622] RIP: 0033:0x45e149 [ 2300.613195][T12622] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2300.633611][T12622] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2300.643649][T12622] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2300.651636][T12622] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2300.659621][T12622] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.667609][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2300.675596][T12622] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2300.696978][T25704] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2300.735989][T25704] usb 2-1: USB disconnect, device number 102 [ 2300.743936][T25704] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2300.775474][T10063] usb 3-1: device descriptor read/8, error -61 [ 2300.953285][ T5484] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2301.314910][ T5484] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2301.325223][ T5484] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2301.334139][ T5484] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2301.364852][T25704] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2301.504973][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2301.514247][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.531524][ T5484] usb 5-1: Product: syz [ 2301.535821][ T5484] usb 5-1: Manufacturer: syz [ 2301.540509][ T5484] usb 5-1: SerialNumber: syz [ 2301.725209][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2301.897922][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2301.907169][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.921538][T25704] usb 2-1: Product: syz [ 2301.929416][T25704] usb 2-1: Manufacturer: syz [ 2301.934013][T25704] usb 2-1: SerialNumber: syz 17:56:53 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x9effffff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:53 executing program 3 (fault-call:5 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:56:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:53 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) bind$isdn_base(r3, &(0x7f0000000140)={0x22, 0x5, 0x3, 0x0, 0x6}, 0x6) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2302.064898][T25704] cdc_ncm 2-1:1.0: bind() failure [ 2302.082683][T25704] cdc_ncm 2-1:1.1: bind() failure [ 2302.108895][T25704] usb 2-1: USB disconnect, device number 103 [ 2302.123000][T12677] FAULT_INJECTION: forcing a failure. [ 2302.123000][T12677] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.174196][T12677] CPU: 0 PID: 12677 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2302.183911][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2302.193985][T12677] Call Trace: [ 2302.197281][T12677] dump_stack+0x107/0x163 [ 2302.202899][T12677] should_fail.cold+0x5/0x1f [ 2302.208860][T12677] ? skb_clone+0x14f/0x3c0 [ 2302.213558][T12677] should_failslab+0x5/0x10 [ 2302.218301][T12677] kmem_cache_alloc+0x5b/0x350 [ 2302.223130][T12677] skb_clone+0x14f/0x3c0 [ 2302.227760][T12677] netlink_deliver_tap+0xa2d/0xc00 [ 2302.234339][T12677] netlink_unicast+0x5e5/0x7d0 [ 2302.239147][T12677] ? netlink_attachskb+0x870/0x870 [ 2302.244277][T12677] ? _copy_from_iter_full+0x275/0x850 [ 2302.251027][T12677] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2302.257910][T12677] ? __phys_addr_symbol+0x2c/0x70 [ 2302.262961][T12677] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2302.269720][T12677] ? __check_object_size+0x171/0x3f0 [ 2302.275038][T12677] netlink_sendmsg+0x907/0xe40 [ 2302.279871][T12677] ? netlink_unicast+0x7d0/0x7d0 [ 2302.286337][T12677] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2302.293396][T12677] ? netlink_unicast+0x7d0/0x7d0 [ 2302.300010][T12677] sock_sendmsg+0xcf/0x120 [ 2302.305092][T12677] ____sys_sendmsg+0x6e8/0x810 [ 2302.310231][T12677] ? kernel_sendmsg+0x50/0x50 [ 2302.315296][T12677] ? do_recvmmsg+0x6c0/0x6c0 [ 2302.320351][T12677] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2302.326358][T12677] ? _parse_integer+0x132/0x180 [ 2302.331244][T12677] ___sys_sendmsg+0xf3/0x170 [ 2302.335855][T12677] ? sendmsg_copy_msghdr+0x160/0x160 [ 2302.341170][T12677] ? __fget_files+0x2c1/0x430 [ 2302.345864][T12677] ? lock_downgrade+0x6d0/0x6d0 [ 2302.350756][T12677] ? __fget_files+0x2e3/0x430 [ 2302.355464][T12677] ? __fget_light+0xea/0x280 [ 2302.360195][T12677] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2302.366481][T12677] __sys_sendmsg+0xe5/0x1b0 17:56:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe7160000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2302.371011][T12677] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2302.376056][T12677] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2302.382345][T12677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2302.388276][T12677] do_syscall_64+0x2d/0x70 [ 2302.392714][T12677] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2302.398635][T12677] RIP: 0033:0x45e149 [ 2302.402548][T12677] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2302.422171][T12677] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2302.430663][T12677] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2302.438625][T12677] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2302.446585][T12677] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2302.454544][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2302.462518][T12677] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2302.634997][ T5484] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2302.784648][T25704] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2302.994818][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.144943][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2303.169322][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2303.178659][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.196443][ T5484] usb 3-1: Product: syz [ 2303.201266][ T5484] usb 3-1: Manufacturer: syz [ 2303.206216][ T5484] usb 3-1: SerialNumber: syz [ 2303.314864][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2303.324320][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.334276][T25704] usb 2-1: Product: syz [ 2303.343096][T25704] usb 2-1: Manufacturer: syz [ 2303.348344][T25704] usb 2-1: SerialNumber: syz 17:56:55 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000402505a1a440000101020d0000052406000105240000000d24ef0000000000000000000006241a000000ed231c000000ad7f0905810300020000000904010000020d00000904010102fa0d00000905820200020000000905030200026b73649f98f27a04040b389e084dc40978cbe6017c59eaa01167bfa8ecc3341e13cd0281caf6057f5b3424f09a3a29d3593edbe14e4acf5d1fa7093f38ce"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) r2 = signalfd(r1, &(0x7f0000000600)={[0x3f]}, 0x8) ioctl$TCSBRKP(r2, 0x5425, 0x10000) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000800)={0x40, 0x7, 0x75, {0x75, 0x5, "810af14350279dd3aa542d9dddd6841972538626e7fd7bf77847e49b7375d6f0718cfae0e41df36752fde45b0ff11e0a8278ce0b6ac11558a2948f8ad95742cafbfad7ef52a1d8eded8a0025718f7405ffa659a1baefcaadd6aba80100c11583b5c5d8f1c672cb2c9ee7e99f3983d0534460b3"}}, &(0x7f00000002c0)={0x0, 0x3, 0xea, @string={0xea, 0x3, "7ede27bd73c0c22adea8d7e4c6e0cac467591dc5898e0700000000000044b3739f88d42f0c61fdc29f399dd7f95f310b9e08d3d3d5812597b29fd4fcf4938d5d480b36a3050000002b672cdf474152a58da833c2e28281dd3b96f03a33e10800043eaf398b6cc54a19f4fb06589e4be55a70fee3014915801349ad27dad8dd2ed7d89947023e639ddde744b7e33fbf2ce078edfab97b79d3d9968f7d4625b6187501e47eff2d48cad784958263f23b4bf8eb8cc089817669aebd8a806d9d4f04bada53fedd741a5cdb35bf42f41ca8024034fe85fffc4e80b6288e662f0ea4aa777c09c0e75dd2c9"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000700)={0x20, 0xc, 0xc6, "f341eed63db6f68c96a0a786af35385a0140b79f44b41e176723360cf02a3affb0a225a79037f0585c65c3c7d1bf61af61ebbde702cbf3d75cb9a18709ca8079e2108aec3ad13ef785de7ca0157c14941d4cb80e8cd65e8cc0c34b13999b55e9a9270b54bd9f7e4fd2f677542149eac5b3606d4b1a1d0d12ca16ca107b69921765b18d8ef465a9335b5edbd5a1e3b5e8595470ca66eb2e4cffec3288e7d3d980b9dc41dfec8d1ff7e8bf8577eabe3f3b77aa71c1bfb1ecd03937dbfefa0b617800ae69f56213"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x24}, &(0x7f0000000440)={0x20, 0x0, 0xbd, {0xbb, "66bf3d3a2badb0694ef510ba572ad9e0744a84751d6ad58ef98b4c77a0a54c484052c9615c5b8ff04e0927a83e6e8878aa1cff2c88b4ba2c8687387c02f22b957c7b8327ec953059a5ca4b1263fc0a2b7a01386c27da29b409c35674d53f6b98a346f9d61dc9ea4558a8446e751dfc2f442a718d395a29833e273c82e2b878ef15763b648e36cd02bfd5306ffbc434f69c0a54761c72ad8dfc01703f7075ba2f85fda9339cc4860ff5d64dade3f6bdef162e644c35b74b574ef23d"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x7}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_WIE_OFF(r4, 0x7010) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:55 executing program 3 (fault-call:5 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:56:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf0ffffff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xe4bc3755, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2303.485995][T10063] usb 5-1: USB disconnect, device number 4 [ 2303.557296][T12715] FAULT_INJECTION: forcing a failure. [ 2303.557296][T12715] name failslab, interval 1, probability 0, space 0, times 0 [ 2303.589996][T12715] CPU: 1 PID: 12715 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2303.598553][T12715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.608630][T12715] Call Trace: [ 2303.611925][T12715] dump_stack+0x107/0x163 [ 2303.616291][T12715] should_fail.cold+0x5/0x1f [ 2303.620908][T12715] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 2303.628225][T12715] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 2303.635541][T12715] should_failslab+0x5/0x10 [ 2303.640073][T12715] __kmalloc+0x72/0x2e0 [ 2303.644247][T12715] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x280 [ 2303.651645][T12715] ? genl_rcv_msg+0x3e7/0x590 [ 2303.656331][T12715] genl_family_rcv_msg_doit+0xda/0x320 [ 2303.661810][T12715] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2303.669187][T12715] ? __lock_acquire+0x16c2/0x54b0 [ 2303.674231][T12715] ? memset+0x20/0x40 [ 2303.678227][T12715] ? genl_op_from_small+0x23/0x3c0 [ 2303.683332][T12715] ? genl_get_cmd+0x3cf/0x480 [ 2303.688016][T12715] genl_rcv_msg+0x32f/0x590 [ 2303.692543][T12715] ? genl_get_cmd+0x480/0x480 [ 2303.697220][T12715] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2303.702526][T12715] ? lock_release+0x710/0x710 [ 2303.707200][T12715] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2303.712551][T12715] netlink_rcv_skb+0x153/0x420 [ 2303.717317][T12715] ? genl_get_cmd+0x480/0x480 [ 2303.722017][T12715] ? netlink_ack+0xab0/0xab0 [ 2303.726665][T12715] genl_rcv+0x24/0x40 [ 2303.730664][T12715] netlink_unicast+0x533/0x7d0 [ 2303.735437][T12715] ? netlink_attachskb+0x870/0x870 [ 2303.740563][T12715] ? _copy_from_iter_full+0x275/0x850 [ 2303.745937][T12715] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2303.752244][T12715] ? __phys_addr_symbol+0x2c/0x70 [ 2303.757268][T12715] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2303.763004][T12715] ? __check_object_size+0x171/0x3f0 [ 2303.768297][T12715] netlink_sendmsg+0x907/0xe40 [ 2303.773079][T12715] ? netlink_unicast+0x7d0/0x7d0 [ 2303.778025][T12715] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2303.784284][T12715] ? netlink_unicast+0x7d0/0x7d0 [ 2303.789226][T12715] sock_sendmsg+0xcf/0x120 [ 2303.793656][T12715] ____sys_sendmsg+0x6e8/0x810 [ 2303.798437][T12715] ? kernel_sendmsg+0x50/0x50 [ 2303.803144][T12715] ? do_recvmmsg+0x6c0/0x6c0 [ 2303.807782][T12715] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2303.813777][T12715] ? _parse_integer+0x132/0x180 [ 2303.818634][T12715] ___sys_sendmsg+0xf3/0x170 [ 2303.823260][T12715] ? sendmsg_copy_msghdr+0x160/0x160 [ 2303.828547][T12715] ? __fget_files+0x2c1/0x430 [ 2303.833230][T12715] ? lock_downgrade+0x6d0/0x6d0 [ 2303.838096][T12715] ? __fget_files+0x2e3/0x430 [ 2303.842790][T12715] ? __fget_light+0xea/0x280 [ 2303.847383][T12715] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2303.853732][T12715] __sys_sendmsg+0xe5/0x1b0 [ 2303.858236][T12715] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2303.863289][T12715] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2303.869577][T12715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2303.875481][T12715] do_syscall_64+0x2d/0x70 [ 2303.879914][T12715] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2303.885813][T12715] RIP: 0033:0x45e149 [ 2303.889744][T12715] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2303.909455][T12715] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2303.917890][T12715] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2303.925880][T12715] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2303.934008][T12715] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2303.941971][T12715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2303.944601][T10063] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2303.949930][T12715] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c 17:56:55 executing program 3 (fault-call:5 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2304.113622][T12726] FAULT_INJECTION: forcing a failure. [ 2304.113622][T12726] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.137144][T12726] CPU: 0 PID: 12726 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2304.145694][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2304.155795][T12726] Call Trace: [ 2304.160436][T12726] dump_stack+0x107/0x163 [ 2304.165308][T12726] should_fail.cold+0x5/0x1f [ 2304.171107][T12726] ? __alloc_skb+0x71/0x5c0 [ 2304.176010][T12726] ? __alloc_skb+0x71/0x5c0 [ 2304.180897][T12726] should_failslab+0x5/0x10 [ 2304.185817][T12726] kmem_cache_alloc_node+0x55/0x370 [ 2304.191073][T12726] __alloc_skb+0x71/0x5c0 [ 2304.195796][T12726] l2tp_nl_cmd_noop+0x2c/0x280 [ 2304.200760][T12726] genl_family_rcv_msg_doit+0x228/0x320 [ 2304.206338][T12726] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2304.215397][T12726] ? genl_op_from_small+0x23/0x3c0 [ 2304.220943][T12726] ? genl_get_cmd+0x3cf/0x480 [ 2304.225903][T12726] genl_rcv_msg+0x32f/0x590 [ 2304.230811][T12726] ? genl_get_cmd+0x480/0x480 [ 2304.235734][T12726] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2304.241713][T12726] ? lock_release+0x710/0x710 [ 2304.246780][T12726] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2304.252099][T12726] netlink_rcv_skb+0x153/0x420 [ 2304.256904][T12726] ? genl_get_cmd+0x480/0x480 [ 2304.261860][T12726] ? netlink_ack+0xab0/0xab0 [ 2304.266790][T12726] genl_rcv+0x24/0x40 [ 2304.271576][T12726] netlink_unicast+0x533/0x7d0 [ 2304.276577][T12726] ? netlink_attachskb+0x870/0x870 [ 2304.281711][T12726] ? _copy_from_iter_full+0x275/0x850 [ 2304.287113][T12726] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2304.294052][T12726] ? __phys_addr_symbol+0x2c/0x70 [ 2304.299100][T12726] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2304.306356][T12726] ? __check_object_size+0x171/0x3f0 [ 2304.312398][T12726] netlink_sendmsg+0x907/0xe40 [ 2304.317412][T12726] ? netlink_unicast+0x7d0/0x7d0 [ 2304.322542][T12726] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2304.329925][T12726] ? netlink_unicast+0x7d0/0x7d0 [ 2304.335221][T12726] sock_sendmsg+0xcf/0x120 [ 2304.340146][T12726] ____sys_sendmsg+0x6e8/0x810 [ 2304.345115][T12726] ? kernel_sendmsg+0x50/0x50 [ 2304.350054][T12726] ? do_recvmmsg+0x6c0/0x6c0 [ 2304.354969][T12726] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2304.362008][T12726] ? _parse_integer+0x132/0x180 [ 2304.366997][T12726] ___sys_sendmsg+0xf3/0x170 [ 2304.371910][T12726] ? sendmsg_copy_msghdr+0x160/0x160 [ 2304.377255][T12726] ? __fget_files+0x2c1/0x430 [ 2304.381994][T12726] ? lock_downgrade+0x6d0/0x6d0 [ 2304.387889][T12726] ? __fget_files+0x2e3/0x430 [ 2304.392808][T12726] ? __fget_light+0xea/0x280 [ 2304.397722][T12726] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2304.405043][T12726] __sys_sendmsg+0xe5/0x1b0 [ 2304.410025][T12726] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2304.415301][T12726] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2304.422553][T12726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.429961][T12726] do_syscall_64+0x2d/0x70 [ 2304.434838][T12726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2304.441913][T12726] RIP: 0033:0x45e149 [ 2304.446662][T12726] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2304.467494][T12726] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2304.477152][T12726] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2304.486719][T12726] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2304.496320][T12726] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.505990][T12726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2304.515572][T12726] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2304.554922][ T5484] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 17:56:56 executing program 3 (fault-call:5 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2304.561565][ T5484] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2304.583018][ T5484] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2304.616548][T10063] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 2304.664725][T12730] FAULT_INJECTION: forcing a failure. [ 2304.664725][T12730] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.684632][T12730] CPU: 0 PID: 12730 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2304.693085][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2304.704460][T12730] Call Trace: [ 2304.708914][T12730] dump_stack+0x107/0x163 [ 2304.713598][T12730] should_fail.cold+0x5/0x1f [ 2304.718347][T12730] ? l2tp_nl_cmd_noop+0x2c/0x280 [ 2304.723330][T12730] should_failslab+0x5/0x10 [ 2304.727892][T12730] __kmalloc_node_track_caller+0x73/0x310 [ 2304.733893][T12730] ? kmem_cache_alloc_node+0x33c/0x370 [ 2304.740760][T12730] __alloc_skb+0xae/0x5c0 [ 2304.745675][T12730] l2tp_nl_cmd_noop+0x2c/0x280 [ 2304.750469][T12730] genl_family_rcv_msg_doit+0x228/0x320 [ 2304.757121][T12730] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2304.764534][T12730] ? genl_op_from_small+0x23/0x3c0 [ 2304.769678][T12730] ? genl_get_cmd+0x3cf/0x480 [ 2304.774402][T12730] genl_rcv_msg+0x32f/0x590 [ 2304.780143][T12730] ? genl_get_cmd+0x480/0x480 [ 2304.784850][T12730] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2304.791266][T12730] ? lock_release+0x710/0x710 [ 2304.796256][T12730] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2304.803125][T12730] netlink_rcv_skb+0x153/0x420 [ 2304.808763][T12730] ? genl_get_cmd+0x480/0x480 [ 2304.813501][T12730] ? netlink_ack+0xab0/0xab0 [ 2304.818460][T12730] genl_rcv+0x24/0x40 [ 2304.823029][T12730] netlink_unicast+0x533/0x7d0 [ 2304.827824][T12730] ? netlink_attachskb+0x870/0x870 [ 2304.834464][T12730] ? _copy_from_iter_full+0x275/0x850 [ 2304.841391][T12730] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2304.848237][T12730] ? __phys_addr_symbol+0x2c/0x70 [ 2304.853286][T12730] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2304.859976][T12730] ? __check_object_size+0x171/0x3f0 [ 2304.866605][T12730] netlink_sendmsg+0x907/0xe40 [ 2304.871452][T12730] ? netlink_unicast+0x7d0/0x7d0 [ 2304.876421][T12730] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2304.884208][T12730] ? netlink_unicast+0x7d0/0x7d0 [ 2304.890742][T12730] sock_sendmsg+0xcf/0x120 [ 2304.895456][T12730] ____sys_sendmsg+0x6e8/0x810 [ 2304.900244][T12730] ? kernel_sendmsg+0x50/0x50 [ 2304.905017][T12730] ? do_recvmmsg+0x6c0/0x6c0 [ 2304.909753][T12730] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2304.916740][T12730] ? _parse_integer+0x132/0x180 [ 2304.921628][T12730] ___sys_sendmsg+0xf3/0x170 [ 2304.927918][T12730] ? sendmsg_copy_msghdr+0x160/0x160 [ 2304.934784][T12730] ? __fget_files+0x2c1/0x430 [ 2304.939677][T12730] ? lock_downgrade+0x6d0/0x6d0 [ 2304.944569][T12730] ? __fget_files+0x2e3/0x430 [ 2304.949273][T12730] ? __fget_light+0xea/0x280 [ 2304.953962][T12730] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2304.960958][T12730] __sys_sendmsg+0xe5/0x1b0 [ 2304.965670][T12730] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2304.970712][T12730] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2304.978562][T12730] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.985269][T12730] do_syscall_64+0x2d/0x70 [ 2304.989966][T12730] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2304.996981][T12730] RIP: 0033:0x45e149 [ 2305.001812][T12730] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2305.022544][T12730] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2305.031829][T12730] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2305.041156][T12730] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2305.049520][T12730] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.058703][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2305.067862][T12730] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2305.108082][ T5484] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2305.134535][T10063] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2305.146896][T10063] usb 5-1: can't read configurations, error -61 [ 2305.186258][ T5484] usb 3-1: USB disconnect, device number 29 [ 2305.225158][ T5484] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2305.330086][T10063] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2305.534469][T25704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2305.541129][T25704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2305.549105][T25704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2305.634459][T10063] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 2305.760882][T10063] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2305.779372][T25704] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2305.796170][T10063] usb 5-1: can't read configurations, error -61 [ 2305.814890][T10063] usb usb5-port1: attempt power cycle [ 2305.825402][T25704] usb 2-1: USB disconnect, device number 104 [ 2305.845123][T25704] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2305.857967][ T5484] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2306.224608][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2306.394433][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2306.403711][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.413809][ T5484] usb 3-1: Product: syz [ 2306.420298][ T5484] usb 3-1: Manufacturer: syz [ 2306.425301][ T5484] usb 3-1: SerialNumber: syz [ 2306.514526][T22681] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2306.534655][T10063] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2306.644511][T10063] usb 5-1: device descriptor read/8, error -71 [ 2306.650792][ T5484] cdc_ncm 3-1:1.0: bind() failure [ 2306.667857][ T5484] cdc_ncm 3-1:1.1: bind() failure [ 2306.686844][ T5484] usb 3-1: USB disconnect, device number 30 [ 2306.894422][T22681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2307.084302][T22681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2307.093652][T22681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.112675][T22681] usb 2-1: Product: syz [ 2307.122199][T22681] usb 2-1: Manufacturer: syz 17:56:58 executing program 3 (fault-call:5 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:56:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:56:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfc000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:56:58 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026400020100001e8104000081020d0000052406000105010000000000000000000000000000000006241a0008241c000000ad7f0905aa11c6892910c07204010000020d00000904010102020d00000905820200020000000905030200020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000b00)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000b80)={0x5309}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000bc0)={0x0, @motion_det}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)={0x20, 0x21, 0xeb, {0xeb, 0x9, "7e4325ffa971645b9a46055453fdb471ca65685a35c72553bf7837b601a20b9177b250e095232a19c2cad191bf65512e94570c51652efe3d77a572ce134217ea221c5db09f8f81ddf0b0676e3158009ead42a6fccc1451269a47e3458fee66ae4d1681a402e687b769bbde107dd2a71586640bddcd880049deea6383373ebc12f705fafa5d04ae3fb6792a24f1699cc39d9e3a5d0340541c5dd6800f14ecca78659e63f8f45adcc4c8d2f1abcf526b5c478335d08cfeea14c154d79171d0f4c82349b34d5899c19a9a666f2b9255488bf82d14143e2f1734e4f8c21cb1727fe02832d23a8c77c5f8e6"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c79}}, &(0x7f0000000440)={0x0, 0xf, 0x1a1, {0x5, 0xf, 0x1a1, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0x7, 0x2da4}, @generic={0xc1, 0x10, 0x2, "986e96408cdf79e3160eb9c41b41e1d39527e7149f97d6764246830b2af2c6f2130a28deab2ee2dc5c2c72ad5fd05220406d803ae341d026c183a1311f5415d1709d0cb05a288e662a748ed75bc65f662e8ab71c3c916f36fc15e3ff0610875869eb95aa6dd7a0e8c817aa25778ee8c9e33acb34dd5f6ea2625fde13802134c7c3aa7a23360cc1fcd33b89833f1999202f8fc8e6fb6f2769d6d8855634a6f4261024ecf0fd281ad7c4e7a2a0bb00b328d397697128447904b46ee246bf1b"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x3, 0x7}, @generic={0x70, 0x10, 0x2, "1942328b0fd3333e957eef0c9f4f66bf25f80f8ebf50f69a8e334a017801e72ba57ec68e1caa10932af31f6acdb2f3346afb12da971ed96d8553e931998406d33e984b6f39dddcca9543377cf5582f4c48d24e326ba719925dcf7e3fd682a300d591ab54a50ba1b780e9f25fb4"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x5, 0xf, 0x1f, [0x3f3f, 0x1fe000f, 0xffc03f, 0x30]}, @generic={0x41, 0x10, 0x1, "95371f931b8d947625b1e9518dc842211ad1452f841465410d5afe9ae6d8d46c18219e1620c7f24636f0166ab083c04da3079f9710097fe43d5b706f0176"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x7, 0x2, "f9df4959", "954ff008"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0xf8, 0x4, 0x6, 0x74, 0x800}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x20, 0x31, 0xe9, "b678b78e0082411090543bcaf7e453143cd6f9f9994510f076bfbd276d8f41573626178e801e60ecf905a60cff3c0f0915ac4490ba1558ea67b5e40fee03d3e6a35177e4fde1b8d0d0a3841d273898d665a666387d13ab15b3e47bb0a00665e126e4e5d7ee200394bb6ddcd0541151db3ed9f6dcb2428da3fb7c21990ee1d60bf49d4d1ed2a9d00895e7e56771c84831a12aae1a1abed318ad43c7b291fe4bfb01eb8250ecfbd0a6a59379ca8f97416fd7cf62428a2cb6f0fe5843aa8af9582f199e6ccda2eca0c7fddb8acca49d272a51f68be7e6cf46818248cc7df190c4fe825da5b90abdc50280"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x800, 0x80, [0xf]}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0xb, 0x2, '\rG'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="bc09e0af8ccd"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random='icU4mk'}, &(0x7f0000000900)={0x40, 0x19, 0x2, 'IQ'}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x27}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2307.132147][T22681] usb 2-1: SerialNumber: syz 17:56:58 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902ec8d0201000076b161000101020d0000052406000105240000000d240f0100000000000000ad7f0905810300020000000944010000020d00000904010102020d000009058202000200000009448c1652b8c148053f4dba0503020002"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a0008000109021200014c0000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x1, @dev={[], 0x19}, 'xfrm0\x00'}}, 0x1e) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000140)={0x400, 0x9, 0x3, 0x401, 0x9, 0x3}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000000)=0x100) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:56:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000140)={0x1, {{0x2, 0x0, @remote}}}, 0xa5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000440)=ANY=[@ANYBLOB="1b9a8e931eddf85a32e9a0080d4452c160cdc180ca2f2adf819b2516e333cfad347ef9f11160b85b7f1295a41113313d278bf8e82646f502a1c14f0c222cad36170fd88110f8a6ee531de3b6050099dcce68968d8237138462d3008431f0d45043bb22cc0c5190ae6a5ccab336dec17cef255849e30cd95417e2c01b166bba9affdd60b25d8ff6c8f5ec15ceeaf1e49d36ab927fe59ec971216a62caaff96510fb4df7ccd9541f", @ANYRESOCT, @ANYRES16=r1, @ANYRESDEC, @ANYRES16=r2, @ANYRES64=r3, @ANYRES16=r4], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2307.164347][T22681] usb 2-1: can't set config #1, error -71 [ 2307.205461][T22681] usb 2-1: USB disconnect, device number 105 [ 2307.219070][T12812] FAULT_INJECTION: forcing a failure. [ 2307.219070][T12812] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.267884][T12812] CPU: 0 PID: 12812 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2307.277858][T12812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.287932][T12812] Call Trace: [ 2307.292402][T12812] dump_stack+0x107/0x163 [ 2307.296776][T12812] should_fail.cold+0x5/0x1f [ 2307.301397][T12812] ? netlink_trim+0x1ea/0x240 [ 2307.306096][T12812] should_failslab+0x5/0x10 [ 2307.310626][T12812] __kmalloc_node_track_caller+0x73/0x310 [ 2307.316386][T12812] pskb_expand_head+0x15a/0x1040 [ 2307.321355][T12812] ? l2tp_nl_cmd_noop+0x2c/0x280 [ 2307.326560][T12812] ? mark_held_locks+0x9f/0xe0 [ 2307.331355][T12812] netlink_trim+0x1ea/0x240 [ 2307.336294][T12812] netlink_unicast+0xb9/0x7d0 [ 2307.341075][T12812] ? skb_put+0x134/0x180 [ 2307.345756][T12812] ? netlink_attachskb+0x870/0x870 [ 2307.352410][T12812] ? genlmsg_put+0x25b/0x2d0 [ 2307.357206][T12812] l2tp_nl_cmd_noop+0x1d8/0x280 [ 2307.362089][T12812] genl_family_rcv_msg_doit+0x228/0x320 [ 2307.368148][T12812] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2307.375567][T12812] ? genl_op_from_small+0x23/0x3c0 [ 2307.382139][T12812] ? genl_get_cmd+0x3cf/0x480 [ 2307.386914][T12812] genl_rcv_msg+0x32f/0x590 [ 2307.391684][T12812] ? genl_get_cmd+0x480/0x480 [ 2307.396679][T12812] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2307.402109][T12812] ? lock_release+0x710/0x710 [ 2307.408524][T12812] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2307.415226][T12812] netlink_rcv_skb+0x153/0x420 [ 2307.420244][T12812] ? genl_get_cmd+0x480/0x480 [ 2307.425075][T12812] ? netlink_ack+0xab0/0xab0 [ 2307.429745][T12812] genl_rcv+0x24/0x40 [ 2307.434365][T12812] netlink_unicast+0x533/0x7d0 [ 2307.440092][T12812] ? netlink_attachskb+0x870/0x870 [ 2307.445230][T12812] ? _copy_from_iter_full+0x275/0x850 [ 2307.451966][T12812] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2307.458877][T12812] ? __phys_addr_symbol+0x2c/0x70 [ 2307.463925][T12812] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2307.470792][T12812] ? __check_object_size+0x171/0x3f0 [ 2307.477436][T12812] netlink_sendmsg+0x907/0xe40 [ 2307.482241][T12812] ? netlink_unicast+0x7d0/0x7d0 [ 2307.487209][T12812] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2307.494223][T12812] ? netlink_unicast+0x7d0/0x7d0 [ 2307.499196][T12812] sock_sendmsg+0xcf/0x120 [ 2307.503910][T12812] ____sys_sendmsg+0x6e8/0x810 [ 2307.508720][T12812] ? kernel_sendmsg+0x50/0x50 [ 2307.514395][T12812] ? do_recvmmsg+0x6c0/0x6c0 [ 2307.519195][T12812] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2307.526026][T12812] ? _parse_integer+0x132/0x180 [ 2307.530905][T12812] ___sys_sendmsg+0xf3/0x170 [ 2307.535681][T12812] ? sendmsg_copy_msghdr+0x160/0x160 [ 2307.540995][T12812] ? __fget_files+0x2c1/0x430 [ 2307.545697][T12812] ? lock_downgrade+0x6d0/0x6d0 [ 2307.550714][T12812] ? __fget_files+0x2e3/0x430 [ 2307.555423][T12812] ? __fget_light+0xea/0x280 [ 2307.560039][T12812] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2307.566309][T12812] __sys_sendmsg+0xe5/0x1b0 [ 2307.570832][T12812] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2307.575885][T12812] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2307.582172][T12812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2307.588098][T12812] do_syscall_64+0x2d/0x70 [ 2307.592535][T12812] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2307.598456][T12812] RIP: 0033:0x45e149 [ 2307.602464][T12812] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2307.622177][T12812] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2307.630609][T12812] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2307.638676][T12812] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2307.646643][T12812] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2307.654605][T12812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2307.662574][T12812] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c 17:56:59 executing program 3 (fault-call:5 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2307.777003][T12832] FAULT_INJECTION: forcing a failure. [ 2307.777003][T12832] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.793488][T12832] CPU: 1 PID: 12832 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2307.802616][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.812688][T12832] Call Trace: [ 2307.815979][T12832] dump_stack+0x107/0x163 [ 2307.820933][T12832] should_fail.cold+0x5/0x1f [ 2307.827015][T12832] ? skb_clone+0x14f/0x3c0 [ 2307.831454][T12832] should_failslab+0x5/0x10 [ 2307.834160][ T5484] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2307.835969][T12832] kmem_cache_alloc+0x5b/0x350 [ 2307.848399][T12832] skb_clone+0x14f/0x3c0 [ 2307.852818][T12832] netlink_deliver_tap+0xa2d/0xc00 [ 2307.859531][T12832] netlink_unicast+0x697/0x7d0 [ 2307.864326][T12832] ? netlink_attachskb+0x870/0x870 [ 2307.870495][T12832] ? genlmsg_put+0x25b/0x2d0 [ 2307.875113][T12832] l2tp_nl_cmd_noop+0x1d8/0x280 [ 2307.879984][T12832] genl_family_rcv_msg_doit+0x228/0x320 [ 2307.885664][T12832] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2307.894084][T12832] ? genl_op_from_small+0x23/0x3c0 [ 2307.899224][T12832] ? genl_get_cmd+0x3cf/0x480 [ 2307.905391][T12832] genl_rcv_msg+0x32f/0x590 [ 2307.910220][T12832] ? genl_get_cmd+0x480/0x480 [ 2307.916432][T12832] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2307.921747][T12832] ? lock_release+0x710/0x710 [ 2307.926443][T12832] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2307.932967][T12832] netlink_rcv_skb+0x153/0x420 [ 2307.939444][T12832] ? genl_get_cmd+0x480/0x480 [ 2307.945385][T12832] ? netlink_ack+0xab0/0xab0 [ 2307.951450][T12832] genl_rcv+0x24/0x40 [ 2307.955766][T12832] netlink_unicast+0x533/0x7d0 [ 2307.960556][T12832] ? netlink_attachskb+0x870/0x870 [ 2307.966938][T12832] ? _copy_from_iter_full+0x275/0x850 [ 2307.973157][T12832] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2307.979422][T12832] ? __phys_addr_symbol+0x2c/0x70 [ 2307.983287][T10063] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2307.984459][T12832] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2307.984491][T12832] ? __check_object_size+0x171/0x3f0 [ 2307.984529][T12832] netlink_sendmsg+0x907/0xe40 [ 2308.007740][T12832] ? netlink_unicast+0x7d0/0x7d0 [ 2308.013787][T12832] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2308.020059][T12832] ? netlink_unicast+0x7d0/0x7d0 [ 2308.025758][T12832] sock_sendmsg+0xcf/0x120 [ 2308.030359][T12832] ____sys_sendmsg+0x6e8/0x810 [ 2308.035144][T12832] ? kernel_sendmsg+0x50/0x50 [ 2308.039834][T12832] ? do_recvmmsg+0x6c0/0x6c0 [ 2308.045117][T12832] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2308.051668][T12832] ? _parse_integer+0x132/0x180 [ 2308.056564][T12832] ___sys_sendmsg+0xf3/0x170 [ 2308.061182][T12832] ? sendmsg_copy_msghdr+0x160/0x160 [ 2308.067367][T12832] ? __fget_files+0x2c1/0x430 [ 2308.073373][T12832] ? lock_downgrade+0x6d0/0x6d0 [ 2308.078266][T12832] ? __fget_files+0x2e3/0x430 [ 2308.082966][T12832] ? __fget_light+0xea/0x280 [ 2308.088263][T12832] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2308.094714][T12832] __sys_sendmsg+0xe5/0x1b0 [ 2308.099238][T12832] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2308.105052][T12832] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2308.112544][T12832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2308.118478][T12832] do_syscall_64+0x2d/0x70 [ 2308.122914][T12832] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2308.129852][T12832] RIP: 0033:0x45e149 [ 2308.135747][T12832] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2308.155500][T12832] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2308.165479][T12832] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2308.174194][T12832] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2308.182175][T12832] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.191046][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 2308.199030][T12832] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2308.203515][T10063] usb 5-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 2308.217664][ T5484] usb 3-1: config index 0 descriptor too short (expected 36332, got 100) 17:57:00 executing program 3 (fault-call:5 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfdffffff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2308.235967][ T5484] usb 3-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 2308.254928][T10063] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2308.276090][ T5484] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 17:57:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfeff0000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2308.329202][T12837] FAULT_INJECTION: forcing a failure. [ 2308.329202][T12837] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.357325][T12837] CPU: 0 PID: 12837 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2308.365812][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2308.377150][T12837] Call Trace: [ 2308.381646][T12837] dump_stack+0x107/0x163 [ 2308.386377][T12837] should_fail.cold+0x5/0x1f [ 2308.391112][T12837] ? __alloc_skb+0x71/0x5c0 [ 2308.395844][T12837] ? __alloc_skb+0x71/0x5c0 [ 2308.400717][T12837] should_failslab+0x5/0x10 [ 2308.405436][T12837] kmem_cache_alloc_node+0x55/0x370 [ 2308.411959][T12837] ? genl_get_cmd+0x3cf/0x480 [ 2308.416752][T12837] __alloc_skb+0x71/0x5c0 [ 2308.421810][T12837] netlink_ack+0x1ed/0xab0 [ 2308.426511][T12837] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2308.433385][T12837] ? netlink_sendmsg+0xe40/0xe40 [ 2308.438354][T12837] ? lock_release+0x710/0x710 [ 2308.444651][T12837] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2308.449964][T12837] netlink_rcv_skb+0x33d/0x420 [ 2308.456383][T12837] ? genl_get_cmd+0x480/0x480 [ 2308.461160][T12837] ? netlink_ack+0xab0/0xab0 [ 2308.466354][T12837] genl_rcv+0x24/0x40 [ 2308.471175][T12837] netlink_unicast+0x533/0x7d0 [ 2308.476235][T12837] ? netlink_attachskb+0x870/0x870 [ 2308.481375][T12837] ? _copy_from_iter_full+0x275/0x850 [ 2308.488265][T12837] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2308.495346][T12837] ? __phys_addr_symbol+0x2c/0x70 [ 2308.501916][T12837] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2308.508890][T12837] ? __check_object_size+0x171/0x3f0 [ 2308.515543][T12837] netlink_sendmsg+0x907/0xe40 [ 2308.520464][T12837] ? netlink_unicast+0x7d0/0x7d0 [ 2308.525432][T12837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2308.532368][T12837] ? netlink_unicast+0x7d0/0x7d0 [ 2308.537336][T12837] sock_sendmsg+0xcf/0x120 [ 2308.543684][T12837] ____sys_sendmsg+0x6e8/0x810 [ 2308.548479][T12837] ? kernel_sendmsg+0x50/0x50 [ 2308.553225][T12837] ? do_recvmmsg+0x6c0/0x6c0 [ 2308.557987][T12837] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2308.564951][T12837] ? _parse_integer+0x132/0x180 [ 2308.569831][T12837] ___sys_sendmsg+0xf3/0x170 [ 2308.574511][T12837] ? sendmsg_copy_msghdr+0x160/0x160 [ 2308.581124][T12837] ? __fget_files+0x2c1/0x430 [ 2308.585862][T12837] ? lock_downgrade+0x6d0/0x6d0 [ 2308.591044][T12837] ? __fget_files+0x2e3/0x430 [ 2308.595790][T12837] ? __fget_light+0xea/0x280 [ 2308.600514][T12837] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2308.607611][T12837] __sys_sendmsg+0xe5/0x1b0 [ 2308.612336][T12837] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2308.618851][T12837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2308.626081][T12837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2308.632838][T12837] do_syscall_64+0x2d/0x70 [ 2308.637528][T12837] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2308.644530][T12837] RIP: 0033:0x45e149 [ 2308.649100][T12837] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2308.670011][T12837] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2308.679295][T12837] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2308.688474][T12837] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2308.697624][T12837] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.706760][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2308.715959][T12837] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2308.736515][T22681] usb 2-1: new high-speed USB device number 106 using dummy_hcd 17:57:00 executing program 3 (fault-call:5 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2308.804987][T10063] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2308.824163][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2308.833808][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.842122][T10063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.864039][T10063] usb 5-1: Product: syz [ 2308.868241][T10063] usb 5-1: Manufacturer: syz [ 2308.872863][T10063] usb 5-1: SerialNumber: syz [ 2308.884041][ T5484] usb 3-1: Product: syz [ 2308.890761][ T5484] usb 3-1: Manufacturer: syz [ 2308.903660][ T5484] usb 3-1: SerialNumber: syz [ 2308.954146][T22681] usb 2-1: device descriptor read/64, error 18 17:57:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfe800000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2308.995570][T12851] FAULT_INJECTION: forcing a failure. [ 2308.995570][T12851] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.027186][T12851] CPU: 0 PID: 12851 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2309.035659][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2309.045742][T12851] Call Trace: [ 2309.049033][T12851] dump_stack+0x107/0x163 [ 2309.053401][T12851] should_fail.cold+0x5/0x1f [ 2309.058024][T12851] ? netlink_ack+0x1ed/0xab0 [ 2309.062641][T12851] should_failslab+0x5/0x10 [ 2309.067171][T12851] __kmalloc_node_track_caller+0x73/0x310 [ 2309.072922][T12851] ? kmem_cache_alloc_node+0x33c/0x370 [ 2309.078409][T12851] __alloc_skb+0xae/0x5c0 [ 2309.082767][T12851] netlink_ack+0x1ed/0xab0 [ 2309.087215][T12851] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2309.092527][T12851] ? netlink_sendmsg+0xe40/0xe40 [ 2309.097489][T12851] ? lock_release+0x710/0x710 [ 2309.102191][T12851] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2309.107530][T12851] netlink_rcv_skb+0x33d/0x420 [ 2309.112347][T12851] ? genl_get_cmd+0x480/0x480 [ 2309.117056][T12851] ? netlink_ack+0xab0/0xab0 [ 2309.121697][T12851] genl_rcv+0x24/0x40 [ 2309.125704][T12851] netlink_unicast+0x533/0x7d0 [ 2309.130501][T12851] ? netlink_attachskb+0x870/0x870 [ 2309.135666][T12851] ? _copy_from_iter_full+0x275/0x850 [ 2309.141076][T12851] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2309.147341][T12851] ? __phys_addr_symbol+0x2c/0x70 [ 2309.152388][T12851] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2309.158156][T12851] ? __check_object_size+0x171/0x3f0 [ 2309.163474][T12851] netlink_sendmsg+0x907/0xe40 [ 2309.168263][T12851] ? netlink_unicast+0x7d0/0x7d0 [ 2309.173235][T12851] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2309.179517][T12851] ? netlink_unicast+0x7d0/0x7d0 [ 2309.184483][T12851] sock_sendmsg+0xcf/0x120 [ 2309.188934][T12851] ____sys_sendmsg+0x6e8/0x810 17:57:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfec00000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xff000000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2309.193732][T12851] ? kernel_sendmsg+0x50/0x50 [ 2309.198425][T12851] ? do_recvmmsg+0x6c0/0x6c0 [ 2309.203045][T12851] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2309.209064][T12851] ? _parse_integer+0x132/0x180 [ 2309.213956][T12851] ___sys_sendmsg+0xf3/0x170 [ 2309.218582][T12851] ? sendmsg_copy_msghdr+0x160/0x160 [ 2309.223904][T12851] ? __fget_files+0x2c1/0x430 [ 2309.228605][T12851] ? lock_downgrade+0x6d0/0x6d0 [ 2309.233517][T12851] ? __fget_files+0x2e3/0x430 [ 2309.238225][T12851] ? __fget_light+0xea/0x280 [ 2309.242927][T12851] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2309.249200][T12851] __sys_sendmsg+0xe5/0x1b0 [ 2309.253825][T12851] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2309.258873][T12851] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2309.265164][T12851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.271097][T12851] do_syscall_64+0x2d/0x70 [ 2309.275544][T12851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2309.281469][T12851] RIP: 0033:0x45e149 [ 2309.285378][T12851] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2309.298052][T12814] udc-core: couldn't find an available UDC or it's busy [ 2309.304999][T12851] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2309.312225][T12814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2309.320429][T12851] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2309.336507][T12851] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2309.344849][T12851] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.354284][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 2309.363289][T12851] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c [ 2309.544101][T22681] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2309.764061][T22681] usb 2-1: device descriptor read/64, error 18 [ 2309.884339][T22681] usb usb2-port1: attempt power cycle [ 2310.386761][ T5484] usb 3-1: USB disconnect, device number 31 17:57:02 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x11) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffff000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:02 executing program 3 (fault-call:5 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xff0f0000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f0000000280)={0xf8, {{0x2, 0x0, @private=0xa010102}}}, 0x88) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x380, 0x15, 0x6b882943a21d24c, 0x70bd25, 0x25dfdbff, {0x28, 0xdb}, [@INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "19c5f925a75dd97a2c597216f08363d4cfc0f6187c1522c63b86bf8d5d22c88cc1d7c3248dc740b6108566528ac671ffb3e228cc4c4032ecedbeff539c7e739a9297217af41076a2c99bf5e7cc57349950424cff54b7a4f36c77196ec95c67bd7cfd82e77ec37fe5324480f0a7625c7575686caa7b36cc1332fcd2f7f656c17a0d13ef5d280837e1a63c80c40291328239bbefd1a5df9790aa8d6415aadd22f8e6342b3436fb05198668a227322959d2"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "bee557fe847bc1c43d48ea2101667d1384e5f3eaab92ba2d80425f9966eb84472338c8e5e1ae69ce98"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "c0052ca060ef1dcfad4a6f0e3830d9e172c952ad463a18d6bb3a0a16698eca48a83a8fbaf94834418431897a40ef485a978d792bc8ac97068ed7facaa2688a703db4e92a31b65aabac7d47"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "10320145d648de1ae54efdcdef32cb83a13f48a493dea0ff7bbeccc538c1f6167978eb7180a36c32639381a3045afcc4abf12daf17579d41383c9ce07dac8d6fa9d578e496c12bd0cdf8b9a0a756c025"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "849349d63ccbe2a78abf8b26443ff8aab2b063718f923bcfad89b07667446f72b2dd0b8e8e9b04b6531d8d74dc3666e725d24baed75159b0204c292ac73e004d444e7cb23fb5be09ee36c8a60ce3073c9d4800abb8"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "5ba7d47bc386c5db1d57ce4e7d6516b5c750d869f21a98536ae8d4f07200a938c8eb1f475643eb8561da561ecb774a"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "a1699b5b6aa17ba86cda106d872ef5930e12964bd5f3106cb9199c674207fbfb1c9a3d19e41fb5f23729b54d6b30013422295675d4644c62"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "0005e487af9483c5eadf1fd091a6d25e877127d007325378bb806f1e8ae777ed3c757965cef9135f050b74ce25ba5ade3720879dcf80dbe16cf496f3115999a8f824d4f72edb6d5e45"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "3926c502e749b4b4dc928f86527d1cee81b239ce199a888c10828379d202c0b85c270d4a8247c11644fbd5e7ec605b279935f6a406c989c52e13e71225186fe38da70acdd0cb3966a8f58064ea46d9e90be925a1a8bec251830384796a2f3c2ff3009c1b736a0d2e5ecf8d9bbe8f8fc66f9a081b81336f82dcbd9bdefc301526788bc16522abfbf4d18dfff08f13d95368dd5e61a7279eca3bad5b2cbe463cc83224caa867094c5215f89665007c6393a548d7ef5d336ddf622f950aac6f4b7ef27e"}]}, 0x380}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES32=r0], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000740)=""/4096) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f8000000000000000000006241a00000008241c000000ad7f090581030002000004050000000d00000904010102020d000009058202000200000009e2ab40f24e5a0a0503020002cd84e39d1f30a407e2fe976a7842598db4a443136f815158c4690fd0e66ded6d878f0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2310.742050][T17408] usb 5-1: USB disconnect, device number 8 [ 2310.837419][T12887] FAULT_INJECTION: forcing a failure. [ 2310.837419][T12887] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.879572][T12887] CPU: 1 PID: 12887 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2310.888042][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.898117][T12887] Call Trace: [ 2310.901413][T12887] dump_stack+0x107/0x163 [ 2310.905783][T12887] should_fail.cold+0x5/0x1f [ 2310.910406][T12887] ? netlink_ack+0x1ed/0xab0 [ 2310.915018][T12887] should_failslab+0x5/0x10 [ 2310.919546][T12887] __kmalloc_node_track_caller+0x73/0x310 [ 2310.925297][T12887] ? kmem_cache_alloc_node+0x33c/0x370 [ 2310.930926][T12887] __alloc_skb+0xae/0x5c0 [ 2310.935286][T12887] netlink_ack+0x1ed/0xab0 [ 2310.939852][T12887] ? l2tp_nl_session_get+0x1e0/0x1e0 [ 2310.945161][T12887] ? netlink_sendmsg+0xe40/0xe40 [ 2310.950153][T12887] ? lock_release+0x710/0x710 [ 2310.954856][T12887] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2310.960265][T12887] netlink_rcv_skb+0x33d/0x420 [ 2310.965060][T12887] ? genl_get_cmd+0x480/0x480 [ 2310.969758][T12887] ? netlink_ack+0xab0/0xab0 [ 2310.974379][T12887] genl_rcv+0x24/0x40 17:57:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xffffff7f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2310.978383][T12887] netlink_unicast+0x533/0x7d0 [ 2310.983183][T12887] ? netlink_attachskb+0x870/0x870 [ 2310.988317][T12887] ? _copy_from_iter_full+0x275/0x850 [ 2310.993728][T12887] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2310.999996][T12887] ? __phys_addr_symbol+0x2c/0x70 [ 2311.005061][T12887] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2311.010803][T12887] ? __check_object_size+0x171/0x3f0 [ 2311.016119][T12887] netlink_sendmsg+0x907/0xe40 [ 2311.020917][T12887] ? netlink_unicast+0x7d0/0x7d0 17:57:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xffffff9e}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2311.025886][T12887] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2311.032155][T12887] ? netlink_unicast+0x7d0/0x7d0 [ 2311.037117][T12887] sock_sendmsg+0xcf/0x120 [ 2311.041582][T12887] ____sys_sendmsg+0x6e8/0x810 [ 2311.046369][T12887] ? kernel_sendmsg+0x50/0x50 [ 2311.051062][T12887] ? do_recvmmsg+0x6c0/0x6c0 [ 2311.055680][T12887] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 2311.061698][T12887] ? _parse_integer+0x132/0x180 [ 2311.066577][T12887] ___sys_sendmsg+0xf3/0x170 [ 2311.071189][T12887] ? sendmsg_copy_msghdr+0x160/0x160 [ 2311.076503][T12887] ? __fget_files+0x2c1/0x430 [ 2311.081207][T12887] ? lock_downgrade+0x6d0/0x6d0 [ 2311.086190][T12887] ? __fget_files+0x2e3/0x430 [ 2311.090898][T12887] ? __fget_light+0xea/0x280 [ 2311.095508][T12887] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2311.097704][ T5484] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 2311.101773][T12887] __sys_sendmsg+0xe5/0x1b0 [ 2311.113728][T12887] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2311.118771][T12887] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2311.126291][T12887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2311.134511][T12887] do_syscall_64+0x2d/0x70 [ 2311.138945][T12887] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2311.144860][T12887] RIP: 0033:0x45e149 [ 2311.148951][T12887] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2311.169435][T12887] RSP: 002b:00007f7a0f061c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2311.177879][T12887] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045e149 [ 2311.186668][T12887] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2311.194652][T12887] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.202637][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 2311.211994][T12887] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c 17:57:03 executing program 3 (fault-call:5 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2311.302863][T12905] FAULT_INJECTION: forcing a failure. [ 2311.302863][T12905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2311.317296][T12905] CPU: 1 PID: 12905 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 2311.325746][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.335814][T12905] Call Trace: [ 2311.339936][T12905] dump_stack+0x107/0x163 [ 2311.345279][T12905] should_fail.cold+0x5/0x1f [ 2311.351316][T12905] _copy_to_user+0x2c/0x150 [ 2311.355851][T12905] simple_read_from_buffer+0xcc/0x160 [ 2311.358295][ T5484] usb 3-1: Invalid ep0 maxpacket: 64 [ 2311.361249][T12905] proc_fail_nth_read+0x187/0x220 [ 2311.372155][T12905] ? proc_fault_inject_read+0x220/0x220 [ 2311.377897][T12905] ? security_file_permission+0x248/0x560 [ 2311.384971][T12905] ? proc_fault_inject_read+0x220/0x220 [ 2311.390543][T12905] vfs_read+0x1b5/0x570 [ 2311.395394][T12905] ksys_read+0x12d/0x250 [ 2311.400241][T12905] ? vfs_write+0xa80/0xa80 [ 2311.404687][T12905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2311.411160][T12905] do_syscall_64+0x2d/0x70 [ 2311.416562][T12905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2311.422493][T12905] RIP: 0033:0x417a41 [ 2311.427131][T12905] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2311.446760][T12905] RSP: 002b:00007f7a0f061c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 2311.455198][T12905] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000000417a41 [ 2311.463358][T12905] RDX: 000000000000000f RSI: 00007f7a0f061cb0 RDI: 0000000000000007 [ 2311.472089][T12905] RBP: 00007f7a0f061ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.480743][T12905] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 2311.488729][T12905] R13: 00000000016afb7f R14: 00007f7a0f0629c0 R15: 000000000119bf8c 17:57:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffff0}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2311.524369][ T5484] usb 3-1: new low-speed USB device number 33 using dummy_hcd 17:57:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2311.764267][T17408] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2311.775706][ T5484] usb 3-1: Invalid ep0 maxpacket: 64 [ 2311.781968][ T5484] usb usb3-port1: attempt power cycle [ 2312.153928][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.354222][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2312.363302][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.380550][T17408] usb 5-1: Product: syz [ 2312.387929][T17408] usb 5-1: Manufacturer: syz [ 2312.392523][T17408] usb 5-1: SerialNumber: syz [ 2312.493747][ T5484] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 2312.587188][ T5484] usb 3-1: Invalid ep0 maxpacket: 64 [ 2312.733651][ T5484] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 2312.824066][ T5484] usb 3-1: Invalid ep0 maxpacket: 64 [ 2312.829571][ T5484] usb usb3-port1: unable to enumerate USB device [ 2313.523615][T17408] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2313.530297][T17408] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2313.752161][T17408] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2313.783726][T17408] usb 5-1: USB disconnect, device number 9 [ 2313.790328][T17408] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2314.513617][ T5484] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2314.873472][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2315.043492][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2315.052718][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.068688][ T5484] usb 5-1: Product: syz [ 2315.072855][ T5484] usb 5-1: Manufacturer: syz [ 2315.083099][ T5484] usb 5-1: SerialNumber: syz 17:57:07 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x1, 0x80, 0x200, 0xffff, {{0x2e, 0x4, 0x0, 0x8, 0xb8, 0x65, 0x0, 0x1, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0xb, "e3f9ff89785da731e2"}, @timestamp={0x44, 0x20, 0x54, 0x0, 0x2, [0xfffffffb, 0x0, 0x174, 0x5, 0x1ff, 0x7, 0xffffffff]}, @cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x7, 0xf, "68e2beb9694185519d931b4f6d"}, {0x5, 0xd, "5e8e5dd199e4bfef95c39a"}, {0x0, 0xb, "dd5cbef8b7a41bd531"}, {0x1, 0x11, "b27f7df11ad37fa7fd88411a45cfd8"}, {0x7, 0xe, "a91767b36954e81f5b8cdd0c"}, {0x2, 0x11, "87948a38c8a6a86787ac48ec0bfcd9"}]}, @generic={0x7, 0xf, "0bbe5e44c5af56cabbdd25158d"}, @lsrr={0x83, 0xb, 0x31, [@loopback, @broadcast]}]}}}}}) r4 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x170, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 17:57:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffa888, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:07 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001380)={r2, &(0x7f0000000300)="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", &(0x7f0000001300)=@buf="97bbb30a839f318e5bffa5bfb6913f4d97f9391563430fcb24eb9f99d15895e357eaf139f65337aa125b6de06b213444ca3d07b58796b7f9e763770bda3c41be4f6533a275e59d8bc4c6abc30ba0aad39af914abd7c5acf4068403a0ca42d7def75ed54206002cf71294ad4cb7d19b63"}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x70, "c8bce339da6e315b5aa569d7872f007b9ee522d1430c885f6e5beaa45b820546815cde1ede434c13d83f75db06c5b015c3c37020974a198d24f3363ea42f0982442d851e688dfa0b8f9182a1ad62c9ae6f054a1b8b8c94667bba84a2f70f2540c0f47219f2e7f619a3cc8bc71ad368ee"}, &(0x7f0000000000)=0x78) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, [], 0x18}, 0x1}]}, &(0x7f0000000280)=0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffd}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:07 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) dup(r3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2315.203515][ T5484] cdc_ncm 5-1:1.0: bind() failure [ 2315.245407][ T5484] cdc_ncm 5-1:1.1: bind() failure [ 2315.314322][ T5484] usb 5-1: USB disconnect, device number 10 17:57:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffe}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xffffffff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2315.523510][T22664] usb 2-1: new high-speed USB device number 109 using dummy_hcd 17:57:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2315.564086][T17408] usb 3-1: new high-speed USB device number 36 using dummy_hcd 17:57:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2315.723490][ T5484] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2315.743495][T22664] usb 2-1: device descriptor read/64, error 18 [ 2315.953450][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.033346][T22664] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2316.083516][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.123580][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2316.132690][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.151902][T17408] usb 3-1: Product: syz [ 2316.161366][T17408] usb 3-1: Manufacturer: syz [ 2316.169067][T17408] usb 3-1: SerialNumber: syz [ 2316.234827][T22664] usb 2-1: device descriptor read/64, error 18 [ 2316.253496][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2316.262565][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.285349][ T5484] usb 5-1: Product: syz [ 2316.289546][ T5484] usb 5-1: Manufacturer: syz [ 2316.295556][ T5484] usb 5-1: SerialNumber: syz [ 2316.370625][T22664] usb usb2-port1: attempt power cycle [ 2317.103681][T22664] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2317.293350][T17408] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2317.300230][T17408] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2317.323672][T22664] usb 2-1: device descriptor read/8, error -61 [ 2317.331027][T17408] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2317.453246][ T5484] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2317.459752][ T5484] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2317.507965][T17408] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2317.526613][T17408] usb 3-1: USB disconnect, device number 36 [ 2317.534268][T17408] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2317.603236][T22664] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2317.692479][ T5484] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2317.753637][ T5484] usb 5-1: USB disconnect, device number 11 [ 2317.760349][ T5484] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2317.793726][T22664] usb 2-1: device descriptor read/8, error -61 [ 2317.913386][T22664] usb usb2-port1: unable to enumerate USB device [ 2318.303633][ T6589] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2318.454148][T17408] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2318.723260][ T6589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2318.853302][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2318.903395][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2318.912563][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.931622][ T6589] usb 3-1: Product: syz [ 2318.941450][ T6589] usb 3-1: Manufacturer: syz [ 2318.955549][ T6589] usb 3-1: SerialNumber: syz [ 2318.993186][ T6589] usb 3-1: can't set config #1, error -71 [ 2319.013708][ T6589] usb 3-1: USB disconnect, device number 37 [ 2319.063239][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2319.072441][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.092032][T17408] usb 5-1: Product: syz [ 2319.101758][T17408] usb 5-1: Manufacturer: syz 17:57:10 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) 17:57:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x3, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:10 executing program 1: shmdt(0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000001c0)={'vxcan1\x00', {0x2, 0x0, @loopback}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000180)={0xfffffffd, 0x0, 0x201d, 0x0, 0x0, 0x8, 0xfffffffd}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 17:57:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2319.111112][T17408] usb 5-1: SerialNumber: syz [ 2319.163108][T17408] usb 5-1: can't set config #1, error -71 [ 2319.171059][T17408] usb 5-1: USB disconnect, device number 12 17:57:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2319.343858][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2319.360050][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 17:57:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x38, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2319.453497][ T5484] usb 2-1: new high-speed USB device number 113 using dummy_hcd 17:57:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2319.604166][ T6589] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2319.653120][T17408] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2319.823143][ T5484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2319.993296][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2320.012926][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.021220][ T5484] usb 2-1: Product: syz [ 2320.030399][ T5484] usb 2-1: Manufacturer: syz [ 2320.036707][ T5484] usb 2-1: SerialNumber: syz [ 2320.042955][ T6589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2320.093504][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2320.263194][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2320.272425][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.280718][ T6589] usb 3-1: Product: syz [ 2320.285771][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2320.296321][ T6589] usb 3-1: Manufacturer: syz [ 2320.301019][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.309874][ T6589] usb 3-1: SerialNumber: syz [ 2320.315468][T17408] usb 5-1: Product: syz [ 2320.327033][T17408] usb 5-1: Manufacturer: syz [ 2320.337489][T17408] usb 5-1: SerialNumber: syz [ 2321.182877][ T5484] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2321.189840][ T5484] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2321.199348][ T5484] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2321.412258][ T5484] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2321.444633][ T5484] usb 2-1: USB disconnect, device number 113 [ 2321.452241][ T5484] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2321.464650][ T6589] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2321.472520][ T6589] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2321.493322][T17408] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2321.499879][T17408] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2321.509442][ T6589] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2321.688856][ T6589] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2321.705206][T17408] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2321.775734][ T6589] usb 3-1: USB disconnect, device number 38 [ 2321.784531][T17408] usb 5-1: USB disconnect, device number 13 [ 2321.808380][T17408] cdc_ncm 5-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2321.811433][ T6589] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2322.182712][T22681] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2322.472728][ T6589] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2322.472815][ T5484] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2322.648024][T22681] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2322.664415][T22681] usb 2-1: can't read configurations, error -71 [ 2322.852851][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2322.874608][ T6589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2323.022867][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2323.031951][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.042035][ T5484] usb 5-1: Product: syz [ 2323.048221][ T5484] usb 5-1: Manufacturer: syz [ 2323.053338][ T5484] usb 5-1: SerialNumber: syz [ 2323.062985][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2323.084773][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.101682][ T6589] usb 3-1: Product: syz [ 2323.107830][ T6589] usb 3-1: Manufacturer: syz [ 2323.122715][ T6589] usb 3-1: SerialNumber: syz 17:57:15 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44008010203010902640002010000070004000001020d00000500000000000000040006241a00000008241c000000ad7f0905810300020000000904010000020d1d7f708200000904df0002020d0000090582020002000000090503020002000011000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000140)={0x0, "618fbd0936265dfaec0bc070b9a4d9f0f2ddc6d10958754eb8bbf7c18fba5f78", 0x280, 0x3, 0x5, 0x1, 0x2}) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f00000001c0)=0x10001) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xd1f, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x5c, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:15 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000005c0)={0xc, {0x1000, "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"}}, 0x1006) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) userfaultfd(0x800) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:15 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d00000574777e1105240000000d240f012000000000000000bd0e200012dc944b40729979d04017a2670d06241a00000008241c00ef00ad7f09058103ea020000000904010000020d00000904010102020d0000090582000200001f09050300"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2323.250059][ T6589] usb 3-1: can't set config #1, error -71 [ 2323.285159][ T6589] usb 3-1: USB disconnect, device number 39 [ 2323.285707][ T5484] cdc_ncm 5-1:1.0: bind() failure [ 2323.338753][ T5484] cdc_ncm 5-1:1.1: bind() failure [ 2323.396789][ T5484] usb 5-1: USB disconnect, device number 14 17:57:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xe00, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2323.540055][T13275] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 17:57:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x23, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x1f0d, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2323.812586][T22681] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2323.815519][ T5484] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2323.820497][ T6589] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2324.192762][ T5484] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.203150][ T5484] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2324.232656][ T6589] usb 3-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 2324.243577][T22681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.254633][ T6589] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2324.264084][T22681] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2324.274360][ T6589] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2324.362665][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 2324.371846][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.390731][ T5484] usb 5-1: Product: syz [ 2324.398112][ T5484] usb 5-1: Manufacturer: syz [ 2324.407347][ T5484] usb 5-1: SerialNumber: syz [ 2324.482973][T22681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2324.492262][T22681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.500406][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2324.510842][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.519016][T22681] usb 2-1: Product: syz [ 2324.523437][ T6589] usb 3-1: Product: syz [ 2324.527750][ T6589] usb 3-1: Manufacturer: syz [ 2324.533295][T22681] usb 2-1: Manufacturer: syz [ 2324.537905][T22681] usb 2-1: SerialNumber: syz [ 2324.543161][ T6589] usb 3-1: SerialNumber: syz [ 2324.616721][ T6589] cdc_ncm 3-1:1.0: skipping garbage [ 2324.621977][ T6589] cdc_ncm 3-1:1.0: skipping garbage [ 2324.652746][ T6589] cdc_ncm 3-1:1.0: bind() failure [ 2325.702545][T22681] cdc_ncm 2-1:1.0: bind() failure [ 2325.717257][T22681] cdc_ncm 2-1:1.1: bind() failure [ 2325.905607][T22681] usb 2-1: USB disconnect, device number 115 17:57:18 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000340)={0x3f, 0xff, 0x1}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2326.431896][ T5484] usb 5-1: USB disconnect, device number 15 [ 2326.439424][T22681] usb 3-1: USB disconnect, device number 40 17:57:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x6000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x2]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2326.695271][T27246] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2327.022981][ T5484] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2327.062497][T27246] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2327.080380][T27246] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 17:57:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffc, 0xe501) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)=0xd2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44c000102030109023c000001020d0000052406000105245f62d430712ff3e6000000000000000006241a00000008241c000000ad7f09a7950300020000000904010000020d00000904010102020d000009058202000200000009050302000261a4b067e68c54104fa11fafa74fb8d3655b8cde995265bb381197debdf5ec3a0143f4e9f8a1b52552e27c8fe933d30f364038fdc7645c3d6c94da6d62ba03292569230f20cfbb4dca529edaa3f499454f7c868ac59c54a6dceeafdd23faebf62fee65b536dda77192141e854ca9f8e334cd32ebd68f1bc11650488da7294addb632ec56dc0000000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180)={0xffff8001}, 0x4) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xf000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a4bfe0e260497aed76640002010000000904000001020d0000052406000105010000000d240f0100000000000000000006241a00000000ad7f0905810300020000000904010000020d00000904010102020d020002000000090503020002db29cd57cf776438517624bb95f4499cb8fa5b8265a5751e164c28cd931b2d44b36f4e58caf22e94a90e5ef0d9f4"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x5, 0xc0, 0x3, 0x20}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) syz_usb_control_io(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000740)={0x5, 0x70, 0x4, 0x6, 0x77, 0x1f, 0x0, 0xbed, 0x8001, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0x34b, 0x94}, 0x8440, 0x38000000000000, 0xfffffff9, 0x7, 0x1, 0xc1, 0x8001}, 0x0, 0x2, 0xffffffffffffffff, 0x3) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) clone(0x100, &(0x7f0000000000)="e6c085740fa6ce3f052137cbda9861b9ca6e3a0bfe38f3c3c9563822d411edf2a312cadc8037eb73a7df9545a4227856f434ba07d09af3b18c02", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340)="517a8500b0a42956b6741578a17b1595862cfd7e930b4e4709e2c3ae43c293f5624616e5de7f659a043dec00ba808f89d3227c4e0f60bc0693e16bcf6ceccce72e023a862b8af02db8219fc19f80eff3bf625753ee6f43306f4098294e21c5a44974c307133af89ace6b04e14f95b0fea876aebeb0ad3045ccd456f76061532a63271baf6fa0d99989e7db240963eb2d5577cadb94c1124fd812f7aa8c5c369c5aa0a28a6286eee45c46e7e39b6be8570d141928cd8f6e19ae506162713e4c67ca313afe496aebfb6b958b8a") r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x400200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="23ffffea7ca6ff3ac109dd381c2f217fa2461507e332804838ef88543bc5002d5aa8ab0eaf552ea192750cefd0fc734a330ec9504ef5a5c9bde8a6708fddedd58e413d38f150b5a803517a85412cb03f3a55b7a9a54f5e1c55d6409b2c575e027751f082ab923f0b2207d58fd00832cdd04533c6a0a38e1fbf8d1a9faea0a8b547ef7d96f002e01740b2e1e80f3edb9ea7e205d02d2c00000000000000", @ANYRES16=r4, @ANYBLOB="05001000000006000000000000000800030034dc907646c2465134f58a9443a181acb3539b5afe733e4360fa14763c2647206423d78384a933968012349429adad3b0b223a986f1f6f22b2e2c07f7018a10ad02ea1c230529b558ef0ca1266dea7f70b7e2b07f9d9e5cac8645f41821885d9b5b3b121efe8a6086164df43", @ANYRES32=r5, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r4, @ANYBLOB="050026bd7000000000002100000008000300cba1f2b9c77359cefa48dbc1fbf7142027dda6bd9ee427020898c7f1c06355d0a6403189a0751929654364ea8fc911b07a4d0cd171024f346d36676c138aaa42319f55d39312baefd98e7de958d46c55a82f9c2b19c6bb79bdf698f0", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000002, 0x50, 0xffffffffffffffff, 0x10000000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x804) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x3]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x34000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2327.302390][T27246] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2327.317198][T27246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.343601][T27246] usb 2-1: Product: syz [ 2327.382279][T27246] usb 2-1: can't set config #1, error -71 [ 2327.392663][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2327.411997][T27246] usb 2-1: USB disconnect, device number 116 17:57:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x400300, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xf0ffff, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2327.582710][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2327.592814][T10063] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2327.601716][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.624789][ T5484] usb 5-1: Product: syz [ 2327.636727][ T5484] usb 5-1: Manufacturer: syz [ 2327.648052][ T5484] usb 5-1: SerialNumber: syz [ 2327.792135][T27246] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2327.892207][T10063] usb 3-1: too many configurations: 122, using maximum allowed: 8 [ 2328.012286][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2328.025902][T10063] usb 3-1: can't read configurations, error -61 [ 2328.152295][T27246] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2328.168585][T27246] usb 2-1: config 1 has no interfaces? [ 2328.182244][T10063] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2328.332340][T27246] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.4c [ 2328.341505][T27246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.360425][T27246] usb 2-1: Product: syz [ 2328.364915][T27246] usb 2-1: Manufacturer: syz [ 2328.370934][T27246] usb 2-1: SerialNumber: syz [ 2328.472333][T10063] usb 3-1: too many configurations: 122, using maximum allowed: 8 [ 2328.592234][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2328.600009][T10063] usb 3-1: can't read configurations, error -61 [ 2328.618231][T10063] usb usb3-port1: attempt power cycle [ 2328.792095][ T5484] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2328.798881][ T5484] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2329.011245][ T5484] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2329.053511][T27246] usb 2-1: USB disconnect, device number 117 [ 2329.102396][ T5484] usb 5-1: USB disconnect, device number 16 [ 2329.109092][ T5484] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2329.332440][T10063] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2329.472154][T10063] usb 3-1: too many configurations: 122, using maximum allowed: 8 [ 2329.592072][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2329.599890][T10063] usb 3-1: can't read configurations, error -61 [ 2329.762052][T10063] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2329.781929][T11183] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2329.812055][ T5484] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2329.902089][T10063] usb 3-1: too many configurations: 122, using maximum allowed: 8 [ 2330.032063][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2330.039688][T10063] usb 3-1: can't read configurations, error -61 [ 2330.060331][T10063] usb usb3-port1: unable to enumerate USB device [ 2330.171929][ T5484] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2330.182344][ T5484] usb 2-1: config 1 has no interfaces? [ 2330.192156][T11183] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2330.382000][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.4c [ 2330.391196][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:57:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:22 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3802000001020104000000000000000001000008100001800c00028005000100010000000800084000000000050006000000000006000740000400002c000a8008000140000000010800014000000000080001400000000008000140000000000800014000000001d0010a80500002800c000280050001000100000006000340000300002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100060000000800014000000001780002802c0001801400030020010000000000000be5000000000000140004000000000000000000000000000000000106000340000200002c00018014000300fe88000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001001100000006000340000300000800014000000001500002800c000280050001002f0000000c00028005000100060000002c000180140003000000000000000000000000000000000114000400fc02000000000000000000000000000106000340000000009c0002800600034000000000060003400000000006000340000000002c00018014000300fe80000000000000000000000000001214000400000000000000000000000000000000010c00028005000100210000002c00018014000300fc00000000000000000000000000000114000400fc02000000000000000000000000000106000340000400000c0002800500010010000000060003400003000008000140000000002c6d177695ae33a81cfb3794f2684caccba35df86e556de32551731c65b68b3eeb4314ae8368bdecf674e27995e44d8c5ed251b007eaa91d2ade4a2f2aab9b7a78c81872371d0339d6afe505930e9da42c64deddc4f6e002da2fdb4a6f4b3048a6b96adf6122bf2e3dde1f3df6bfc26798803bf969f56280bf97771130803feb14941e8d5843097dca09aed6bab18b269c75331fed7638c5d4158811e026fc606272373191bcfd3174bc7d2bbb59f994c433f1c6fa482dd57bd0387c83469101b150526be5552d3bd1bbde0065cec18202414eb2a53e7d9783d9fb0253d604ae37642d5c01f26f0183189939a2d06119a38d6528a71d501d1be015b4f42bfda95ebdaa13f67b2c4c3b329c"], 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) write$usbip_server(r2, &(0x7f0000000f00)=@ret_submit={{0x3, 0x892, 0x0, 0x1, 0x100}, 0x5, 0xba, 0x9, 0x299, 0x6, 0x0, "48042e478d7191ac9ecd317f4d0f8d99cb707897578356ef4a5100628f2c9db156f2be546d8be0d59299214c0dccecd8ac535ca578ae6f487176e191e325fa0b9e8c507fd3f6bcc64e70c2d8f2f084fa2e5d1942ff90b5c4f685a9a5351110deb9f43cbd2ef38406c931e4a3d7a02e03639dbe275946291cbed9f20f812c2d79b96f719df63761e9e3e72deb9169954eec2e20a5c6c6fe49b1a1ee589c19a0fb1582ce5eb656d847f0f1e9ccc0923f9add888d5cd3ff6be98512", [{0x9, 0x40, 0x0, 0x3ff}, {0xffffffff, 0x1000, 0x401}, {0x9, 0x4, 0x6}, {0x200, 0x6, 0x5, 0x58e3}, {0x1ff80, 0x2, 0x1, 0x6c}, {0x5, 0x57ec, 0x0, 0xffff}, {0x1, 0x29a, 0x0, 0x8}, {0x50edc608, 0x5859, 0x1, 0x7}, {0x2, 0x1, 0x8000}, {0x3a84, 0x0, 0xe026, 0xffff102d}, {0x3, 0x7, 0x6, 0x9}, {0x1, 0x3f, 0x3}, {0xffff0001, 0x4, 0x5, 0x9}, {0x20, 0xfffffff8, 0x401, 0x8}, {0x5, 0x1ec0, 0x7fffffff}, {0x7fff, 0x31c9, 0x6cfc, 0x4}, {0x6, 0xe911, 0x8}, {0x0, 0x5, 0xf3, 0x401}, {0x3, 0x1f, 0x80000000, 0x5}, {0x8000, 0x0, 0xffffffff}, {0x3f, 0x83f6, 0x9}, {0x4, 0x7fff, 0x100, 0x800}, {0x200, 0x100, 0x7}, {0x8001, 0xfff, 0xff, 0x6}, {0x5, 0x78, 0x3, 0x4b6e}, {0x7, 0x9, 0xff, 0xfffffe01}, {0x2, 0xc92, 0x4, 0x80000001}, {0xffff8001, 0x3, 0x10000, 0x9}, {0xfffffffa, 0x5, 0x6, 0x6}, {0x2, 0x4, 0xffff, 0x78df}, {0x2, 0x8, 0x8, 0x6}, {0x1ff, 0x1, 0x2, 0x7}, {0x1, 0xfffffffb, 0x6, 0x5}, {0xab4, 0x87, 0x200, 0x4}, {0x1583, 0x0, 0x5, 0x5}, {0xffffffff, 0x3, 0x4, 0x2f8}, {0x6, 0x3, 0x2, 0x5}, {0x4, 0xb4a, 0xfffffffa, 0x6}, {0x3, 0x1ff, 0x611, 0x80000001}, {0x401, 0x2, 0x5, 0xff80}, {0x80000000, 0xfff, 0x2, 0x80000000}, {0x0, 0x6059, 0x9, 0x67}, {0x7, 0x7, 0x8, 0x7ff}, {0xa5c, 0x401, 0x1000, 0xff}, {0x6, 0x0, 0x101, 0xffff0001}, {0x4d, 0xbdd1fcd, 0x7}, {0x7f, 0x3, 0x5, 0x3}, {0x6, 0x20, 0x2, 0x1}, {0x3, 0x3, 0x7, 0x3}, {0x84, 0x5, 0x6e96}, {0xdd8, 0x10001, 0x9f, 0x8}, {0x40, 0xbc3, 0x3, 0x1}, {0x84e7, 0xa0f, 0x6, 0x9}, {0x101, 0x2, 0xa3, 0x7ff9}, {0x80, 0x5, 0x3f, 0x1ff}, {0x8, 0x75d7, 0xff, 0x4}, {0x1000, 0x5, 0x40, 0xcbbe}, {0x5846, 0x401, 0x3ff, 0x9735}, {0x7, 0x80000001, 0xb8c}, {0x80000001, 0x8, 0x3ff, 0xdc0}, {0x6, 0x50, 0x72d44dd2, 0x8}, {0x6, 0x2, 0xe9fb, 0xffff}, {0x536, 0x200, 0x5, 0x5}, {0x6, 0x3ff, 0x75, 0xba8}, {0x2, 0x32b, 0xffff, 0x3}, {0x1, 0x100, 0x8001, 0x2}, {0x40000000, 0x8001, 0x6, 0x8001}, {0x1ff, 0x400, 0x1, 0x302}, {0x1f, 0x2, 0x20, 0x2e}, {0x8, 0x7fff, 0x8, 0x3}, {0xe7e, 0x74, 0x20, 0x6}, {0x6, 0x3, 0x3, 0x9}, {0x40, 0x3, 0x1ff, 0x20}, {0x7, 0x3, 0x6c34b2a0, 0x2}, {0x0, 0x84, 0x100, 0x1f}, {0x5, 0x7, 0x81, 0x80000000}, {0xffffffff, 0x3f, 0x5, 0x5}, {0x7, 0x3, 0x2, 0x80}, {0x8000, 0x4, 0x3, 0x9}, {0x8, 0xe4cd, 0x429be76e, 0x100}, {0x7, 0x9a2c, 0x0, 0x9}, {0x6, 0xfffffffe, 0x7fffffff, 0x4c}, {0xd9a, 0xfffffffd, 0x80000001, 0x7}, {0x3, 0x20, 0x7702, 0x20}, {0xfffffff8, 0xe4, 0x3, 0xf721}, {0x20, 0x1, 0x9, 0x4}, {0x40, 0x5, 0x6c89, 0x21dd}, {0x5, 0x9, 0x1, 0x80000001}, {0x30, 0x1ff, 0x2, 0xe7}, {0xffff, 0xec, 0x2, 0x80000000}, {0x1ff, 0x0, 0xddf7, 0x4}, {0x5b1, 0x1, 0x1, 0x27fe}, {0x9, 0x8000, 0x1ff}, {0x2, 0x7, 0x3956fb4b, 0x3}, {0x59f3, 0x8, 0xfffffffc, 0x3}, {0x7ff, 0xffffffff, 0x7, 0x8}, {0x9, 0x82ce, 0xffffff7f, 0x27b4}, {0x8, 0xffffffff, 0x80000000, 0x9}, {0x4, 0x6, 0xa3c, 0xfffff0e2}, {0x6, 0x1000, 0xc1f, 0x1}, {0x7e000000, 0x2242, 0x5, 0x3826bede}, {0x0, 0xfffffffc, 0x5, 0x2}, {0xbe7, 0x854, 0x1, 0xb6a}, {0xfffffff7, 0x9, 0x7ff}, {0x328, 0x7, 0xff, 0xfffffffa}, {0x1f, 0x2, 0x5, 0x8}, {0xbc1, 0x80, 0x5, 0x28b0}, {0x0, 0x7, 0x9, 0x6}, {0x8f0f, 0xa600000, 0xffff}, {0xea2, 0x100, 0x9, 0xd4f}, {0xa58b, 0x4, 0x4, 0x2}, {0x0, 0xe689, 0x3, 0x20}, {0x6, 0xfff, 0x1, 0x9}, {0x8, 0x4, 0xffffffff, 0x1b}, {0x1, 0xff, 0x9, 0x20}, {0x7fffffff, 0x1, 0x56ce, 0x1b91}, {0x8, 0x0, 0x80000001, 0x9}, {0x3ff, 0xdc, 0x5, 0xff}, {0x7, 0xffffff00, 0xb8000000, 0x79}, {0x4, 0x0, 0x4, 0x223}, {0x839, 0x7, 0x2, 0x1f}, {0x4, 0x0, 0x3f, 0x4}, {0xff, 0x3ba, 0xe1d7, 0xbbe}, {0x8, 0xb7, 0x4, 0x401}, {0xcc2, 0x400, 0x9, 0x11f}, {0x7fff, 0x5, 0x8, 0x10000}, {0x2, 0x8, 0x9, 0x76}, {0x5a1c, 0x3, 0xfffeffff, 0xf}, {0xfffff001, 0x1, 0x4, 0x8}, {0xc97, 0x4, 0x7, 0xcc}, {0x800, 0x4, 0x6}, {0x101, 0x3, 0x2}, {0x401, 0x5c3899be, 0x8, 0xd28}, {0x8000, 0x1f, 0x0, 0x7fffffff}, {0x4, 0x5, 0x5, 0x8eb7}, {0x3f, 0x6e, 0x6, 0x1}, {0xffff0001, 0x0, 0x5, 0x7ff}, {0x6, 0x1ff, 0x0, 0x4}, {0x9, 0x4, 0x1, 0x800}, {0xc9e, 0x3, 0x3, 0x1}, {0x3, 0x2c, 0x1, 0x3f}, {0x303e, 0xd2af, 0x1, 0x6}, {0x101, 0x5, 0x3, 0x4}, {0x6, 0x1, 0x718, 0x2}, {0x0, 0x3, 0x357, 0x4}, {0x0, 0x8, 0x6, 0x8001}, {0x76e4, 0x800, 0x401, 0x80}, {0xbb, 0x7, 0x1d1, 0x10001}, {0x4, 0x81, 0x0, 0x7}, {0x4, 0x73, 0xed, 0x1}, {0x9, 0x2, 0xf5ff, 0x7ff}, {0x6, 0x8, 0x3}, {0x5, 0x8001, 0x2, 0x1}, {0x6, 0xd6b, 0x1000, 0x8000}, {0x0, 0x4, 0x40, 0x9}, {0x6, 0x0, 0x8, 0x1}, {0x2, 0x5, 0xff, 0x2}, {0x80000000, 0x34, 0x2, 0x101}, {0x3, 0xeb, 0x71a1, 0x1}, {0xa46, 0xff, 0x7793, 0x7f}, {0x9, 0x2, 0x200, 0x9}, {0x10001, 0x5, 0x7fff, 0x81}, {0x1, 0xfffffbbd, 0x0, 0x3}, {0x20, 0x8, 0x0, 0x1}, {0xdf6, 0x8, 0x4, 0x9}, {0x2, 0x1000, 0x57, 0x7c}, {0x7, 0x3, 0x200, 0x9}, {0x9, 0x9, 0xffffa744, 0xdc52}, {0xc, 0x7, 0x0, 0x3}, {0x401, 0x1, 0xcdb, 0x4}, {0x8, 0x0, 0x16ee, 0x5}, {0x9, 0x1, 0x6, 0x20}, {0x6c, 0xc47, 0x7, 0x200}, {0x5, 0x6, 0x6, 0x7f}, {0xe81, 0x1f, 0xffff}, {0x9, 0x9, 0x6, 0x1}, {0x200, 0x101, 0x0, 0x6}, {0xe1b, 0x4, 0x12, 0x8}, {0x2, 0x1, 0x200, 0x8000}, {0x7, 0x5de, 0x1000, 0x4b4dd3d7}, {0x4, 0x2, 0x0, 0x6}, {0x41, 0x3, 0x4, 0x8}, {0x800, 0x1, 0x0, 0x5}, {0x0, 0x5, 0x58b7, 0xb626}, {0x0, 0x9e, 0x8, 0x1c80}, {0x401, 0x2, 0x0, 0x3ff}, {0xff, 0x3, 0x5abe, 0x8}, {0x8, 0x32, 0xfff, 0x8}, {0x3, 0x80000000, 0x5, 0x10000}, {0xffffffff, 0x9, 0x1, 0x2}, {0x759, 0x9, 0x81, 0x79}, {0x1, 0x101, 0x1}, {0x0, 0x1, 0x81, 0x7}, {0x7, 0x0, 0x0, 0x8}, {0x792251e5, 0x8, 0x0, 0x4}, {0x47e, 0x5, 0x6, 0x3f}, {0x9, 0x100, 0x4, 0x4d}, {0x0, 0xfffffffa, 0x5, 0x1}, {0x1, 0x7, 0x3, 0x5}, {0x2, 0x8000, 0x10001, 0x2a}, {0x35, 0x7ff, 0x40, 0x63}, {0x9, 0x8001, 0x1, 0x6f}, {0x42d5, 0x7, 0x8, 0x9}, {0x2, 0x7, 0x7, 0x7f}, {0xffffffff, 0x1ff, 0x7, 0x3}, {0x35, 0x3f, 0x6, 0xc1}, {0xad, 0xfff, 0x200, 0x5}, {0x1, 0x577b, 0xfff80000}, {0x2000000, 0x7ff, 0xac5}, {0x3f, 0x10001, 0x800, 0x3be}, {0x200, 0x1, 0x5, 0x101}, {0x4, 0xfffffffb, 0x8000000, 0xfff}, {0x800, 0x8000, 0x4c0, 0x7ff}, {0x101, 0x1, 0x400, 0x8}, {0x1, 0x8, 0x7, 0x2}, {0xfffffffe, 0x2, 0xffff, 0x1}, {0x3, 0x6, 0x3f, 0xbab0}, {0x40, 0x101, 0x5, 0x4}, {0x6a, 0x10000, 0xad100000, 0xdf}, {0x7, 0x8, 0x3, 0xfffffffa}, {0x4, 0xffff7fff, 0x4}, {0x2, 0xd17, 0xfff, 0x1}, {0x8, 0x9, 0x9, 0x1000}, {0x800, 0x9, 0x3ff}, {0x3, 0x8000, 0x4, 0x2}, {0x2, 0xed, 0x9, 0xffff}, {0x8a, 0x7, 0x4, 0x80000001}, {0xf9e8, 0x5, 0x3, 0x5ec5}, {0x40, 0x3, 0x3ff, 0x9}, {0x6faa, 0x3, 0xd7, 0x81}, {0x5, 0x776f, 0xc2}, {0x800, 0x8, 0x7f}, {0x1ff, 0x6, 0x40, 0x3}, {0x9, 0x8, 0x6, 0x9000}, {0x101, 0x0, 0x3f, 0x7fff}, {0x2, 0x670, 0x10001, 0x8}, {0x6, 0x9, 0x10000, 0xdcea1a62}, {0x6, 0xff, 0x784, 0x10000}, {0x3, 0x3, 0x101, 0xffffffff}, {0xef1, 0x6, 0xfffffff8, 0x6}, {0x1f, 0x20, 0x7, 0x5}, {0x7, 0x7fffffff, 0x8000, 0x1}, {0x790969e6, 0x8, 0x8, 0x6}, {0x8, 0xffff49bf, 0xde, 0x3f}, {0x9, 0x7fff, 0x7, 0x1}, {0x3ff, 0x4, 0x8, 0x5e5}, {0x200, 0x1ff, 0x7, 0x80}, {0x608, 0xc17, 0x8}, {0x755, 0x401, 0x3, 0x3f}, {0xffc00000, 0xe1f9, 0x8001, 0x4}, {0x3, 0x6, 0x1, 0x6}, {0x0, 0x6, 0x0, 0x7fff}, {0x2d, 0x9, 0xd7, 0xd450}, {0x3, 0x9, 0x81, 0x1}, {0x3, 0x8001, 0x0, 0x3}, {0x0, 0x9, 0xfff, 0x2}, {0x6, 0x7, 0x0, 0x8001}, {0x100, 0x6e, 0x6, 0x96}, {0x80000000, 0xffff, 0x101}, {0x7, 0x8, 0x7f, 0x4}, {0x9, 0x0, 0x1, 0x5}, {0x800, 0x7, 0x8, 0x9}, {0x8b7, 0x2, 0x5, 0xb9}, {0x0, 0x0, 0x5, 0x6}, {0x8, 0x6, 0x3, 0x7}, {0x4, 0x9, 0x7, 0x8}, {0x1, 0x8000, 0x80000001, 0x101}, {0x3655, 0x3, 0x6, 0x10001}, {0x4, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x3f, 0x9}, {0x5a, 0x0, 0x7, 0x10000}, {0xffffffe1, 0x51e1, 0x4, 0x7ff}, {0x1, 0x2, 0x1, 0x9}, {0x10000, 0x1, 0x3, 0x800}, {0x3, 0xffffcb8f, 0x40, 0x4}, {0x10001, 0x10000, 0xdb, 0x8000}, {0xeb8a, 0x5a, 0x800, 0x1}, {0xfffff800, 0x1, 0x7, 0x2872}, {0x101, 0x5, 0x8, 0x4}, {0x1, 0x2, 0x8, 0x2}, {0x3df0, 0x9, 0xa26, 0x3}, {0x8, 0x1, 0x0, 0x5}, {0x63, 0x0, 0x1, 0x1}, {0x401, 0x5, 0x80000000, 0x1000}, {0x400, 0x7ff, 0x9, 0xff}, {0x3, 0xffff, 0x7, 0x332}, {0xe413, 0xd0ea, 0xfff, 0x800}, {0x8, 0xf5, 0x80000001, 0xac}, {0x200, 0x3, 0x1, 0xffffffff}, {0x81, 0x80000000, 0x1, 0x100}, {0x0, 0x21, 0x8, 0x8001}, {0x9, 0x1, 0x3, 0x1000}, {0x9, 0x6, 0x1ff, 0xfffffffe}, {0x6, 0x2, 0x9, 0x645}, {0x7, 0x4, 0x1, 0x6}, {0xab, 0xc87a, 0x2, 0x8001}, {0x8, 0x8, 0x7, 0x2f5b}, {0x4, 0x40, 0x5, 0x3ff}, {0x8, 0x0, 0x6, 0x1ff}, {0x6, 0x1f, 0x8, 0x1ff}, {0x7fff, 0xed2000, 0x2ec0000, 0x5}, {0x2, 0x5, 0x101, 0x7}, {0x7, 0x6a, 0x7a02, 0xfffff001}, {0x46, 0xffff, 0x6, 0x10000}, {0x0, 0x7, 0x51, 0x8}, {0x3, 0x5, 0x5c2b, 0xee5d}, {0x7f5, 0x3, 0x3, 0x3}, {0x0, 0x401, 0xfffffe00, 0x3}, {0x6, 0x5, 0xffffff05, 0x8000}, {0xa90, 0x7, 0x3, 0xa12}, {0x8, 0x7, 0x2, 0x3f}, {0x3, 0x6, 0x92, 0xff}, {0x1, 0x80000000, 0x80, 0x1}, {0x200, 0x9, 0x7fff, 0x66}, {0x3, 0x993, 0x0, 0x3f}, {0x5, 0xe4da, 0x5, 0x1ff}, {0x2, 0x1, 0x8, 0x401}, {0x9, 0x1b, 0x7}, {0x1, 0x4, 0x8, 0x6}, {0x800, 0x9, 0x5, 0x1fc000}, {0x3, 0xeb0b, 0x1, 0x4}, {0xb7028073, 0x9, 0x8000, 0x3ff}, {0x1ff, 0x7}, {0x800, 0x2ae74243, 0x3d6}, {0x94, 0x80, 0x6, 0x5}, {0x1f09, 0x5, 0x800, 0x7}, {0x7ba, 0x10001, 0x5, 0x1}, {0x6, 0x2, 0x7, 0xe621}, {0x7ff, 0xa3f, 0xffffffff, 0x4}, {0x724, 0x40, 0x0, 0xf2}, {0xfffffffd, 0x3, 0x14, 0x4}, {0x3f, 0x6, 0x157, 0x8000}, {0x8, 0x1, 0x0, 0xffffffff}, {0x0, 0x8, 0x2, 0x2}, {0x8, 0x9, 0x60, 0x4}, {0x8001, 0x20, 0x1ff, 0x3}, {0x9, 0x10001, 0x3, 0x1f}, {0xffa, 0x0, 0x80000001, 0x7}, {0x3, 0x0, 0x5, 0x7}, {0x5, 0x0, 0x1256, 0x1}, {0x7f, 0x5, 0xffff0000, 0x51e}, {0x6, 0x2, 0x80, 0x1}, {0x1, 0x101, 0x7}, {0x3ff, 0x6, 0x7fff, 0x69}, {0x200, 0x1, 0x3, 0x8}, {0x1, 0x80, 0x7f, 0x7}, {0x7ff, 0x2, 0x1035, 0xffffff01}, {0x20, 0x2, 0x5, 0x3}, {0x4, 0x86e4, 0xffff, 0x7}, {0x5, 0x0, 0x89f, 0x5}, {0x1, 0x80000000, 0xb67, 0x8e}, {0x3, 0x0, 0x0, 0x9}, {0x6, 0x8, 0x2, 0x4}, {0x1, 0xff, 0x9, 0x4}, {0x4, 0x2, 0x7fffffff, 0x9}, {0x1fc, 0x8f9, 0x7, 0x10000}, {0x3ff, 0x8000, 0x786, 0x800}, {0xe6d, 0x36, 0x6, 0x2}, {0x800, 0x0, 0x52b9}, {0x80000000, 0x6, 0x1f, 0xff}, {0x9, 0x6, 0x0, 0x8}, {0xfffff2a2, 0x10001, 0x200, 0x80000000}, {0x6, 0x1f, 0xffffffff, 0x6}, {0x4, 0x7e00, 0x6343, 0x7f}, {0x5, 0x5, 0x6, 0x5}, {0x7, 0xd99b, 0xfffffbff, 0x59a1}, {0x1, 0x80, 0x47c, 0x8001}, {0x4, 0x3ff, 0xfffffff8, 0x1}, {0x6, 0xa64f, 0x1, 0x6}, {0x10000, 0x3f, 0x6}, {0x7fffffff, 0x2, 0x8, 0xdde}, {0x1f, 0x4, 0x1ff}, {0x8000, 0x400, 0xff, 0x1}, {0xfd, 0x3, 0x4, 0x7fffffff}, {0x3, 0x2, 0x1756, 0xaa}, {0x7f, 0x5, 0x2, 0x8}, {0x1c, 0x5, 0x3}, {0x0, 0x0, 0x7, 0xe5}, {0x1, 0x9, 0xfffffffd, 0x7fff}, {0x3, 0x1f, 0x1, 0x4}, {0x5, 0xff, 0x3, 0x3}, {0xfb55, 0x9, 0x10001}, {0x0, 0x9, 0x7f, 0x6}, {0x200, 0x8000000, 0x3, 0x6}, {0x3, 0x9, 0x401, 0x381b8b78}, {0x3, 0xfffffc83, 0x2, 0xc}, {0x2, 0x81, 0x8, 0x100}, {0x70, 0x2, 0x1, 0x6}, {0xbcc7, 0x9, 0x6, 0x1f}, {0x6, 0x8000, 0x8, 0x5}, {0x2f, 0x7fffffff, 0xfffffffc, 0x2b5}, {0x7fffffff, 0x0, 0x9, 0x9}, {0x1, 0x9, 0x8, 0x9}, {0xfffffff8, 0x3, 0x50, 0x6}, {0x9, 0xac5f, 0x20}, {0x3a, 0x5, 0x0, 0x1}, {0x8001, 0x6, 0x9e, 0x40}, {0x10001, 0xcc8, 0xbba, 0x4}, {0x3, 0x81, 0x46, 0x4}, {0x10001, 0x9, 0x4, 0x4}, {0xf2a0, 0x1, 0x4, 0x2}, {0x7ff, 0x4, 0x0, 0x4}, {0xfffeffff, 0xfff, 0x5, 0x69f67eaa}, {0x0, 0x2, 0x8810, 0x7fff}, {0x6, 0x9, 0x6, 0x43e1}, {0x42, 0x8, 0x9709, 0x8c4}, {0x8, 0x0, 0x100, 0x5}, {0x80000000, 0x7, 0x3, 0x900000}, {0x5, 0x3e, 0x100}, {0x7, 0x7, 0x1f, 0x8}, {0x6, 0x6, 0x3, 0x531}, {0x6, 0xffff, 0x1, 0x4}, {0x6, 0xb459, 0x4, 0x80000001}, {0x6, 0xbf, 0x5, 0x4}, {0x5, 0x5, 0x3f, 0x7fff}, {0x13, 0x3, 0x6, 0xd6a}, {0x2, 0x1000, 0x6, 0x8}, {0x10001, 0x9, 0xee7, 0xa6}, {0x9, 0x3, 0x7, 0x80000001}, {0x10000, 0x1000, 0x7, 0x10001}, {0x4a259221, 0x9, 0x3, 0x81}, {0x180000, 0x4, 0x1ff, 0x6}, {0x7ff, 0x8001, 0x9}, {0x1, 0xffffffff, 0x9, 0xfd4}, {0x3, 0x8, 0x28a, 0x10000}, {0xfffffff7, 0x3ff, 0x7331d3ab}, {0x2, 0x8001, 0x4, 0x3}, {0x9, 0x33e4, 0x0, 0x400}, {0x200, 0x4, 0x9, 0x6}, {0x5ba8363a, 0x7, 0x6, 0xfff}, {0x8000, 0x7, 0x40, 0x349b}, {0x7, 0xffffffda, 0x20000000, 0x800}, {0x1, 0x800, 0x0, 0x3800000}, {0xa, 0x3, 0x81, 0x4}, {0x80000001, 0x3, 0x4, 0x8000}, {0xffffffff, 0x1000, 0x54, 0x290d}, {0x400, 0x0, 0x40, 0x8000}, {0x9635, 0x7fffffff, 0x20, 0x6}, {0x0, 0x5, 0x1, 0x7fffffff}, {0xfffffff7, 0x8, 0x100, 0x7ff}, {0x9, 0xa27, 0x5, 0x101}, {0x1ff, 0x7fff, 0x1}, {0x5, 0xd10a, 0xafa4, 0x3ff}, {0xfffffffd, 0x36bf42e8, 0x40}, {0x400, 0x0, 0x2, 0x4}, {0x7, 0x6, 0x7, 0xb0fe}, {0x4, 0x1, 0x800, 0x3}, {0x80, 0x7, 0x22b, 0x5}, {0x2, 0x8000, 0x3e37, 0x4}, {0x0, 0xa981, 0xff, 0x9}, {0x6, 0x8000, 0x6, 0x200}, {0x8, 0x4, 0x2, 0xfffffff8}, {0xea6, 0x86, 0x7, 0x4}, {0x4, 0x9, 0x2}, {0x3, 0x2, 0x3, 0x5}, {0x80000001, 0x1, 0x7, 0xfecb}, {0xd58, 0x6, 0x1, 0x1}, {0x80000001, 0x401, 0x100, 0x200}, {0x2159, 0xffffff00, 0x40c, 0x20000}, {0x20, 0x2, 0xffffff98, 0x200}, {0xffff, 0xffff, 0x2, 0x1dd}, {0x6, 0x7fffffff, 0x1c, 0x1}, {0x2, 0x7, 0xfff, 0x7}, {0x5, 0x3, 0x3, 0x7}, {0x10000, 0x1, 0x81, 0x9}, {0x0, 0xb1, 0xb037, 0x8}, {0x7, 0x0, 0x4, 0x2}, {0x7, 0x101, 0xffffffff, 0xb06}, {0x4, 0x2d, 0x14b, 0x100}, {0x1, 0x5, 0x0, 0x6}, {0x7, 0x20, 0x0, 0x9}, {0x3, 0x0, 0x0, 0x5}, {0x5, 0x6, 0x6, 0x1dc}, {0x8, 0x7, 0xbc4, 0x5}, {0xc06, 0x818c, 0x4f9, 0x2}, {0x1f, 0x4, 0x9, 0x2}, {0x3, 0x8, 0x4, 0x4}, {0x25d, 0xe67, 0x7, 0x1}, {0x4, 0x9, 0x80000000, 0x5}, {0xffff, 0x0, 0x7fffffff, 0x3}, {0x2, 0x10000, 0x1f, 0x9}, {0x7fff, 0x7ff, 0x2, 0x5}, {0x9, 0x0, 0x3c1, 0x9}, {0x101, 0x1, 0x8, 0x3}, {0x9, 0x1, 0x5, 0x10000}, {0xfffffffe, 0x4d, 0x7fff, 0xc1}, {0xc9, 0x1b1, 0x5, 0x7}, {0x5, 0x0, 0x8, 0xffffd569}, {0x40000000, 0xac, 0x3, 0x81}, {0x9, 0x4}, {0x8, 0x8, 0xfffff001, 0x101}, {0x7fff, 0x3d, 0x7, 0x3}, {0x785, 0x6, 0x2, 0x5}, {0x1, 0x28, 0x5, 0x1}, {0x3, 0x80000000, 0x7fff, 0x3}, {0x4, 0x0, 0x7fff, 0x8000}, {0x0, 0xf8, 0x9e, 0x2}, {0x2, 0xecd5, 0xfffff800, 0xfffff621}, {0x8, 0x7, 0x1, 0x6}, {0x7, 0x1, 0x613, 0x3}, {0x20, 0x119, 0x0, 0x8}, {0x7f, 0x9, 0x3, 0x4797}, {0xfffffffa, 0x1ff, 0x1000, 0x7b8}, {0x2, 0x0, 0x81, 0x7d}, {0x8000, 0x47, 0xf2b, 0x7}, {0xece, 0x1, 0x3, 0x8}, {0x80, 0x8d5, 0x40, 0x10001}, {0x6, 0x4, 0x1, 0x3}, {0x7, 0xfffffffa, 0x2, 0x43c}, {0x6, 0x8, 0x800, 0x7}, {0xc316, 0x4f14, 0x80, 0xdca1}, {0x7fff, 0x8, 0x80, 0x2b7}, {0x98, 0x1000, 0x7f, 0x1ff}, {0xffff0000, 0x1, 0x20, 0xffff8c63}, {0xf5, 0x2, 0x2, 0x1}, {0x9, 0x401, 0x37, 0x6}, {0x5b3, 0x1, 0x27, 0x5}, {0x4, 0x6d98, 0x8, 0x9}, {0x200, 0x6, 0xb796, 0x4a3}, {0x0, 0x9, 0x5, 0x8}, {0x2}, {0x8001, 0x8, 0x309, 0x10001}, {0x8, 0x9, 0x7, 0x2}, {0x8001, 0x80, 0x7ff, 0xfffffff9}, {0x8, 0x5, 0x5e, 0x6}, {0x401, 0x4b57, 0xe0000000, 0x3}, {0x7, 0x1, 0x5, 0x8}, {0x2, 0x7, 0x3, 0x7}, {0x40, 0x0, 0x4, 0x6}, {0x7, 0x80, 0x2, 0x2}, {0x200, 0x3ff, 0x9}, {0x7, 0x800, 0x80000000, 0x8}, {0x8739, 0xfa6, 0x81, 0x6}, {0xa67, 0xfffff6aa, 0x6, 0x1}, {0x7, 0x5, 0x6, 0xffff}, {0x7f, 0x100, 0x0, 0x2}, {0x3, 0xfffffffe, 0x8000, 0x6}, {0x3ff, 0x7, 0x200, 0x1}, {0x6, 0x7, 0x4, 0x36}, {0x7, 0x40, 0x2, 0x3}, {0x80000000, 0x34, 0x7fff, 0x1ff}, {0x10001, 0x3, 0x8000, 0x9}, {0xfffffff9, 0x1ff, 0x76b, 0x6}, {0x3, 0x7fffffff, 0x80000001, 0xf814}, {0x7a, 0x9, 0x6, 0x5ad}, {0x6, 0x40, 0x6}, {0x6, 0x3f, 0xffffff20, 0xfffffff8}, {0x1, 0x4, 0xb1fc, 0xffffff01}, {0x10001, 0x20, 0x9, 0xf16a}, {0x7, 0x24, 0x9, 0x6}, {0xd1, 0x8, 0x4, 0xfffffffc}, {0x1f, 0x4, 0x1, 0x9a05}, {0x4, 0x8, 0x66f, 0x2}, {0x9, 0x8, 0x0, 0x4}, {0xb8, 0x8001, 0x9, 0x2}, {0x7fffffff, 0x1, 0x7, 0x874f}, {0x4, 0x401, 0xfff, 0x8}, {0x7, 0xc23d, 0x3, 0x101}, {0xb, 0x7, 0x18, 0x40}, {0x4, 0x5, 0x4, 0x4}, {0x3, 0x3, 0x2}, {0x5, 0x7f, 0x6, 0x7}, {0x0, 0xfffffff8, 0x2, 0x2}, {0x9, 0x97, 0x1, 0x6}, {0x1, 0xd7, 0xd7d, 0x6}, {0xffffffff, 0x7, 0xe43, 0x1}, {0x99b, 0x3f, 0x7ff}, {0x6, 0x7, 0x3f, 0x80da}, {0xfff, 0xff, 0x5, 0x100}, {0x7, 0xc2d, 0x7fffffff, 0x3}, {0x5, 0x98, 0x5, 0x3}, {0x6, 0x4, 0x8, 0x6}, {0xc48c, 0x401, 0x5, 0x6ab2}, {0x800, 0x9, 0x81, 0x3}, {0x3ff, 0x18000, 0x7, 0x7fff}, {0x6, 0x7ff, 0x1, 0x6}, {0x80, 0x5, 0x2, 0x433b8e02}, {0x7, 0x5, 0xfffffffc, 0x5605}, {0x6, 0x5, 0xe30c}, {0x3, 0x3, 0x6, 0x2}, {0x4, 0x4, 0x3, 0x2}, {0x6, 0x5, 0x3, 0x3e}, {0x80000000, 0x80000000, 0x4, 0x1cc}, {0x2, 0x89, 0xb960, 0x7f}, {0x5d, 0x2ae9, 0x2, 0x5}, {0x3f, 0x2, 0x1, 0x72c}, {0x0, 0xff, 0x4, 0x2}, {0x401, 0x319, 0x9, 0xfffffffe}, {0x3f, 0x8, 0x10001, 0x5}, {0x7, 0x800, 0x0, 0x1}, {0x2, 0x613, 0xff, 0x8}, {0x5, 0x2, 0x6b4, 0x3f}, {0x94, 0x5, 0x8, 0x1ff}, {0x0, 0xffff, 0x8, 0x158}, {0x401, 0x1, 0x5, 0x9}, {0x200, 0x2, 0xb3, 0x5}, {0x20, 0x2, 0x80000000, 0x7ff8000}, {0xa32, 0xfffffffb, 0x401, 0x3ff}, {0x9, 0x80000000, 0x6, 0x3ff}, {0x7, 0x6, 0xfffffff7, 0xb1}, {0x7fff, 0x1, 0x3}, {0x8, 0x742c, 0x800, 0x9}, {0x7fff, 0x8, 0x718, 0x1}, {0x4, 0x1c, 0x8, 0x8001}, {0xfffffffb, 0x7f, 0x3, 0x8}, {0x7, 0x8000, 0x48, 0x6}, {0x2, 0x7fff, 0x4a, 0x7}, {0x2, 0x2, 0x5bce, 0x9}, {0x24d4731d, 0x1000, 0x6, 0x80000001}, {0x7fff, 0x1, 0x200}, {0x1, 0xffff7fff, 0x200, 0x1}, {0x7f, 0x3ff}, {0x3f, 0xfffffff7, 0x7fff, 0x4016e387}, {0x37, 0x6, 0x4, 0x8}, {0x8f, 0x8000, 0x2, 0x9}, {0x10001, 0xfffffffc, 0x1ff, 0x4de2}, {0x1, 0x4d, 0x80, 0x10001}, {0x40, 0xe52, 0x1, 0xfff}, {0xdc6c, 0x3, 0x9, 0x6}, {0x892, 0x0, 0x2, 0x7}, {0x800, 0x9, 0x9, 0xfffffffc}, {0x9, 0xfffffbff, 0x400, 0x100}, {0x2, 0x428, 0x20, 0x1}, {0x0, 0x9cb6, 0x40, 0x4}, {0x7fffffff, 0x0, 0x7, 0x40}, {0xff, 0x3, 0x2, 0x7}, {0x7, 0x1, 0x80000001, 0x4b1}, {0x8, 0x7ff, 0x366, 0x5e77}, {0x4, 0x800, 0xffffff6c, 0x800}, {0x5, 0x1, 0x1, 0x81}, {0xac2, 0x1, 0x1, 0x8}, {0xffffffff, 0xdab, 0x3f, 0x2}, {0x3ff, 0x8000, 0x10000, 0x9}, {0x2, 0x0, 0x40, 0x7}, {0x6859, 0x8001, 0x0, 0x9}, {0x2, 0x3, 0x7}, {0xffff, 0xd81, 0xffff, 0xa67}, {0x2, 0x80b4, 0x0, 0x2}, {0x1, 0x3f, 0xfffffffa, 0x800}, {0x7fffffff, 0x1ff, 0x3f, 0x400}, {0x401, 0x9, 0x8, 0xfffffffb}, {0xffff, 0x9d9a, 0x1, 0x6}, {0xa1, 0x5, 0x4, 0x3}, {0xfff, 0x1000, 0x6, 0x3ff}, {0x4, 0x58, 0x2ba9, 0xf5a4}, {0x7, 0x3, 0x3, 0x1}, {0x4, 0x2, 0x401, 0x7fffffff}, {0x0, 0x6078e6e5, 0x7f, 0x9}, {0x81, 0x3, 0x1, 0x1f}, {0x1, 0x6a18a2b4, 0xa2ca}, {0x2, 0x9b, 0x0, 0x101}, {0x10001, 0x9, 0xffffff00, 0x10000}, {0x2, 0x223, 0x9, 0x101}, {0x4, 0x81, 0xfffffffc, 0x2}, {0x95, 0x649, 0x2, 0x1000}, {0x4e, 0x80000001, 0x6, 0x8}, {0xeb, 0x4e70, 0x8, 0x400}, {0x6, 0x8, 0x9, 0x1}, {0x100, 0x0, 0xeea5, 0x1}, {0xfd33, 0x5, 0x1, 0x6}, {0x5, 0x7, 0x5, 0x4}, {0xffffffdd, 0xffffffff, 0x8, 0x3978}, {0x7f, 0x7, 0x2, 0x1ff}, {0x200, 0x8000, 0x8, 0x7f}, {0x4e, 0x4}]}, 0x2a7a) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x321d, 0x9, 0x1, 0x8, 0x8, 0x7ff, 0x4fc, {0x0, @in6={{0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x7}}, 0x0, 0x400, 0x0, 0xdd, 0x3f}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={r4, 0xc, "a01489ed2d2374beb3b54de7"}, &(0x7f0000000280)=0x14) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:22 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x404002, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000140)) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2330.428576][ T5484] usb 2-1: Product: syz [ 2330.437138][ T5484] usb 2-1: Manufacturer: syz 17:57:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x4]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:22 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x2800000000, 0x101002) sendto$l2tp(r2, &(0x7f0000000700)="794c1844ca321e56cd0a7041179e32fe107b4ee16561c9a54808975deef20f944e4f40d8745a59569fc9d5e2e2d0fc8f9735e3766cba0fa1aa9741e64705bdc275a833c5cbcf", 0x46, 0x24000000, &(0x7f0000000780)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @dev}, &(0x7f0000000180)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf2501000000040003002400018008000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="100102802c0001800800010000000000080001000700000008000100020000000800010004000000080001000400000024000180080001000a0000000800010003000000080001000600000008000100010000003c00018008000100040000000800010001000000080001000e00000008000100060000000800010000000000080001000500000008000100050000000400018014000180080001000000000008000100060000003400018008000100040000000800010004000000080001000100000008000100080000000800010008000000080001000500000034000180080001000800000008000100070000000800010003000000080001000100000008000100050000000800010006000000180001801400020069703667726530000000000000000000"], 0x164}, 0x1, 0x0, 0x0, 0x4c015}, 0x4000000) [ 2330.477494][T11183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2330.482094][ T5484] usb 2-1: can't set config #1, error -71 [ 2330.509930][T11183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.527314][ T5484] usb 2-1: USB disconnect, device number 118 [ 2330.556020][T11183] usb 5-1: Product: syz [ 2330.572754][T11183] usb 5-1: Manufacturer: syz 17:57:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2330.622096][T11183] usb 5-1: can't set config #1, error -71 [ 2330.644115][T11183] usb 5-1: USB disconnect, device number 17 17:57:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x3000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x5]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2330.834768][T10063] usb 3-1: new high-speed USB device number 45 using dummy_hcd 17:57:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x4000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2330.932017][ T5484] usb 2-1: new high-speed USB device number 119 using dummy_hcd 17:57:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x8000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x6]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2331.058093][T11183] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2331.211939][T10063] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2331.261917][T11183] usb 5-1: device descriptor read/64, error 18 [ 2331.302426][ T5484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:57:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xf, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x9000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2331.392080][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2331.401967][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.430233][T10063] usb 3-1: Product: syz [ 2331.439021][T10063] usb 3-1: Manufacturer: syz [ 2331.455255][T10063] usb 3-1: SerialNumber: syz [ 2331.482135][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2331.500542][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.531872][ T5484] usb 2-1: Product: syz [ 2331.535612][T11183] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2331.541148][ T5484] usb 2-1: Manufacturer: syz [ 2331.552176][ T5484] usb 2-1: SerialNumber: syz [ 2331.751730][T11183] usb 5-1: device descriptor read/64, error 18 [ 2331.871939][T11183] usb usb5-port1: attempt power cycle [ 2332.612310][T11183] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2332.651829][T10063] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2332.659990][T10063] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2332.675427][T10063] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2332.711868][ T5484] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2332.718439][ T5484] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2332.741628][ T5484] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2332.831771][T11183] usb 5-1: device descriptor read/8, error -61 [ 2332.888298][T10063] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2332.926294][ T5484] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2332.937680][T10063] usb 3-1: USB disconnect, device number 45 [ 2332.952817][T10063] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2332.981686][ T5484] usb 2-1: USB disconnect, device number 119 [ 2332.994814][ T5484] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2333.102748][T11183] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2333.272087][T11183] usb 5-1: device descriptor read/8, error -61 [ 2333.391859][T11183] usb usb5-port1: unable to enumerate USB device [ 2333.641656][T22664] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2333.701552][T11183] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2334.041639][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2334.121643][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2334.261830][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2334.271062][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.280981][T22664] usb 3-1: Product: syz [ 2334.287331][T22664] usb 3-1: Manufacturer: syz [ 2334.293678][T22664] usb 3-1: SerialNumber: syz 17:57:26 executing program 2: ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000140)={0xe0, 0x6}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd(r1, &(0x7f0000000180)={[0x6]}, 0x8) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x20040009) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x7]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xd1f0000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x10, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:26 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:26 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffd, 0x20, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x3, 0x0, 0x1ff, 0x0, 0xffffffff}}) [ 2334.391701][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2334.406348][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.429295][T11183] usb 2-1: Product: syz [ 2334.459374][T11183] usb 2-1: Manufacturer: syz [ 2334.466154][T22664] cdc_ncm 3-1:1.0: bind() failure [ 2334.504636][T22664] cdc_ncm 3-1:1.1: bind() failure [ 2334.531582][T11183] usb 2-1: can't set config #1, error -71 [ 2334.546111][T22664] usb 3-1: USB disconnect, device number 46 [ 2334.552352][T11183] usb 2-1: USB disconnect, device number 120 17:57:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xe000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xf000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2334.771670][ T3011] usb 5-1: new high-speed USB device number 22 using dummy_hcd 17:57:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x3f000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x8]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x60000000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x9]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2335.081648][T11183] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2335.089461][T22664] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2335.131963][ T3011] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2335.301630][ T3011] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2335.315535][ T3011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.335641][ T3011] usb 5-1: Product: syz [ 2335.339947][ T3011] usb 5-1: Manufacturer: syz [ 2335.354340][ T3011] usb 5-1: SerialNumber: syz [ 2335.501841][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2335.512938][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2335.712073][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2335.721176][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.732657][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2335.748134][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.760890][T22664] usb 3-1: Product: syz [ 2335.768034][T11183] usb 2-1: Product: syz [ 2335.777296][T22664] usb 3-1: Manufacturer: syz [ 2335.785534][T11183] usb 2-1: Manufacturer: syz [ 2335.790131][T11183] usb 2-1: SerialNumber: syz [ 2335.801445][T22664] usb 3-1: SerialNumber: syz [ 2336.071880][T13585] udc-core: couldn't find an available UDC or it's busy [ 2336.078900][T13585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2336.101407][ T3011] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2336.107605][ T3011] cdc_ncm 5-1:1.0: bind() failure [ 2336.138277][ T3011] cdc_ncm 5-1:1.1: bind() failure [ 2336.921429][T22664] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2336.928042][T22664] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2336.935632][T22664] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2336.971518][T11183] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2336.977981][T11183] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2336.987267][T11183] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2337.156203][T22664] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2337.186037][T11183] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2337.224681][T22664] usb 3-1: USB disconnect, device number 47 [ 2337.262445][T11183] usb 2-1: USB disconnect, device number 121 [ 2337.269314][T11183] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2337.279208][T22664] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2337.537618][ T3011] usb 5-1: USB disconnect, device number 22 [ 2337.901220][ T5484] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2337.951188][T27246] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2338.261149][ T5484] usb 3-1: device descriptor read/all, error -32 [ 2338.311180][T27246] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:57:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000001c0)={0xe, 0x2, 0xffffff1f}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000340)=""/4096) init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000140)='\x00') 17:57:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0xa]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xc0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2338.411712][ T5484] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2338.486570][T27246] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2338.498827][T27246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.518932][T27246] usb 2-1: Product: syz [ 2338.529188][T27246] usb 2-1: Manufacturer: syz [ 2338.539299][T27246] usb 2-1: SerialNumber: syz 17:57:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x137) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000040)=0x93c) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0x0, 0x1}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 17:57:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0xe]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = syz_usb_connect$cdc_ncm(0x4, 0x76, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000080)={0x4, 0x0, 0x30b5, 0x0, 0x800}) [ 2338.751206][T27246] cdc_ncm 2-1:1.0: bind() failure [ 2338.759278][T27246] cdc_ncm 2-1:1.1: bind() failure [ 2338.777484][T27246] usb 2-1: USB disconnect, device number 122 [ 2338.811288][ T5484] usb 3-1: device descriptor read/64, error -71 17:57:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xfcffffff, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0xf]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2338.932805][ T5484] usb usb3-port1: attempt power cycle 17:57:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x48]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2339.071344][T22664] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 2339.271008][T22664] usb 5-1: device descriptor read/64, error 18 [ 2339.551041][T22664] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 2339.640942][ T5484] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2339.752010][T22664] usb 5-1: device descriptor read/64, error 18 [ 2339.850988][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2339.876027][T22664] usb usb5-port1: attempt power cycle [ 2340.021090][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2340.030370][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.044621][ T5484] usb 3-1: Product: syz [ 2340.048872][ T5484] usb 3-1: Manufacturer: syz [ 2340.060901][ T5484] usb 3-1: SerialNumber: syz [ 2340.620837][T22664] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 2340.810963][T22664] usb 5-1: device descriptor read/8, error -61 [ 2341.090968][T22664] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 2341.210908][ T5484] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2341.217374][ T5484] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2341.240758][ T5484] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2341.270979][T22664] usb 5-1: device descriptor read/8, error -61 [ 2341.401393][T22664] usb usb5-port1: unable to enumerate USB device [ 2341.425689][ T5484] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2341.460510][ T5484] usb 3-1: USB disconnect, device number 50 [ 2341.478110][ T5484] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2342.190702][T22664] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2342.590748][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2342.780866][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2342.790070][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.806742][T22664] usb 3-1: Product: syz [ 2342.815375][T22664] usb 3-1: Manufacturer: syz [ 2342.820178][T22664] usb 3-1: SerialNumber: syz 17:57:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x4c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xec0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:34 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0105810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmdt(r1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:34 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000340)=""/4096) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000140)=0x6) r3 = syz_io_uring_complete(0x0) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000000)=0x5) [ 2342.853352][T22664] usb 3-1: can't set config #1, error -71 [ 2342.864517][T22664] usb 3-1: USB disconnect, device number 51 17:57:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x7bce2c006808c0ce}, 0x40) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x84, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8f9f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x880) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000140)={{0x2b, @loopback, 0x4e22, 0x0, 'lc\x00', 0x0, 0x9, 0x69}, {@multicast2, 0x4e21, 0x4, 0x0, 0x4, 0x3}}, 0x44) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x60]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xfffffffc, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x68]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2343.220132][T11183] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2343.220660][ T5484] usb 2-1: new high-speed USB device number 123 using dummy_hcd 17:57:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0xf, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x6c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2343.370732][T22664] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2343.610816][ T5484] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2343.621623][ T5484] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2343.637450][ T5484] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2343.656746][T11183] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:57:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x33fe0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2343.790784][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2343.813511][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2343.829237][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.839271][ T5484] usb 2-1: Product: syz [ 2343.854256][ T5484] usb 2-1: Manufacturer: syz [ 2343.858849][ T5484] usb 2-1: SerialNumber: syz [ 2343.890957][T11183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2343.907332][T11183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.911590][ T5484] cdc_ncm 2-1:1.0: bind() failure [ 2343.946656][T11183] usb 5-1: Product: syz [ 2343.961991][T11183] usb 5-1: Manufacturer: syz [ 2343.967972][T11183] usb 5-1: SerialNumber: syz [ 2343.991582][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2344.005759][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.024887][T22664] usb 3-1: Product: syz [ 2344.035001][T22664] usb 3-1: Manufacturer: syz [ 2344.045349][T22664] usb 3-1: SerialNumber: syz [ 2344.734655][T13833] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002 [ 2345.120569][T11183] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2345.127062][T11183] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2345.170696][T22664] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2345.177335][T22664] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2345.186524][T22664] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2345.358913][T11183] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2345.395091][T22664] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2345.416689][T11183] usb 5-1: USB disconnect, device number 27 [ 2345.439242][T22664] usb 3-1: USB disconnect, device number 52 [ 2345.451675][T11183] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2345.471910][T22664] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2346.110394][T27246] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2346.151165][ T5484] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2346.474774][T27246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:57:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0xc0, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2346.520705][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2346.525448][T22664] usb 2-1: USB disconnect, device number 123 [ 2346.650500][T27246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2346.659614][T27246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.675630][T27246] usb 5-1: Product: syz [ 2346.679857][T27246] usb 5-1: Manufacturer: syz [ 2346.692204][T27246] usb 5-1: SerialNumber: syz [ 2346.750382][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2346.759456][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.776644][ T5484] usb 3-1: Product: syz [ 2346.783108][ T5484] usb 3-1: Manufacturer: syz [ 2346.789214][ T5484] usb 3-1: SerialNumber: syz 17:57:38 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2346.910418][T27246] cdc_ncm 5-1:1.0: bind() failure [ 2346.936432][T27246] cdc_ncm 5-1:1.1: bind() failure 17:57:38 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x3, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r4, 0x6, "ebb4dbcd2c35"}, &(0x7f0000000140)=0xe) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x74]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0xec0, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x2000035c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:38 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020010402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009058202000200000009d7af020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f0000000340)={0x60, 0x4, 0xec, {0xec, 0x23, "cd0f1f80a9ee9f1be2fb1d59f5dc7152372a5f3935419d76802a720e7a09c94d4750de09a0cf7ed58cced18962fadb77ed670f00a0941ab336b721184a23c0aee41d00389808b7d86f3b385d2c3dd7c0e60e321562cfa441ae6c3b3735464c600b798247d7c75b781b3ae3885eb089ad8c5cd476fbc886c95ce58c8e4f3a03f708d8f9061f94e318719b848a6e98e47c693f6f4faf7efb42ff33f32ee9a3a9a7ed14c0d2654233de13a1591c47aa9e4585b67bd5f45a74b964031b4029454a4dcd0685602b2700364759b8ff79faa8bb39c152bc98234448591b9732af3fdb4b2571612b40e49136f33e"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000480)={0x0, 0xf, 0x17f, {0x5, 0xf, 0x17f, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x5d, 0xf, 0xe14, [0xc000, 0xc0cf, 0x140, 0xff000f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40}, @generic={0x93, 0x10, 0x3, "dd7d5bc80a1f14ebd0e1a460319b899567a2415b01b236c92d28ca5684a0e1f1e97af5304395a9040adcf27ca21aecd9d290e48fe8bc8c6db730eb43dcf8b8d2451444c19efe91b3ff2d1bdc0594fae36bcdc40b5c90461aae1ccfc163bde2cc8c9fefadf95d81ce9002d2ac2ff43f60df96d1cbfa8219669cf26ba5daf909ce3c85cf85f83fad715fe9739d37266b20"}, @generic={0xa6, 0x10, 0x3, "135897065fc686eb2e6c618cde56ae07a2c44212a8dfb231a09523e101cfeecde4dc459bb60a040a698f947b4927668d7fca8baa164e088ba17c6562fcf1426f762da27e050a47454bac57fd84db7418c062f2c3a530cc69126f37f8536f3faa685cbc869fa79ee8be209fae547ca7004156d3f344f3b34864e747a9105afe1d8b9f5f7aecff6c12f8627eb84868c1366ac2437e8d3bc2fa3b0c3ba3156096e19c1394"}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "f6efa1d087d52df14933f0088b61a5cd"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x9, 0x1}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x6, 0x1, "cf787b4d", "69151bee"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x8, 0x3f, 0x7, 0x7, 0x9, 0x5}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000700)={0x0, 0x16, 0xe2, "5a0198b2ab9a3ddf1bc321ab6508218df4d2a237b9a96bdfa1ba8892cd645bc29d54428292882b3e7218bb9990d50d5e9adb4f747a2cf43ef76568bdac15b91ed1fd51a154af0b92ce23c3dd9654b94c3519fb0e2d96cfb8fc9a10969f199dae1e46a412a524cff8cf35be1d481e7518f52d682db506d3a18e8d6508157cc61776f9877eac00929bc23f2004fe07cf404c7ba69677622cb9ed3c0205d74c4b9d6e2b32116d64536bc4e10350ba2f27ba2e81d6e02583775824ce8192e6dfcd263aff3933eb11f7e67c5ed66064e0a187050ba54b59b307640ac1a7a999015ecba55e"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1888, 0x1}}, &(0x7f0000000900)={0x40, 0x7, 0x2}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'uh'}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xfff}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "dcb8"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x1}}) readahead(0xffffffffffffffff, 0xf82b, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$FUSE(r3, &(0x7f0000000f80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f0000002fc0)={0x20, 0x0, r6, {0x88000000, 0x4, 0x8, 0x7f00}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0xf, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x96f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x228, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf221}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff892}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x941}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x79, 0x3, "56add0846856afdb68e443fa71dd0e09a1b4d367f5f4f3bced61083fa964ceb949f9e4a6ac3509584a375772b1ede0ce4bfabde6c1523b2327126a99e4b749fa75c70acddf7fdd1a07c388e4f990fb86cf0c1b462bdc5df9595ed5363318bbc8addd9984df47ad65329f4123c949d41546ca4d26ed"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "163f7a4339f7080cedcc0d897b46ba5dfe3ac37c0c9d7b47ebbb4d11196552e745977a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ae29fb664eb38da85e2bf0673659c4c681327df49f6432bde5f628d4"}}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6cac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x537f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2346.961915][T27246] usb 5-1: USB disconnect, device number 28 [ 2346.980495][ T5484] cdc_ncm 3-1:1.0: bind() failure [ 2347.002804][ T5484] cdc_ncm 3-1:1.1: bind() failure [ 2347.072829][ T5484] usb 3-1: USB disconnect, device number 53 17:57:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x33fe0, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x7a]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x20000354, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x7ffff000, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0xfc]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2347.380249][T10063] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2347.400479][T27246] usb 5-1: new high-speed USB device number 29 using dummy_hcd 17:57:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0xfffffdef, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2347.490560][ T5484] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2347.740517][T10063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2347.763924][T27246] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2347.779686][T27246] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2347.801876][T27246] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2347.888081][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2347.908581][ T5484] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2347.940649][T10063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2347.949702][T10063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2347.966992][T10063] usb 2-1: Product: syz [ 2347.974281][T10063] usb 2-1: Manufacturer: syz [ 2347.978992][T10063] usb 2-1: SerialNumber: syz [ 2347.989675][T27246] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2348.005884][T27246] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 2348.019092][T27246] usb 5-1: Product: syz [ 2348.030241][T27246] usb 5-1: Manufacturer: syz [ 2348.034859][T27246] usb 5-1: SerialNumber: syz [ 2348.080519][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2348.089720][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.099410][T27246] cdc_ncm 5-1:1.0: skipping garbage [ 2348.120662][T27246] cdc_ncm 5-1:1.0: bind() failure [ 2348.129208][ T5484] usb 3-1: Product: syz [ 2348.134349][ T5484] usb 3-1: Manufacturer: syz [ 2348.138973][ T5484] usb 3-1: SerialNumber: syz [ 2348.611688][T13988] udc-core: couldn't find an available UDC or it's busy [ 2348.618674][T13988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2349.180120][T10063] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2349.186681][T10063] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2349.195898][T10063] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2349.350263][ T5484] cdc_ncm 3-1:1.0: bind() failure [ 2349.357780][ T5484] cdc_ncm 3-1:1.1: bind() failure 17:57:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2349.957618][ T5484] usb 5-1: USB disconnect, device number 29 17:57:42 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fff, 0x8042) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x1}, 0x7) 17:57:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x7ffff000, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:42 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000002c0)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r2, 0x3, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={r2, 0x6}, &(0x7f00000001c0)=0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2350.439468][T10063] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2350.548229][T10063] usb 2-1: USB disconnect, device number 124 [ 2350.579662][T10063] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM 17:57:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = getuid() ioprio_get$uid(0x3, r3) r4 = syz_usb_connect(0x1, 0xc1a, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x20, 0x2b, 0x1, 0x8, 0x3f0, 0x421d, 0xb6ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc08, 0x4, 0x1f, 0x6, 0x20, 0xf9, [{{0x9, 0x4, 0xbb, 0x0, 0xd, 0x2, 0x6, 0x0, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0xaa}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x6, 0x3, [0x8, 0x1, 0x4], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x5, 0x5, 0xb34b, 0x5, 0x1f}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x0, 0x1f, 'J'}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "ee2754"}, {0x5, 0x24, 0x0, 0xf43}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x1ff, 0x86}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0xff, 0x6}]}], [{{0x9, 0x5, 0x8f7c98aef97904e7, 0x10, 0x400, 0x1, 0x3, 0xbd}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x2, 0x4, [@generic={0x25, 0x9, "84fd341b926b1ac5b714de847081b05698b60bc76bc92b46912e48b084d146f2d4e430"}, @generic={0x9b, 0x1, "cf2f8452a214b2353b79a63bbb98761453294afd4f9666fa8ee11ca04b6dcb5b26a0c2fe9d0bc23d6120acdd034f1b1fd84315b86361198ce5dd7dadbeda7ce52d72456f729c50433a06d6e3c566170f8f739e12a88f75dde378dee380736a1180752a83cc8a2b298485d3527843287ccc773ac0dbe04484cb32728231915d6ac023ad33dec666d3c4608bec34acb8ac7d58acdd33b85613bc"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2f, 0xfc, 0x4e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x7bf, 0xfa, 0xff, 0x1f}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xaf, 0x1, 0x1, [@generic={0xe1, 0x8, "0ef6f256651d9a0588fa2ec2b5e348ad8de7e713e4d1232f05b29c400b2c36b61dcb1b7c00c291c380956d906a252d093bd76b1e91e43ba49247f356693cfb5783201757cdf14cd6d86ed9f80ffb71714a4f100080123a00294888b34265923aeaf1e3d36283de284bb916a8df55fd3d1633108f9a6ad2bc36b59e95a5257c4c6ff7a14e4f6dcaf5ed53ca347ef30226cf7bbc529379751a8343f2723507074d4e057d5fdab7ffc382c3b809fc42931ea050cc19e4f3ee70895826140b52f72f59b9f888a98c210111e37bfa5e6ed77b126e01488a2f81728252e0cf9be1c5"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x78f, 0x2, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x1, 0x95, 0x20, [@generic={0x3a, 0x6, "25052ceb2b103ebd81c2f4c1a1eb93dab6ec51002647223930f86eb74bef3787a176d633ce2ba8a5ce747cfafe110329942bfa6780fabaed"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x593d}]}}, {{0x9, 0x5, 0xd, 0x1, 0x231, 0x91, 0x0, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x8, 0x63}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7, 0x3}}]}}, {{0x9, 0x4, 0x57, 0x8, 0x7, 0xdb, 0x43, 0xa0, 0x1, [], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0x40, 0x9, 0x7, [@generic={0x5d, 0x4, "040e3951ebdab713f32083ae85b0e2095bfd245d36cf1732ec7e9e0386038d9db1adff5baee0f3876a0fa9dbd585bdb70abb9eed40317458ef4ec489334bb1c94a220c43c33851d5ae094be81890f63ece2773eebeea36b545349d"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x9}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xf8, 0x1, 0xf3, [@generic={0xec, 0x22, "c917c488417b01be06a58ac29aef3b99652b5b859dfc4f0c637bb85a14fa57956294fe4c0455516615e6e7194216705c3880ffe55d8e0dcd0439159540ea312388ab2d7170f2e3734b9e64a4d0600be4784d008cfe75cd7669aa39a8e3427b81b6dd77a0e89b9b24697a7b54c72c13dd024f79584382ae123813ec5c6665ead60e538f19d2cee85c1cea0d503c51286de4c526a99415aee377e455b940d98e7f41a03fa75d55653b0f2c8fc2a1a923b9d50897a62be4a806079c4286175d0f7e1fe1b78202665581830f5460466eda4e4a380a35c681702e296d63a94c027982891119aa1f421975e30a"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x4, 0x0, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x40}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x0, 0x0, 0x1, [@generic={0x1c, 0x23, "07bca42212509fa3a3bd211cfcaab1112a67b9834d68f8db014b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x14}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x5d, 0x2, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff}, @generic={0xfe, 0xe, "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"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x0, 0x3, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x91, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}]}}, {{0x9, 0x4, 0x1b, 0x24, 0x10, 0xfb, 0xd9, 0xa6, 0x5b, [], [{{0x9, 0x5, 0x5, 0x1, 0x40, 0x3, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5ce}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x2, 0xfe, 0x9}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x80, 0x3f, 0x2, [@generic={0x9f, 0x22, "0b1e8558fe3dc59072415555fd18caefb606ace65ec41a9d70cb162c17db6115d9b337861eb2c74a24e74d79cf6ac1fcd8dcab5f2e3212249647231eec4be9df3731d09bef20ce9de4f71909807c0930bafbc3b1ca65d6017c7b2a3aba04c7c41db85bdd2cc6d9f92d25309269fb6ab7b2231371ebe58b94bf07313dc60fba9120893c5cc4905242248f8babd88d200d2f3690392ab4e969ed38070c77"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x7f, 0x8, 0x3, [@generic={0xaf, 0x23, "48d195a0a9d86ef982ec2afd63e166f00979d81aced62b164401995867d958f68d273f49ea867360552f1a1d6eedf2b05526394b42a582e2cb1a84ddda022a283db6999f08b13575fd067573b1cf43f9c3f7303d7c8e4e7ab563b395fd8406a78b3eaebcbf6b283243e4ea4dcb795e9da058a6797e1837fa52b2be89515287548de1e223728cc0eaf4f03bec90b0788dbe0994528dcd6e0a9460aa2a0890758f51bcae99bede3fef4876cff677"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x5, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}, @generic={0x53, 0x22, "5f65c22b6388446b77bd03430d95cc74bcb97105628d3eb303b383c57959c21f03a9ca051a35016b4704111e9031e33f16ce0514cf2ef4f7aaab14970ecccbb0fe646d46602c6b6e8ecaa85fae9c4fa9d9"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7f, 0x81, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x400}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x2, 0x8, 0x8f}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x81, 0x12, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x2, 0x9e, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}, @generic={0x71, 0x24, "54a8304ad1d60170d0093b9347bbe7a199b4e49a49062da6c0d5b08a24977c545ac67970f1cfbe951b3b677ee9a9e9cfa255d4a6fa8080c0f4aec8ef60781417bc7d51abae825726276538fc802fc608f91f1b462245592406e4e78d6b5a815ff488f2c51c533c66be304fecbde792"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0x4, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x7f, 0x1f, 0xf}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x1, 0x2, 0x96, [@generic={0x5f, 0xb, "c0974e9c9e8386ad347e2dc483c6a84fe63f77060d60812caf6bad48bb59ceb858e6d44b5568db11709365298a7c6a9fe543bdd3be84b8ca6408c930095c0951f55cfed238da4766532d7ea2fa7187ab301868ab5ccefaf7222fc9e650"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xff, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0x8001}]}}, {{0x9, 0x5, 0x4, 0x18, 0x20, 0x80, 0x8, 0x20, [@generic={0xd7, 0xc, "77fbe826beafa224556ae215274e58406b8289328401aa855973f1ecd56254b3b68b31fd565ad882dd6e01cad1c1f3798b8b3d38d68dcea445c64d085d5d67afc9f9956f4028b53f96e0a5f16accf70334ebc5e90468b747919e9ab816f93e629b42bd720186863d08dc1ab748251a3544b93fc3fe8388f9f717f65e7f9bafcbadbd632e2fe3dc95673decfcfdfd523d8387e65bf0d9221715e238e9594eceebde0cfef26c0a7d0ee5c37adb743af322cc94d8f3ea4e30a22d7c891fe327b661a70e0a0685424866908b837f7f38167d3286f3b0a2"}, @generic={0xd4, 0x3, "9ba802e7cdbf50eabf3b16e12ca5da2746ddd20111a891b6d9d0977c0da8ac95c602a21788062eeb817a82010ae945b9309d234d5eba2fd1ea5e6302316e719d9990886e1a126d0506b86879de9b7fa7f01d49624c4317c01449fbf625a6fd3f540dee06f8c02a1ace3ce4e0956ace4863ee4cfd0d535f8ff0c9c9de7ba423aa5d71781ce7742a1d6bb1c3fea75d696a672c298980db0446a1820502f28577133e5e4f07b472531ddd70cbc34a6d49cfd29aba2c35d38bd69c28d43a999c81d8ebb706142073a0cb67fc21b0ef67ae50178e"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x4, 0x7c, 0x5, [@generic={0xa8, 0xf, "9f51b786e88152b7125de485b371539cfcca909705c85eb2d37263bed8ccce1d9de04ed9ac3a82928ebc7e32af3187ffe5babe1285eaf332aabb6bee0c55c4a836bd1a59c97046b1195bdbd7041a4987397b97e9d0cd3097dc73dfabacbd9a6c5554c1216b9c613622c75eb6c7730a593318b63b83fda839eb40edbecd05d46c2e8ddf51f52277cd4246444b140bacaf78b4fad3dff02cd3e58e2de7a4fd1e92fa83915d9e98"}]}}]}}, {{0x9, 0x4, 0xca, 0x1, 0x8, 0x61, 0x97, 0x1a, 0xc0, [], [{{0x9, 0x5, 0xa, 0x2, 0x200, 0x1, 0x4, 0x2}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x0, 0x49, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x5, 0x1f, 0xbe, [@generic={0x5d, 0x5, "f596e5cae1a44b76b311acc9815f172d9db17f61b044d64b2b82a3c8b5207475b55b5156269a80b7a2133647326811aa9451ca75f492980d0ec7489ed949a85c2f4ce1cf87a6a48c6da068f79c26d2a904781be1937a7cea561590"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x3, 0x2, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3787}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x81}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x100}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x7, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0x1}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0xe1151f1269ec9075, 0x3c, 0x6, 0x81, 0x8, 0x5}, 0x2a, &(0x7f0000000140)={0x5, 0xf, 0x2a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x6, 0x81, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xff, 0x2, 0x3}]}, 0x2, [{0x83, &(0x7f0000000f80)=@string={0x83, 0x3, "bca93b05a7ce76eef3badcfd1037aeaea777ada51d6dca3e3ba6fde1105b2d66a00349a2e5ad23b74291eef65bdad31eab1cc10524a08f100f8a40723eacd1a5c0d3b53f8c1debffcd5d999f57e87d0d041d963671c7761846519627013f453fee69d0179fd0f7519fdfb33a8b51f7b203c8b9cdd82877589bc9e83884acc39d6e"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x2]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x2, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2350.646456][ T5484] usb 3-1: USB disconnect, device number 54 [ 2350.750395][T22664] usb 5-1: new full-speed USB device number 30 using dummy_hcd 17:57:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x3, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x3]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x4, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2350.959888][T22664] usb 5-1: device descriptor read/64, error 18 17:57:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x4]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2351.059898][T10063] usb 2-1: new high-speed USB device number 125 using dummy_hcd 17:57:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x8, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2351.160015][ T5484] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2351.247300][T22664] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 2351.440155][T10063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2351.489940][T22664] usb 5-1: device descriptor read/64, error 18 [ 2351.530217][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2351.619982][T22664] usb usb5-port1: attempt power cycle [ 2351.619987][T10063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2351.620020][T10063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.643513][T10063] usb 2-1: Product: syz [ 2351.649365][T10063] usb 2-1: Manufacturer: syz [ 2351.655327][T10063] usb 2-1: SerialNumber: syz [ 2351.720177][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2351.729362][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.749452][ T5484] usb 3-1: Product: syz [ 2351.753978][ T5484] usb 3-1: Manufacturer: syz [ 2351.758982][ T5484] usb 3-1: SerialNumber: syz [ 2352.359830][T22664] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2352.539871][T22664] usb 5-1: device descriptor read/8, error -61 [ 2352.799764][T10063] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2352.806443][T10063] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2352.817672][T10063] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2352.829767][T22664] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2352.893067][T14095] udc-core: couldn't find an available UDC or it's busy [ 2352.900194][T14095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2352.959738][ T5484] cdc_ncm 3-1:1.0: bind() failure [ 2352.982261][ T5484] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 2352.999886][ T5484] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 2353.027205][T10063] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2353.029809][T22664] usb 5-1: device descriptor read/8, error -61 [ 2353.037816][ T5484] usbtest: probe of 3-1:1.1 failed with error -71 [ 2353.078673][T10063] usb 2-1: USB disconnect, device number 125 [ 2353.086625][ T5484] usb 3-1: USB disconnect, device number 55 [ 2353.119291][T10063] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2353.199872][T22664] usb usb5-port1: unable to enumerate USB device [ 2353.679617][T10063] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2353.789556][T11183] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2354.039709][T10063] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.169618][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.209735][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2354.218808][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.237451][T10063] usb 3-1: Product: syz [ 2354.241964][T10063] usb 3-1: Manufacturer: syz [ 2354.246575][T10063] usb 3-1: SerialNumber: syz [ 2354.369953][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2354.379128][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.391126][T11183] usb 2-1: Product: syz [ 2354.396335][T11183] usb 2-1: Manufacturer: syz [ 2354.401350][T11183] usb 2-1: SerialNumber: syz 17:57:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xfffffdef, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x9, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:46 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000f010000000000000006241a000000082400ad7f090581bc6d423600000904010000020d00000904010102020d00000905820200020000000905030200020000000000f8a04d2a93ff993c4770ecc55446821ea9d1d79167060c36b42fb2f59d26a77a530a82e6132a42b5"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000140)=0x140, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:46 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x40, 0x21, 0x83, {0x83, 0x5, "8616e6567fa6995feddb3c24ec8785cc698b2da2b3e63edacefa31bf51c6aa6364d18126f651b94ee7e0b03fa91ebb78e3f5a03747f6e1476043a15bbc344997f564d62d1304b8108bfcc14e6d9be2d47fd282da1ab7550041e4d160bf21644c11dce43b085e207ad91f7fd5a5609d707893bbff377de4283b318d792bb130380e"}}, &(0x7f0000000240)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "eeb285bd8a684b4a0370312315c3b7b176f7fbb694dc73f285d139b6a50336fa05d881e8ba670508d025d902682ea1bbb99eca277026cbab6e49ef82d4cc9fbace204f61872dd818"}}, &(0x7f00000002c0)={0x0, 0x22, 0xd, {[@local=@item_012={0x2, 0x2, 0x2, "68e3"}, @local=@item_4={0x3, 0x2, 0x7, "6c54e724"}, @local=@item_4={0x3, 0x2, 0x2, "0d2029e6"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x500}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000540)={0x20, 0x10, 0xa9, "68f20ed193be73efd7bf348dfadd1703334eab1fe57598c117e1ba8e9102c78fdaadce07523c0802492d9f268b68a222692a3994d554cc62defeb165d35691018ce2d2a39aa93050e11be9144df0446616f545e967c3a5acce9804340f0da0c733f9588db71481f4ba904583eedfed18f629aaea69712eda70fd72ab53382d4f9e90cdea20b1e6a84de72b140a27a13612eedb25622955542c57cb5c5db1f78486101db80b8bb76fd2"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x1, 0x5c, "325261daa9fc5b9e0dc1e46f998e2ee66ae7ae1728c4b71ae1fbe017f65073fdd065a831830186996b98af7d572f003f7ecde8f7a42e9a20b5d8c7f34ae47a20e74d6e8570d7d5e8e4d3542a59ba7b8f2e8e341506e2ce4e7d562c02"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) 17:57:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x5]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:46 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0xffffffffffffff3e, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0xd63, 0x9, 0xfffd, 0xb6, 0x0, 0x7fff, 0x2, 0x0, 0x202}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x80}, 0x2) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2354.489722][T10063] cdc_ncm 3-1:1.0: bind() failure [ 2354.499667][T11183] usb 2-1: can't set config #1, error -71 [ 2354.531878][T10063] cdc_ncm 3-1:1.1: bind() failure [ 2354.532257][T11183] usb 2-1: USB disconnect, device number 126 [ 2354.566233][T10063] usb 3-1: USB disconnect, device number 56 17:57:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xe, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xf, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x6]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x60, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2354.885562][ T5484] usb 5-1: new high-speed USB device number 34 using dummy_hcd 17:57:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xf0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x7]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2355.069504][T11183] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2355.089932][T10063] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2355.259705][ T5484] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2355.270024][ T5484] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2355.278997][ T5484] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 17:57:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x2, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x300, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2355.450022][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2355.473084][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2355.485666][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.495912][T10063] usb 3-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config [ 2355.507069][ T5484] usb 5-1: Product: syz [ 2355.512324][T10063] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2355.523219][ T5484] usb 5-1: Manufacturer: syz [ 2355.536244][ T5484] usb 5-1: SerialNumber: syz [ 2355.546118][T10063] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2355.610965][ T5484] cdc_ncm 5-1:1.0: bind() failure [ 2355.629580][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2355.638654][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.665148][T11183] usb 2-1: Product: syz [ 2355.674471][T11183] usb 2-1: Manufacturer: syz [ 2355.679064][T11183] usb 2-1: SerialNumber: syz [ 2355.759900][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2355.769594][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.777811][T10063] usb 3-1: Product: syz [ 2355.785667][T10063] usb 3-1: Manufacturer: syz [ 2355.790963][T10063] usb 3-1: SerialNumber: syz [ 2355.850812][T10063] cdc_ncm 3-1:1.0: bind() failure [ 2356.054116][ T35] audit: type=1326 audit(1608573467.874:82): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14203 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 2356.839450][T11183] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2356.846183][T11183] cdc_ncm 2-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 2356.869236][T11183] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2357.054129][T11183] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2357.105534][T11183] usb 2-1: USB disconnect, device number 127 [ 2357.128849][T11183] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2357.658961][ T5484] usb 3-1: USB disconnect, device number 57 [ 2357.809324][T11183] usb 2-1: new high-speed USB device number 2 using dummy_hcd 17:57:49 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="1205000002000064000201000000090430cf91660d003900052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d00000905c177708af2614b798202000200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x401, 0x200800) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={@any, 0x3}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x900, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x8]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2357.875920][T25704] usb 5-1: USB disconnect, device number 34 [ 2358.169342][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2358.339343][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2358.348442][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.349189][T25704] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2358.371693][T11183] usb 2-1: Product: syz [ 2358.375883][T11183] usb 2-1: Manufacturer: syz [ 2358.380914][T11183] usb 2-1: SerialNumber: syz 17:57:50 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x2000, 0x6, 0x0, 0x20, 0x0, 0x3, 0x0, 0x48}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:50 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020300402505a1a44000010203010902640002010000000904000000000d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000340)=""/230) 17:57:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x3, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xd1f, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x9]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2358.579160][T25704] usb 5-1: device descriptor read/64, error 18 [ 2358.602392][T11183] cdc_ncm 2-1:1.0: bind() failure [ 2358.619100][T11183] cdc_ncm 2-1:1.1: bind() failure [ 2358.648486][T11183] usb 2-1: USB disconnect, device number 2 17:57:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xe00, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xf00, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0xa]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x1f0d, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2358.869128][T25704] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2358.932638][ T5484] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2359.069078][T25704] usb 5-1: device descriptor read/64, error 18 [ 2359.159105][T11183] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2359.189462][T25704] usb usb5-port1: attempt power cycle [ 2359.309196][ T5484] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2359.509438][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2359.519755][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.526496][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 2359.527854][ T5484] usb 3-1: Product: syz [ 2359.550693][ T5484] usb 3-1: Manufacturer: syz [ 2359.556443][ T5484] usb 3-1: SerialNumber: syz [ 2359.612682][ T5484] cdc_ncm 3-1:1.1: bind() failure [ 2359.709284][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2359.718376][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.727030][T11183] usb 2-1: Product: syz [ 2359.733183][T11183] usb 2-1: Manufacturer: syz [ 2359.737985][T11183] usb 2-1: SerialNumber: syz [ 2359.800241][T11183] cdc_ncm 2-1:1.0: bind() failure [ 2359.819925][T11183] cdc_ncm 2-1:1.1: bind() failure [ 2359.939008][T25704] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2360.132468][T25704] usb 5-1: device descriptor read/8, error -61 [ 2360.398908][T25704] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2360.578944][T25704] usb 5-1: device descriptor read/8, error -61 [ 2360.712467][T25704] usb usb5-port1: unable to enumerate USB device 17:57:52 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020100000005a1a440000102030109026400020100000009040d0001020d00000524ed9ed3e18d293f00000000000006241a00000000000904010000020d00000904010102020d000009058202000000090503020002000000000000000000010000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x3f00, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0xe]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2361.438816][T25704] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2361.648891][T25704] usb 5-1: device descriptor read/64, error 18 17:57:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x4, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2361.738062][T11183] usb 2-1: USB disconnect, device number 3 [ 2361.918806][T25704] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2362.118854][T25704] usb 5-1: device descriptor read/64, error 18 [ 2362.239054][T25704] usb usb5-port1: attempt power cycle 17:57:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x6000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0xf]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:54 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x70c, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x60, 0xc2, 0x41, 0x20, 0xeef, 0x2, 0x205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6fa, 0x4, 0x1, 0x20, 0xc0, 0x4, [{{0x9, 0x4, 0x5d, 0x9, 0x3, 0x74, 0x61, 0xc5, 0xe3, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "fa86fbae1cdc"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x400, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x3c, 0x7, 0x0, 0x72af, 0x7}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x1f, 0x1, 0xfb, 0x8, 0x40}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x9, 0x8, 0x1, 0x1f, 0x4}]}], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x81, 0x40, 0x8, [@generic={0x4, 0x23, "08b2"}, @generic={0xb0, 0x23, "01a35e541969f7dc1f0f4415ee5329afad0083126adc8a67ba2e89186aa6661dcf2b40f402c6c25103f092720c69f3c9583d1c3aef4ba1456d3ceb0d4a5a56c9cd9fca46baf2c82e78017b96f25496798ebfddb3ac763aeb32be1231262a1cb8a6ee59eea585b76d4d5a111eed2bc0c3cc37930966be75ad48a4259600226bd0082586a6a954626259376dda986278aea85b73c827d08e395c4977a47d1b156ceaef11f145d35aacd137d5f84574"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x81, 0x9, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x80}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x0, 0xff, [@generic={0x77, 0x21, "c0649dbfe2d83b29bcf23c1ca053052b9512ba1f4b647dacf2e5cc9a8643d21050599b80233818f90a748064fc2c442b7594292e4523638831f6891a92807a2d2c5de931c569ad6e990228eb81b11f720380a0805136f6e724f28bb7fcfe3d5ba654c8cbb1d631ed1a7190137d36219c8cf65c0807"}]}}]}}, {{0x9, 0x4, 0x56, 0x3, 0x4, 0xff, 0xff, 0x0, 0x2, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "bf5040"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xf7c, 0x3, 0x716, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1f, 0xfbff}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, @hid_hid={0x9, 0x21, 0x53, 0x0, 0x1, {0x22, 0x14b}}], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x4, 0x67}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x3, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0xfe, 0xfc, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd5, 0x1}, @generic={0x90, 0x5, "1d612285899f1465e5337942f6a2cc4f876c927c3d6f2e64ee52424e0fcfcf4a3752bb54add795de4e0e9b2a4be48a0db169289ccccfcb5c3da7d3e25c4b700fc88d612f7db083f0c6d84ea60f36d82a6480c94fd143a02c344e33ac4cee81c5341b9ee53049b55865253e2b759d197c67358529fb245e2b8d65b4da2b0ed37f87257fa467593d4677b7957744a6"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x7f3, 0x9, 0xec}}]}}, {{0x9, 0x4, 0x77, 0x1, 0x7, 0x7e, 0x86, 0x1a, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x8, 0x4}, [@acm={0x4, 0x24, 0x2, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x7fff, 0x0, 0x3, 0xe03, 0x8c}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x3, 0x3f, 0x81, 0x6, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x7f, 0x0, 0x8, 0xc0, 0x1, 0x82}, @dmm={0x7, 0x24, 0x14, 0x100, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x8, 0x3}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0xff, "679453de"}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x9, 0x9, "8fe2"}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x8, "a63f3e60"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x6, 0x3, 0xff}]}], [{{0x9, 0x5, 0xc, 0x1, 0x200, 0x6, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0x200}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x40, 0x5, 0x7f, [@generic={0xb3, 0x8, "e2e1244471bd428c96a3611ce5a181e89eae38cbcc7d9feca02dca0d4706888444c2629337657f22adc611d6479e68d874634fb04d56d152a6e88bb1df82b4e525c14784f97a745713b3060f9105a4cd2cbb6ea7faa3fbf9be796478c604dd519231c732b3eb851ab650bb6f44b2eb265ddae354a3f048ab79fa9dcfc60b09c4fe34b30b536c26fe9f4ad82a66fa7f0e74c38a6d5410a258f0b3c11c6e9fd9a8725a33bdd4f34c1564ebbf5263431aa030"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x3f, 0xa}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe4, 0x5}]}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x1, 0x3, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0x2, 0x83, [@generic={0x2c, 0x31, "62b8561a61407a7375461be9e21f71be94882f47542808f92ebca4d490f226738527429b833d3691e248"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x1, 0x7, 0x81}}]}}, {{0x9, 0x4, 0x41, 0x40, 0xf, 0x1a, 0x54, 0xed, 0xfb, [], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x4, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x1000}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0xff, 0x40}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xff, 0xbd, 0x3f, [@generic={0x81, 0x9, "cd9f34e2f2b4320224b9f5c799e3e7e131bc2cf83757c5c6e01fa6fc16d7b748df1a21fb2d23d70a470f7201af5fdf9f5167c1b458d918923812ca1159f32ccd49c757d0b46fb417b41428f66936092c3ea079e7612696888f6bc9c38321ec6f5dafc66e5d634ecc266a7e4ab12a409030017ecb141398fa6c3c2af16c2f1e"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x80, 0x6, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x33ea}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x19, 0x5, 0xdd, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1f, 0x20, 0x80}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x1, 0x8, 0x9e, [@generic={0x65, 0x21, "076e8ad100b6321d92d5c557987e8f2527f08911b6e39a6d1030a4ea430ceb17e56d6cdf6a7db324604560cbac581dab9205bf89c2f91457d25fe568f34ba071412140a6bd6fe25aed91b8cd52bc784f8ddb4b3afbb2c2578c31e7a2948f9def44b2ca"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3258}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8, 0x0, 0x5b, [@generic={0x7c, 0x5, "3e0d1a37612bf93d6d8425f3c95de4dc0e24b48365acd5889de759b0f16968ec03c0b63d13302c0acbf43af8b9c2dd42017a7c1f14d2f3cf9e8771be62362aedd0cf3cb4b9bf7cd0fd826eae2f88c989aca4bcc4ee166ea7b27205b99c9a83a7e60b96828400d4124d42271cfa0db9164229f63c6b0fe4ab48ac"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x3, 0x6, 0x81, [@generic={0x4c, 0x3, "fd688516e3eacb8669e1a0116da9172e480d6c9c9f65f84beecce2e3094c71581fba7d2da766f3dd720e7dd4b17f5db4ec5be66ea3b367e25d7f25f3995d1f8e3aa035e585c99e6287e3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x3f}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0x2, 0x59}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x20, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xe0e1}]}}, {{0x9, 0x5, 0xc, 0xc2d1f7617abb7e32, 0x200, 0x80, 0x7e, 0x1f}}, {{0x9, 0x5, 0x1, 0x10, 0x3df, 0x22, 0xc1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x80}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x8, 0x1, [@generic={0x2d, 0x17, "21218b38dac37df42d4c62383dd94d2928df25d86e1d6fb1c80d02357f7ee5515b2eb43d3f407c677f7b73"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x8, 0x9, 0x0, 0x0, 0xcc}, 0x4c, &(0x7f0000000140)={0x5, 0xf, 0x4c, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x1, 0xf00, 0x400, [0xc03f, 0xf, 0xff0030, 0xff3f00, 0x0, 0xff3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0x3f, 0x3, 0x6c7, 0x0, 0x5, [0xf, 0xff00c0, 0xcf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x2, 0x7, 0x7f, 0x80}]}, 0x7, [{0x93, &(0x7f0000000a80)=@string={0x93, 0x3, "dd557c74e493fea3d9ebb94d4377e07561ed4819d6e15be454d79c49a5cc7b2e49abea1359f9f9e8102717c7f41befbcab2329837473076b1b6b9e64116e23469cabeedadfed5777728697c851c4d15af9b4d8683db6c8d96713b5a9935cbfea3eec201c294264490459369478f4eb59f3d07762e2fbe41a583e38c55d5327c2f432e81b71241ac12e4835d126aebc1566"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1009}}, {0x44, &(0x7f0000000b40)=@string={0x44, 0x3, "4eeaf9c4e0f9618f8ce10da1d4faa389b41fd9d57f7f943cff91060e62c2d2d63a05976a09b29de7eac56a83593fabe182d73af8112cfc7537c47eff18897b93835b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0xd, &(0x7f0000000bc0)=@string={0xd, 0x3, "6223229a3d4645e2eaa1a4"}}, {0xe5, &(0x7f0000000c00)=@string={0xe5, 0x3, "73e6c9cc0ce900b7c7e5253011de9a9c3ccfb9640f4644a5a22813e5e2182ad02d3e4c339b7a337d968a2c6504cee8474dce9ea3bc48a201a30a32b24fa1b899e4e9f78562c14dc13093fa9177d22eddd50fa9ad24595ed3a9d3a03bd408914039d9742731e04e92f87720c2a6c56272b3a9da6bf4c6ddc2b8f644464cde962ef784351e6097b2691183e3c2d5261f949b24ba90ee51b47e4e17b8157c60a435d78cce4baf4cb0bf3aa771b89c7650083f600b0a561dd5cfc3ed4f0becc228fc83a7640dffa8925c7d6ab6fada22097b44c0ef6731e53f7c09c7d3596f4ce491598403"}}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r3, r1}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000e40)={0xb, 0x10, 0xfa00, {&(0x7f0000000d80), r3, 0x9}}, 0x18) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2362.568347][ T6589] usb 3-1: USB disconnect, device number 58 17:57:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xf000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x8, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:54 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001a00)=ANY=[@ANYBLOB="9fc4ec3a2f2e0c8215611baf8192d7130a871cd1deb7c89cac0f15b3f3b19d0e57e750f5eab7140d44017668e8869936b282c2f40a367d044114382183174d5fe99b4dd1f847cef2e85525db6db0fb298718c26a967d555c30c8b4462a36963025491416b07eda03b2c88eefcf344fa11f275ed2b2605372a88c79600421c7a5ffc8322a2e6e375f65835cea132898afbed76d37564c38fd732ad941b43996070a15f6cdff6b3294f84f0e873b3a0eb60d794febdd4059f5ac734f8533620988d02bb6bcfd0dfc75a4758302660c8ee6846709a83916968c90ff993aa2cf50c84d1e19e4881eb87b98653ac40336f7f33efcc9c241e9886c8749a3213a9d44450885994774be288e2395ec4bcdc61f6cbe5e67f3277984ccbee1317bd03f5c0f112657aebdb77d35fc72f39328f49979b8140ab46895facfd7af8379608aa9561d4b023f455cf2b38e0010ce0f3db5a13e2dc151a01ac5e85372bb464651119dd2c7023d0b013215fc79d38ebef3a2658bf7360965173896fe74ab1de769c0f9d3bbef49fc09994a93fb36e0811220f4573e79708ce6059e54fd9f750b62faf891cca052d7f0dc344f9e7da36946fea49054164f9fc3720b9d7ec480fac6c6969cc2d00461e02f37451f055d8508c9e8044853ba1fdaedc0114015ab2b8929377b90a449f12cc9f696e42f6aff33e7234e6473252cb2ed6a9bd1636968694821de834bec23dac788946e8ef3a19932da72424221ad3bc76348325c21a81bd98b54e12f424d0e4f636997f85ac38e69b0453e6d9247b15f6f29fbf9112cb4bd4a3c6fd43dfdcf51449d6e8f027d58f149bc42609218ed9d421d8b6badffcdfc54662b67f080ac9cdb496e223dd81d641c25ef99e1f5d49dde25112dc7405b01f94cdced20c17a257c9775dd94a3809f727b96b0f97f7a0edb5fcc1cb9f8ce720a8fa41071b85ad9eef379d80d25068b8211533637d02d4c0cfd04e4a8d9ff7623eda56ac6ce7ac725d32b6d94b44a68e6bdfa948264b452d7c4bf7f0a7f4caec8b136728128573a53446d2b28d3c338e80ee9c7fa962a2a3d207026e3a4953bf138453272905e46e6baaa589ea4771f559b2d6f292d7cd073fce4f4c256ab21020529fe402fa9b16cd8cb35c32d36025ef25e8a6858e39ae06203d29a291357b6cf5e23f5b0002df7d463bffd4724a8fc4606311627863bd88d408fc99fc19dface568ad551417cc0d809d639731e3abbb3cd1f8e6a04795bbd7beaf27c352c76437c9e569873099a5118a555bbd9d5b90e569055b6bb49fc2b1bef3d1f4cd7bcbe7dd5f656722e9ddb6f9a2bf6ad70b03750f6b08b7e432d61afc01e5e37a35e491391423802434886d093a29b7b64021b23aed0dd0610c6997f4854fe74433ba2ac43918cfefee6d2fb9f001da04006072aa7fe682ef58e50e4e2368bcdbccab4af3c9fea725e79dc9e139029a33acc454e94d136036ae3647f2b53656b0dbb186b32d0095cb4159301417aca1f93264b58e31e1a1d69c2acee76604c576e7eee96a87b9522da31c4926dd1ce1036a51a42834fa89e6bc8c937cd28669045867f92f255f0ee0ed0471c343163d29b103c1178371118a5c4f3342b7e554da98e9ce2106c9dba67e3f2b5d5ad81e5e571b4b00fe508f8e232954a2ad10a79241129e3948d2407ffe76abb1e6c95109594ff1e10ede3f3b44b28461c99f9f202d6dc9e41765d28598d9b83ec993cc353c94ee3f48716d6e16859b398d3fe9d75b1de0844704a0282a83c7614ecd59de7bfd252a6c30c9ad95db2efb497cf8faacfaa179c5f59411ce90828f1083d1750ce1debe60ccd377f5c7ec047ed8fa0c62771b014634cfe283d0fd214df9dcd51cab6aded96845c3479d4130bc1c679e8455dbdd90c755570ae30d7174a24843f7d67b5903ea5bf60faa2eb7512670a026eeb4cb514adef84257322d5719f86e6e0b4efbb1fd2c1620ab43cde8adc85d5a0393a51a7e0c2847e9029f758b557ab9bec274b6950389acae6c54ffec1d89bb5d0d7a6c0e635efb696554772f5b2756b175bf9bb1460e08d27fa84be2e320a64ea89f4612f5fb48c54ff8090b833aeb5a4fb2dac7bd7831608867569ce68399646ec398dfa20703281ff0953add35783076f5efa2b94feadc42bb43339ac5aa53ca749fc353a38b5cd4d1bab443f40e21fa0c827dd9c6e7d98c8475040e17599e2af2d1f0f1080052d1263e369f4a3e24b2080f1695cc5c2bd57261254e109f477fa3f7a958343077474142861077ff06f04bc423b6ae3c092130ea218e14ef42da3557bb004393c99b67b9eb5a1d648bd801eec1818d2e9a59e753adcad42fe4be6bfc57c87d6f50cf6b6a9aa70ab20f91d586cc54a85306c078a44b024d59a3195a2e08c2a6a5f5c54961e0ff77eb6f854274f5f52feb9ed647dad023b39f5fd09b0eaaa223027a95c2be890ca43477562c10579d424a8c17f7dd5dd61c24b97b568ca66e2ba76cbdd33f64eb4daee4755d24285dc53067dabd013cdd1e480669cfd83012b7b6969e2984944cf4059c44d952cefea8660fbe9e6149e47161c816117265037290a018561831394aac47dd73644f5f078dab9c5e56280dfa681eb9090cbf4eb050139d244fcb03ca0db461dbe4b146fe1f5f6290be3b80bd62a070b6415845753ece9831b4bb968af6ce013b022b33060b8fde0a40b3f7cc947f8d1e36aeb4055e1bbb97e13082e78f8ab397d4422b000ab0918b77c2292b508ddd32acec135f8b5088351aec8f0a13d50c2d348a0ed250c4ad166fe2912666903ae68d53ee37872dbc3d61d34e91bede4b92982ab0c2de56487e7076d656b7c82c70aa1c8fe52b5d1b9d8332c89fdaf72e31fb90300ada03b1bdcf4cfea69aac6ee16b8787593ea5bc41ec6c5433dfbdb605811e3e1b8a364eea0c77c4f332be3b8aec48ca477da5f7c799e484cfcbb18ae0d92fdd44d329176ee30ec4d2af0b0b66531656623f9d9c2199335d762adf1498abb5ff399c92ded067da80ae1dd838f19f4864d24ae4212d45023f8eef6cbd03342b2f3d5ecb531d35c2c2f02921c0e32bf3233358dca61c30d00e25f156779c34cc7b0031339e2cbd3f51222eff3ebb413c765b7741f1d411883a282240d99156538a5f68ac816266a9017e5cee1a53e844cda29bec3c6701c9fff5a23e9219b80ed11cd1d1050fdb3cb76e767d4a47fa50982023adc1a3091771985649ada33cfeb4d2fbebc5bfd895702242f4414c3abe46d600af5d23aebec4da062feed3d750b772e804ed9722102fe383a058c4a0234140962008fd63091bf96a98da4be2899b14c395add5157000a97947080797375b74a190fc46d3de4c63b724682f9ea0eb86ca0a5aad5e6651a58c94aeecd8ce6db5c02abc6364a4ce964a62b19bc09de0cad20972926729739146f57e2f6837adcfed67216b5e7f0d6f47f69535328b0ab0eee53b0c344eca6644aa5f744b738ccb23ce57ede7b0f96ee690cb136c883a95bae9d2b00f9245acc8a3072af99bc8c92e00ee461e0d24084c5e291c7f1b4ac92279f67d1b098694753f5cc8c86c143f388d68f6406e1436f93a152e9a1550a2d0b52939753242c226337c4a8f505e30237420e0ac679f83f74f1175d64980979aadc5bd063fd52b6a41067c27b5983e9094425f7a60a1dec1df42e0ef60f62fa6deae7974496fc3c187197468627eb661ef233107de1fdb90977903a7d7422588634ebb93c284e7002605c3b7160a1a3c865c3719b29a215332aa2ffb16e9f7fc1f04c8db3998014485edade49ad56e70d9c11c86ebf94f42c1e6575f358c70e8f4d6146a1341bc7a436ce84b88ed4a5e7b16c43f91b4f5455942fb3a4abd195df2aecfc8786f17471f926a5bd15a8579ec0727b23f11251975a64b5618c92794712e2408e10d5d2a1d41551fa25e93a5c896274d292f77eafcdb9185336c5562c6ba16259180432627e5566b1070c7f4c2993ac1bf5a6512ffd4d29e19bfc6eca4e68789bde5fc62019309ba93ec2c83d704c78706358769fc6abe8af8d26a0fa5a41d8c21cf184c1c273d31878119cd6881b780f5d1c61d6f3a56632d356a92279f0bc687f062cfe1e3b3b1eead42d4d596fd7a58ac9b06fef9dd246e98f22f2a2d7e5739a62dd1bbf74a433c577027f50c77d1e72302aa1ed1d0377faf98f42ebee69c879562965ad98d8eaaba3e11d53ba9f2b67708d0d2630b99371fb754a918653a91373199e4361bb9a8007d441a661364971ea979f8bb62f84cac3c8efc7e6e5135d0682a97951e72f3d8a69eb5dc7c9306404543bf4273d01a533d88d0c4da76178f74223a712715020e8023cab491d72ef066e3f13b51ee95a63ba1d782a8cd175c13182a2ace6e66e2ddc7cafb0484bdb6324a9b1e1225056d0ea67a442fd11d9aaac6c6c5231aaf280af7789be48ba068b852613ab152822a51dee691f6e9c3c807f989a9c9a6c16d68eeb3184b73560bf7a1e167b9fd427647f09a929d2d5f8406dc0d6b2192bcad29966179a7def90877fd149ce6ab496bfe5ec66e80b131baf499b3933a32a6260178275fc6c4bc63360a1f6e7154d0d042916090df7c779d872ee6a62a2193414c3da0e03227c4b29a7434143122a39ffc8c58d3314d0c98532f67969ffdcdab1d165018f55a4a75233a00eee453ff64b1ab64da468fe4b2ba88b0a79dfccd64a1b89fa5046c3b1cd4cd6525ab61c22b5c82c28a7d1a36464786865b9723491b1017a8ff34e7ee3c7598ce6570e7378e774ef5eef3e5820ae04f8be02db4739912d73ca191490095759792584a6686f49ad1a19ec1860be38ee047b795c1d35a2f24782163a64438daf7de5c37e366884a1dc54a91f959427df944eb124de97f0a1f056219a352e6fe0336cbf62a6526bccf3a8ef5c9ae1154841441ce7e3c632956d08dff769307c853d40a06577800c8391733164ec51f2317fdc3106ff213a528285e0b281902a47628c3ca88ba9560665b1f376bddf284467b8e577d8a23c7f198d0a528700f4271f137ce0fad66af3bc536a58cefbd1b8e038e7d9f0e2d7696d71ecd0d06fd839cfbbc30c50c74b94ad104df95a36ca6b90380ef43724f7f76e8e5ff0428efb03031e943d3df75aa0c8617406ab846570d3ddce864bfee2d3d2b6281fa25c75eaf820fb04807b121f39c1717a8d874b7b018b97d5c65171865863365f08672d7702b99963b680f0bf6a710fe7b0267410522accaaec634501508c9cf5fbf8b9d0907570017bae81574532533374e0dadb4c869e69552701e255b2f0a96326663c5ced5a450a88e321ff8c767c34e9b01520dadb0c7b4d0ef8b5152a67c4abcc1147fa7c062e63a143fbac57b6abc2fdeb1e14a567735d42bc1eff2fe307445ffa8e3623990d988729e602991e6e364a906153b7a6425beeed69b8c0b61e025c72aec84d34e6f40cee737b69b449a8e2c6a3315ddd41658a25a3b032ca4584de0eacd34b382e37edbd85a2a22fbac8c0f27d6c1e7118eec9bfa158b719aefdb7067ec2220e7d97189920771e276ace0500f472ffc7daca979b198a08342c5ad322ce5b42b3f87c1a9eafff35dac36cdf95ddbb2ccdf467816b4e5ebf8dcb777f00f6a9384023d3d834603fcaf415aafcb28f9351b83b0cdbf5215e47e33ccc395401d12c06d89ed41bfb42cb51689c146ab7d649777bac7b2aa316c7dbbfc1992dfbe458117400efeb4c5e35c0fcec8a605ff91f5a9d1e0591991d478de41aa23157dd764cb9de2936640d5ccac41d8da13f", @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="14e2a9a6f94fb726854bbb7e48632b0d227d20407be76fa5638aa35552a169cfd0c442d73d054726a0902e466d3e2c502e18f94b6ca2d76fad7b4b7f94a06256bb35d73bdcd02202145d2984a15af311b9ce5a2b79ac46bfc7f6348da1cce5bf06f257c667af4dcf0f1de155f66584175a6acc8e86713f0a8189883698d8fbf52e3a2bae4ad746667925c62b98894123fad74190b16c2770c1d13b521e56d27e", @ANYRESOCT], 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB="010001ff000000d86056211458cc5b265508b45cef76ac000000"]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40040, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/212, 0xd4}], 0x5, &(0x7f00000002c0)}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="0008261859d9ded092bd7000fbdbdf25030000191c00018088000300ffffffff06ac1414ffff00140000000000f0ffffedffffff070007000a63092a1c5b38e86f0536cee091c03c907fd47e1343e0a93e167ca7efe6a6e27d5d0d15990e8d01d83827c0c6e37e2f794655b594b1ddd5aea7df8682b1d67a5934e3ec84f8982f417d5d7249b1168538fd58edb3a99f5a29b29bca854a50f4a51b1330e2d046115aaaf348c279c393fa47582905880642717a2fbf6d090c28433637f423208bf9ca", @ANYRES32, @ANYRESHEX=r3], 0xc8}, 0x1, 0x0, 0x0, 0x4008005}, 0x4004800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2697eeaaa2d5dfc8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004040) 17:57:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x34000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x48]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2362.917350][T10063] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2362.958709][T25704] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2363.079005][T25704] usb 5-1: Invalid ep0 maxpacket: 0 [ 2363.093687][ T6589] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2363.228623][T25704] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2363.288664][ T6589] usb 3-1: device descriptor read/64, error 18 [ 2363.308965][T10063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2363.338793][T25704] usb 5-1: Invalid ep0 maxpacket: 0 [ 2363.344233][T25704] usb usb5-port1: unable to enumerate USB device [ 2363.478943][T10063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2363.488104][T10063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.498161][T10063] usb 2-1: Product: syz [ 2363.504194][T10063] usb 2-1: Manufacturer: syz [ 2363.510036][T10063] usb 2-1: SerialNumber: syz [ 2363.561035][ T6589] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2363.768564][ T6589] usb 3-1: device descriptor read/64, error 18 [ 2363.888790][ T6589] usb usb3-port1: attempt power cycle 17:57:55 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40200, 0x0) write$capi20_data(r1, &(0x7f0000000140)={{0x10, 0x6, 0x87, 0x83, 0x7, 0x27ea}, 0x3, "614388"}, 0x15) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x9419057, 0x0, &(0x7f0000000080)={0x0, 0x3, 0xa8, {0x12}}}, 0x0) 17:57:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x400300, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x4c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0xa, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xf0ffff, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x60]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2364.429893][T14420] udc-core: couldn't find an available UDC or it's busy [ 2364.436900][T14420] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2364.450271][T14420] udc-core: couldn't find an available UDC or it's busy [ 2364.457247][T14420] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2364.548516][T25704] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2364.599241][ T6589] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2364.749314][T10063] cdc_ncm 2-1:1.0: bind() failure [ 2364.769799][ T6589] usb 3-1: device descriptor read/8, error -61 [ 2364.788798][T10063] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 2364.812237][T10063] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 2364.839819][T10063] usbtest: probe of 2-1:1.1 failed with error -71 [ 2364.849659][T10063] usb 2-1: USB disconnect, device number 4 [ 2364.958694][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2365.038463][ T6589] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2365.148693][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2365.157765][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.167863][T25704] usb 5-1: Product: syz [ 2365.173779][T25704] usb 5-1: Manufacturer: syz [ 2365.180215][T25704] usb 5-1: SerialNumber: syz [ 2365.218962][ T6589] usb 3-1: device descriptor read/8, error -61 [ 2365.338694][ T6589] usb usb3-port1: unable to enumerate USB device [ 2365.468417][T11183] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2365.828682][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2365.998440][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2366.007525][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.025896][T11183] usb 2-1: Product: syz [ 2366.031757][T11183] usb 2-1: Manufacturer: syz [ 2366.036521][T11183] usb 2-1: SerialNumber: syz 17:57:57 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406008be4240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_connect$printer(0x7, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x55, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0xf7, 0x10}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xe1, 0x1, 0x80, 0x8, 0x5}, 0x73, &(0x7f0000000180)={0x5, 0xf, 0x73, 0x2, [@generic={0x45, 0x10, 0x3, "3835471e05aedc5a0c90ababe9095ba5a4f29f4744b13a40f444d5add4a65001cb862ee6855e46798af3e1dd34883dee4459e80f6c8d0522d45a5a62dece6c92b36f"}, @generic={0x29, 0x10, 0x1, "9065bb9b8ee504904ade9d8b68ce76b3b51c9940bdd8830300"/38}]}, 0x3, [{0x54, &(0x7f0000000240)=@string={0x54, 0x3, "a380575915f6db9f7fe73f0501e62a3ce6cad17dd1296130d9077e2ccf2d5c6c7f07ad31c748cd6562e0aff23e2300d3bb2254a097d5b2f9098e3c3f2607ff68247545c3fb7947c2368bddb5445ccf0ec955"}}, {0x2c, &(0x7f0000000340)=@string={0x2c, 0x3, "722344ce0ce8c18ee79e560caf4a70d8a200b480008e7189b8d014ee6d3fbd67f47f53af8b79f3e5e1a8"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}]}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x68]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x1000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0xf, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:57:57 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026404000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d0000090401010202f30000090582020002000003020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) semop(0x0, &(0x7f0000000000)=[{0x1, 0x8, 0x1000}, {0x3, 0x1e7d, 0x1800}, {0x3, 0x2c, 0x800}, {0x1, 0x1, 0x1000}], 0x4) [ 2366.168424][T11183] cdc_ncm 2-1:1.0: bind() failure [ 2366.191506][T11183] cdc_ncm 2-1:1.1: bind() failure [ 2366.236128][T11183] usb 2-1: USB disconnect, device number 5 17:57:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x2000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2366.538346][ T6589] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2366.557260][T25704] cdc_ncm 5-1:1.0: bind() failure [ 2366.587175][T25704] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2366.628726][T25704] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2366.649282][T25704] usbtest: probe of 5-1:1.1 failed with error -71 [ 2366.667762][T25704] usb 5-1: USB disconnect, device number 43 [ 2366.678396][T11183] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2366.898338][ T6589] usb 3-1: config index 0 descriptor too short (expected 1124, got 100) [ 2366.906869][ T6589] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2366.924987][ T6589] usb 3-1: config 0 has no interfaces? [ 2367.038705][T11183] usb 2-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 2367.049262][T11183] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2367.067405][T11183] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2367.098801][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2367.107867][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.131835][ T6589] usb 3-1: Product: syz [ 2367.136093][ T6589] usb 3-1: Manufacturer: syz [ 2367.150537][ T6589] usb 3-1: SerialNumber: syz [ 2367.166843][ T6589] usb 3-1: config 0 descriptor?? [ 2367.278589][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2367.287676][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.303213][T11183] usb 2-1: Product: syz [ 2367.307381][T11183] usb 2-1: Manufacturer: syz [ 2367.319681][T11183] usb 2-1: SerialNumber: syz [ 2367.348352][T25704] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2367.379338][T11183] cdc_ncm 2-1:1.0: bind() failure [ 2367.582678][T14515] udc-core: couldn't find an available UDC or it's busy [ 2367.590017][T14515] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2367.748352][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2367.831402][ T6589] usb 3-1: USB disconnect, device number 63 [ 2367.938398][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2367.948321][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.956341][T25704] usb 5-1: Product: syz [ 2367.962722][T25704] usb 5-1: Manufacturer: syz [ 2367.968844][T25704] usb 5-1: SerialNumber: syz 17:57:59 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:57:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x6c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:57:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x3000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:57:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x11, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2368.008384][T25704] usb 5-1: can't set config #1, error -71 [ 2368.026579][T25704] usb 5-1: USB disconnect, device number 44 17:57:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x4000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x8000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2368.458108][T25704] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2368.578158][ T6589] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2368.868314][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2368.938618][ T6589] usb 3-1: config index 0 descriptor too short (expected 1124, got 100) [ 2368.947039][ T6589] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2368.968176][ T6589] usb 3-1: config 0 has no interfaces? [ 2369.068314][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2369.077493][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.089470][T25704] usb 5-1: Product: syz [ 2369.095117][T25704] usb 5-1: Manufacturer: syz [ 2369.100325][T25704] usb 5-1: SerialNumber: syz [ 2369.128522][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2369.137855][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.175821][ T6589] usb 3-1: Product: syz [ 2369.192998][ T6589] usb 3-1: Manufacturer: syz [ 2369.215574][ T6589] usb 3-1: SerialNumber: syz [ 2369.239676][ T6589] usb 3-1: config 0 descriptor?? [ 2369.270384][ T6589] usb 3-1: can't set config #0, error -71 [ 2369.286818][ T6589] usb 3-1: USB disconnect, device number 64 17:58:01 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000101020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009058202000200000009050302000276bddb3a2dc177c5868b955c26b02ad8dc437204dc35e15afcd909c1f02d55b2a54a5522792dbbb085e0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xa8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x74]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x9000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x18, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:01 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d5a124d6a1f1a2c0ab07b3a0000052406000105240000000d240f50088aaa0a0d00d7980b690100000000000000000006241a00000008241c000000ad7f0905810300020000000904000009058202000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_io_uring_setup(0x501a, &(0x7f0000000140)={0x0, 0x435b, 0x8, 0x3, 0x12c, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) [ 2369.668491][T10063] usb 2-1: USB disconnect, device number 6 17:58:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xd1f0000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2370.007950][ T6589] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2370.158023][T10063] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2370.218248][T25704] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2370.224968][T25704] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2370.368216][ T6589] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.378592][ T6589] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2370.387558][ T6589] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2370.442892][T25704] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2370.477561][T25704] usb 5-1: USB disconnect, device number 45 [ 2370.493722][T25704] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2370.548948][T10063] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2370.561199][T10063] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2370.571857][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2370.600230][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.627868][ T6589] usb 3-1: Product: syz [ 2370.632202][ T6589] usb 3-1: Manufacturer: syz [ 2370.636803][ T6589] usb 3-1: SerialNumber: syz [ 2370.768533][T10063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2370.777623][T10063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.797204][T10063] usb 2-1: Product: syz [ 2370.806728][T10063] usb 2-1: Manufacturer: syz [ 2370.817013][T10063] usb 2-1: SerialNumber: syz [ 2371.091640][T10063] cdc_ncm 2-1:1.1: bind() failure [ 2371.198518][T25704] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2371.345864][ T6589] usb 3-1: USB disconnect, device number 65 [ 2371.578292][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2371.777969][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2371.787044][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.803861][T25704] usb 5-1: Product: syz [ 2371.812697][T25704] usb 5-1: Manufacturer: syz [ 2371.817324][T25704] usb 5-1: SerialNumber: syz 17:58:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xe000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x73, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x7a]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:03 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x5, 0x40, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "880876"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0xdd4, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0x2c}, [@mbim={0xc, 0x24, 0x1b, 0x7f, 0x1000, 0x5, 0x8, 0x101, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x2, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0xff, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xa1, 0x1}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x6, 0x0, 0x9, 0x20, 0x80}, 0xf, &(0x7f0000000240)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4, 0x7}]}, 0x7, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x413}}, {0x45, &(0x7f0000000380)=@string={0x45, 0x3, "7f3271fa5036c9853cf263b68abfe6384777879895a071b73f3f8c481f73340612ba5b8749ec72733b9f3b5d2c6fe9f27de5f745a2a757828ab26af51d8c3e8f114995"}}, {0x1f, &(0x7f0000000400)=@string={0x1f, 0x3, "668c233d5d69095cc8f1634ec4f02724068871d9f0c0b9e5343250cbb8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x414}}, {0x4d, &(0x7f0000000480)=@string={0x4d, 0x3, "e92424476e4b0e94b1c59bb21edcb1f60db3d23df43bbc6c76bd241117f08b6d6ccbd80f2d1f47633f31500d22c4b94a860663abf811dadbf73be00e685bbd48409a7c357bb89c068ceb16"}}, {0x73, &(0x7f0000000500)=@string={0x73, 0x3, "7db178024ab818921f503419f4f3a14a950c2f5ac0bf0b9a87110049d6d877bdbd4b0dec383f9415c633991e6e1f731527dea184ccdb48fe69f9528e9c8c5dc30ca12cf638a598c99d5c7a44ec5be534e15b1b39559a51fc7565032ed32bcabf31c2076419982205c84d9ab212038677d0"}}, {0x8d, &(0x7f0000000580)=@string={0x8d, 0x3, "3f06f4ebcf4726fdb270973e2c172c329cbd8b48351bd62e7f137f41c32af16d56783d51cd8cb54e0dea12932452279d342193f04da096a68f02bc1a5f0e0b63bff4e8259d1e7a71e91e37722d9a4530d4ff7b401b6e441f2895b064979898f3c63ff042bd7b8c9d1d53804440ff8bce060d47fedb0700783034b01b2f74c09384cf1d7abfc2bedf2b5c4d"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0x0, 0x10, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x7ff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2371.968035][T25704] cdc_ncm 5-1:1.0: bind() failure [ 2372.002845][T25704] cdc_ncm 5-1:1.1: bind() failure [ 2372.044562][T25704] usb 5-1: USB disconnect, device number 46 17:58:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xf000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2372.100270][T22664] usb 3-1: new high-speed USB device number 66 using dummy_hcd 17:58:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0xfc]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2372.457853][T25704] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2372.478002][T22664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.493522][T22664] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2372.504584][T22664] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2372.678421][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2372.687487][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.697671][T22664] usb 3-1: Product: syz [ 2372.703782][T22664] usb 3-1: Manufacturer: syz [ 2372.718504][T22664] usb 3-1: SerialNumber: syz [ 2372.767904][T22664] usb 3-1: can't set config #1, error -71 [ 2372.788114][T22664] usb 3-1: USB disconnect, device number 66 17:58:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x3f000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:04 executing program 2: socket(0x23, 0x5, 0x2000000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000020000ff2505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000040000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009058202000200000009050302000235132f00000000be010075d4583352ea546085cc9ab0c2e2dadc5b8c89270f01763e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) getrlimit(0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)=@in6, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/84, 0x54}], 0x6}, 0x101) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x20, 0x21, 0x9c, {0x9c, 0xc, "62dc0017c27c45bfde7983de4e348492401da23b5d3eb00144f2a4599228a8f5a495c9817548abc57a9e5f19b6e1501a2de2425a21b7c1f5e38af9892b2e8a3da789cdbc293a059d3e68dacbb20595cf4ecd1a6637b64353b447824795ae56a1e2b1723e07991faeada3e35140e901bc0d8f05b02d624a78f0c099e47aa7f6898331801cdc9499dc316ac74d984c56d0fef1e3a1964c0f642373"}}, &(0x7f0000000000)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "051d43db92d61d982097e1f9872b7194be74ff671fbc88769baae0baf99f17ef9c4470748b8112da"}}, &(0x7f0000000240)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0x9, "64478746"}, @main=@item_012={0x1, 0x0, 0xb, "db"}, @local=@item_012={0x1, 0x2, 0x9, 'U'}, @global=@item_4={0x3, 0x1, 0x6, "c3f4ab12"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x1b4}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x11, 0x8e, "943ef0fb9201d1cae547f81a4a7b7292d5c101137303c8b869e955eec0c4df20d7e474225d906071c529e5e3279c8766771e81888c4f99adf8f9c7d25ee2e49421cecb7824d5567da9ea826f87754c659603ae87a639b4b5bdaa4f3dcec8f15cb5d729e3de6b9c73044e8c8a01660421690da2d96683e8863b2b5b5f028657771b5620ab4f4d2a6ec3bca10bf078"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000004c0)={0x20, 0x1, 0x63, "793efae4714f3f83f267e7cf97af2578f24f715fa3a3d0f546136d55aa5d26a80906f4bd61132d4d86c3e298060ebff4ccaa8ef54a55f18aaaf6544c73b7a43f8480b8a2fa0d6404f5160aed55830b3bf76a6e1e443c34a4891017044279bc0f9333f7"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x3}}) [ 2372.828086][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2372.838262][T11183] usb 2-1: USB disconnect, device number 7 17:58:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x60000000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x402, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x9effffff, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2373.076868][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2373.087448][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.109727][T25704] usb 5-1: Product: syz [ 2373.114143][T25704] usb 5-1: Manufacturer: syz 17:58:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xf0ffffff, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2373.126564][T25704] usb 5-1: SerialNumber: syz 17:58:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x2]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2373.317842][T22664] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2373.331443][T11183] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2373.557639][T22664] usb 3-1: Invalid ep0 maxpacket: 512 [ 2373.697704][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2373.708835][T22664] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2373.809004][T14687] udc-core: couldn't find an available UDC or it's busy [ 2373.816001][T14687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2373.829094][T25704] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2373.835132][T25704] cdc_ncm 5-1:1.0: bind() failure [ 2373.856488][T25704] cdc_ncm 5-1:1.1: bind() failure [ 2373.867961][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2373.885239][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.903797][T11183] usb 2-1: Product: syz [ 2373.923852][T11183] usb 2-1: Manufacturer: syz [ 2373.937678][T11183] usb 2-1: SerialNumber: syz [ 2373.947726][T22664] usb 3-1: Invalid ep0 maxpacket: 512 [ 2373.955081][T22664] usb usb3-port1: attempt power cycle [ 2374.677526][T22664] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2374.768227][T22664] usb 3-1: Invalid ep0 maxpacket: 512 [ 2374.917557][T22664] usb 3-1: new high-speed USB device number 70 using dummy_hcd 17:58:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xfcffffff, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x3]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2375.008273][T22664] usb 3-1: Invalid ep0 maxpacket: 512 [ 2375.013873][T22664] usb usb3-port1: unable to enumerate USB device [ 2375.046321][T22664] usb 5-1: USB disconnect, device number 47 [ 2375.097900][T11183] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2375.104369][T11183] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2375.155827][T11183] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2375.298777][T14730] udc-core: couldn't find an available UDC or it's busy [ 2375.305807][T14730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2375.338413][T11183] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2375.391292][T11183] usb 2-1: USB disconnect, device number 8 [ 2375.408278][T11183] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2376.097396][ T5484] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2376.477610][ T5484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2376.687742][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2376.696877][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2376.711115][ T5484] usb 2-1: Product: syz [ 2376.715286][ T5484] usb 2-1: Manufacturer: syz [ 2376.729537][ T5484] usb 2-1: SerialNumber: syz 17:58:08 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x114, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x2, 0x1, 0x4, 0x60, 0x15, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "cc6c"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0xfffc}, {0x6, 0x24, 0x1a, 0xde, 0x16}, [@mdlm_detail={0x8c, 0x24, 0x13, 0x0, "2d88922840cedfec1c1238a9b55003ec73e19eb2b7cddabfb004764c32ff9dacca55c1b99e1cc6ae2f06328616002bc78dd80a9e6cfac182f4e5f16df580c09fcffb80abc91aecc68a9bc730a295b496dc5f7cbaced0ac344c6c09c27f5708e05ce07ab99eefb87bf71b22b4bf5458aa677ecbe71e975e392498a73f3f7dd88f7729e5a0a973d8e1"}, @obex={0x5, 0x24, 0x15, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x77, 0x40, 0x0, 0x9}, @mdlm_detail={0xc, 0x24, 0x13, 0x7, "52afc386273d8834"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x20, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x75, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7a, 0x0, 0x2}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x20, 0x3, 0x0, 0x1f}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "3add"}}, {0x97, &(0x7f0000000480)=@string={0x97, 0x3, "5cb6ad6b3bcbbed617caa6d38fc8af98abd8c45d0a68840e2b59fde6b0ea83f96864024b1828d0dff13c62031245eb0354f7bc57eded1bc58268d1f39cfaded5acc12493dad6b4ce6a8dfa050fbb119d340809f67fc26f407746c194c522662752751bcf25509bac596601d6d2df2deaf9dac8d31014e05259e4afcfea3fac1554fe655de9540049040ffadfe1c8b89b6b8a3c709d"}}, {0x18, &(0x7f0000000240)=@string={0x18, 0x3, "8130cc1830d1bfde1d46accda402841f30eec0b6cccc"}}, {0x7b, &(0x7f0000000540)=@string={0x7b, 0x3, "8a1f7dacbf3ebc3bde64d62462e5e87b1d79d2640b6d2001416b99bdd1a128fecdbcd75e63b7b02aa00dbdb194a822b0e17f41383fb3b444bbec0a4f74c06bf47e4b9f342d19e3551f39a49ffe97f2b6c3aec7ba5d6ee04ab18200ad5b58818732db9d3829fd57267aae909e5ef949517497b196bd813eb48f"}}, {0xea, &(0x7f00000005c0)=@string={0xea, 0x3, "b79b1c1543c190ee1ad1ec059c07ca44ee568a99e61a43216f1062a90ddcde483a94059d41a6752b67ffd13e05832576fe773f613f3cf7f28aaeb1e8f1c31aa5bd64d9e7780bd521cfa77e137a56039c472b19f53d33d49d4dbfa2bba43077b225b241fe68c8cff718774002dd3313c97bee75e14b7dc4fb2aa4a5fa4648ea33789b44b9b459feca6612a4bce93448b93df68a016a266cea899ca6a46df22b5aaf3fcecd3c588c48f5541bf452db200aee063ca12a030b2594e991f1cd95bb0cd13da34f9a2fae425beede4cb9f91cead89fd84b3db7c1353e04bfe618542974d785072ba5013906"}}, {0x9a, &(0x7f00000006c0)=@string={0x9a, 0x3, "61055dc20d0c12406b5cff10295149099301a27a400b07acc245eb31e5fa8c4444ab285119e518c98901118565c0958fc53016e79dff12c920f87a2773c32c06c48949830652dbb50b4d48bb30ae6ae9dd47828066fb4d8c9839dea37532ab5056c565bee535b9d9b46ed9331592816772125a8a3546de77a504c83a489d786766550a8cfb661069f5c2d506d488dd36e63d0a483d5eb658"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xfff, 0xff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xfffff000, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:08 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x3, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e22, @local}}, 0x0, 0x80000001, 0x16b7, 0x8, 0x7}, &(0x7f0000000200)=0x98) r5 = syz_usb_connect$cdc_ncm(0x1, 0x79, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x40, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b261dd3b"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2000, 0x71, 0x7e}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x3f, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x7f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x8, 0x5}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x1, 0xa, 0x10, 0x6f}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x6, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c56e7c3e1269967d847a6940e3bc71c1"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x187d}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x1003, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd30c, 0x0, 0x8001}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x4]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f010000cc00000000000006241a00000008241c000000ad7f0905810300020800000904010000020d000009f1000102020d0000090582020002000000090503020002607e8f572069d264d7f5cd40953ad168505e51d9fa0ecf8a7178ad5eb35209f8c74178efeef7077035e6f5b8a84839c48a26983a9f0f00d14b0ff4c091b53f1d2c97807f63d9a0160529000000ddd5969bb898a08bd4d7db871518fe34a15dbbbeb88a6d59277681aae4"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000980)={0x0, 0x0, [], @raw_data=[0x65ac, 0x20, 0x80000000, 0x8, 0x3ff, 0x8, 0x0, 0x8, 0x10001, 0x4, 0x4, 0x7, 0xfff, 0x1, 0x0, 0xffff8001, 0x1, 0x7fffffff, 0x7fffffff, 0x6, 0x1, 0x6, 0x1ff, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0xe8, 0x7e, 0x28ce, 0x80000]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RXATTRCREATE(r5, &(0x7f0000000ac0)={0x7, 0x21, 0x1}, 0x7) unshare(0x4020000) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0xfffffffffffffffd, 0x2, 0x6}) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="4004070000000704f996c4e0436788bcbdac6ec084a7f9fa"], &(0x7f0000000b00)=ANY=[@ANYBLOB="00039300000093032a1dce456dba64b28793bfba960ae25c6a93fe68dc800fdda23ed9d84e45501e4618d0a06db0957236fe660e847a5609d6604de382f44c6823a6f4e779953a9f754158cdf26b3a11e1d75e2d038950771a29521d03e635fb4092755a90fd09000000000000000f64194c91cbc98cd9fdfb2db2e942809607000000000000001c443ba3b6e916faa78e1cc47c9e82b001190000000000000000000000006cddb55e34deed5aaecb6c9d7daf367a0d74ae123d7e55525069f763358b765f87fd0a1d69424cc14929"], &(0x7f0000000240)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x5, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x0, 0x8}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x7c, 0x0, 0x1, "3bbce450", "c23ff91f"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x1, 0xb, 0x6, 0x5, 0x4, 0x5}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x40, 0x0, 0x7b, "0091d42d9d9dfdea7e8c73d1c9af50365be205eac41a613dee5a1b57fe3e45066a68cbcacd8080cafdb38f3a521f89af2369fc3b5d7ca9eecb5d56fe17905f9964774b6c52ede357e8aeff9d019e79861ab97fe1ffd85a85e09aaf60bc2adbbadd3ed3aa82d9166d836c61282613cb502b26aa2b94ba82260aca0a"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x100, 0x94eaeb17b1ec3cba}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000680)={0x40, 0xb, 0x2, "eb52"}, &(0x7f00000006c0)={0x40, 0xf, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6, @random="c4429ff902d2"}, &(0x7f0000000740)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "54ac"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x2}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80)='nl80211\x00') 17:58:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x404, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2376.767320][ C0] raw-gadget gadget: ignoring, device is not running [ 2376.774316][ T5484] usb 2-1: can't set config #1, error -32 [ 2376.786102][ T5484] usb 2-1: USB disconnect, device number 9 17:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xffffff7f, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xffffff9e, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x5]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xfffffff0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xfffffffc, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2377.099008][T10063] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2377.131806][T25704] usb 5-1: new high-speed USB device number 48 using dummy_hcd 17:58:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x6]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2377.317271][ T5484] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2377.457480][T10063] usb 3-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2377.507531][T25704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2377.637419][T10063] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2377.646494][T10063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.663776][T10063] usb 3-1: Product: syz [ 2377.671239][T10063] usb 3-1: Manufacturer: syz [ 2377.675830][T10063] usb 3-1: SerialNumber: syz [ 2377.697555][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2377.706611][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.725120][ T5484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2377.737542][T10063] usb 3-1: selecting invalid altsetting 1 [ 2377.777259][T25704] usb 5-1: Product: syz [ 2377.782671][T25704] usb 5-1: Manufacturer: syz [ 2377.789262][T25704] usb 5-1: SerialNumber: syz [ 2377.917341][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2377.926428][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.934605][ T5484] usb 2-1: Product: syz [ 2377.938930][ T5484] usb 2-1: Manufacturer: syz [ 2377.948155][ T5484] usb 2-1: SerialNumber: syz [ 2378.177327][T10063] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 2378.183409][T10063] cdc_ncm 3-1:1.0: bind() failure [ 2378.202158][T10063] cdc_ncm 3-1:1.1: skipping garbage [ 2378.217413][T10063] cdc_ncm 3-1:1.1: bind() failure [ 2378.540389][T14873] udc-core: couldn't find an available UDC or it's busy [ 2378.547537][T14873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2378.570336][T25704] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2378.576400][T25704] cdc_ncm 5-1:1.0: bind() failure [ 2378.585304][T25704] cdc_ncm 5-1:1.1: bind() failure [ 2378.639454][T14831] udc-core: couldn't find an available UDC or it's busy [ 2378.646911][T14831] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2378.677305][ T5484] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 2378.683361][ T5484] cdc_ncm 2-1:1.0: bind() failure [ 2378.708803][ T5484] cdc_ncm 2-1:1.1: bind() failure [ 2379.202815][T14881] udc-core: couldn't find an available UDC or it's busy [ 2379.210105][T14881] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2379.825067][ T5484] usb 5-1: USB disconnect, device number 48 17:58:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x7]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0xffffffff, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:11 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2379.918088][T25704] usb 2-1: USB disconnect, device number 10 17:58:12 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030121961144c51c402a00780e770901000002010000000904000001000d000005240600010500ff01000d240f0100000001000000000000001a000000082400000000ad7f0905810300020000f50904010000020d00000901634de270521e04010102020d0100090582020002000000090503d6ef6a716dd5d00e677122a1"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:12 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, @generic={0x11, "87cf561dea5a1215791456f381d9"}, @vsock={0x28, 0x0, 0x2711}, @sco, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0xacf3, 0x9}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x8]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2380.241138][T10063] usb 3-1: USB disconnect, device number 71 17:58:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x2, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2380.367150][ T5484] usb 5-1: new high-speed USB device number 49 using dummy_hcd 17:58:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x3, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x9]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x4, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0xa]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x8, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2380.566925][T11183] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2380.766957][T11183] usb 2-1: device descriptor read/64, error 18 [ 2380.777312][ T5484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2380.788424][T10063] usb 3-1: new high-speed USB device number 72 using dummy_hcd 17:58:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2380.977079][ T5484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2380.986410][ T5484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.002453][ T5484] usb 5-1: Product: syz [ 2381.006624][ T5484] usb 5-1: Manufacturer: syz [ 2381.021050][ T5484] usb 5-1: SerialNumber: syz [ 2381.037041][T11183] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2381.187012][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2381.194819][T10063] usb 3-1: can't read configurations, error -61 [ 2381.236920][T11183] usb 2-1: device descriptor read/64, error 18 [ 2381.356895][T10063] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2381.357051][T11183] usb usb2-port1: attempt power cycle [ 2381.787030][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2381.794758][T10063] usb 3-1: can't read configurations, error -61 [ 2381.804786][T10063] usb usb3-port1: attempt power cycle [ 2382.076802][T11183] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2382.196976][ T5484] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2382.203453][ T5484] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2382.247026][T11183] usb 2-1: device descriptor read/8, error -61 [ 2382.430531][ T5484] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2382.481729][ T5484] usb 5-1: USB disconnect, device number 49 [ 2382.491787][ T5484] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2382.516891][T11183] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2382.547319][T10063] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2382.697073][T11183] usb 2-1: device descriptor read/8, error -61 [ 2382.816975][T11183] usb usb2-port1: unable to enumerate USB device [ 2382.859056][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2382.866779][T10063] usb 3-1: can't read configurations, error -61 [ 2383.026772][T10063] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2383.176842][T11183] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2383.316960][T10063] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2383.324806][T10063] usb 3-1: can't read configurations, error -61 [ 2383.345089][T10063] usb usb3-port1: unable to enumerate USB device [ 2383.536767][T11183] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2383.706732][T11183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2383.715820][T11183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.734086][T11183] usb 5-1: Product: syz [ 2383.741228][T11183] usb 5-1: Manufacturer: syz [ 2383.745836][T11183] usb 5-1: SerialNumber: syz 17:58:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0xe]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x9, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x408, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:15 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000340)={0x0, 0x31, 0xc9, {0xc9, 0x3, "bb66f2baf47000247bc559529df542a70261cc2ee7492fc35d7112200fb7e5496f382cdfc63a7715330377a7b8335bde18b432fd325ce1733909b33b9c08169c43da43dceec7f6e00778d9c7ee58d38214a64ed0302712d92dbbb1890699f075b5bd356934f6690b0cce6a6dc4bb420f1a9282137a269bd2d0950d567e9ef8d8732c1b40991f15bf267d8abdf459edc57b6cbd5d4ee800a49b360a3f96a38cf4bb02c4928d9d01f356a1c73366817cb5c64fd951edeef0b2b1dbbd20eebf43970742fdcdcf6b5d"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "4456e9a9"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x81, 0x1, {0x22, 0x2aa}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x8e8ff29fcfaf0e49, 0x15, 0x86, "b61b4aef8f96e3f173b38ebf06d5a913daf8f68d1cd4a29e854f6c925aad3459150f8309dc2427e5d37d11b3424593e3a0c2bee8d069bbdf71b113853cca968a85a92e9f280acd04f2cba92afda8e85015714c3f32d0c0b9114451c92359cf0de6695b5b60b6f1e52eba91ac84e890210f7882e292e406056ebe3948bb8493860d285b399663"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x1, 0x53, "696458382f6c92de1b1db4fb8629bdcddabd678aab8175ab20c97f298246e56a190debf0916a2a9528d1e2d9af78747c59635f4cf751353c9bb3868c85a378ca7d6b0578c2940d9140070ba593585cb0383f6d"}, &(0x7f0000000580)={0x20, 0x3, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:15 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = accept(r1, &(0x7f0000000140)=@generic, &(0x7f0000000000)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r4, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xae, 0x30}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c850}, 0x80) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:15 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000cc0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x0, 0xe, 0xc2, {0xc2, 0x31, "4cd9e5c0ac9cc8eb0562dd576680a7e6e353366e03c209dc6b7b78c2d2dcda9b436d750bb8e9ff3542d6cd35f10220a4fb54fa0db4e4a7c1b17946df450336f2e68018f72d63fa12facd42378973376489fd409df3e41d6465d6e97a25913745c6a59b166e4dcc0adaad51442bd2b92720978e28790b7a332499de5d704eaaac8a405f00ad29fe494d6d38f4f01f22772a4de3eb0c0d076962ed80eb5c24884b890c7f58f2cb6927bea5a842890933dbe0df9d7cf72564e33dacfc546d640f44"}}, &(0x7f0000000280)={0x0, 0x3, 0x22, @string={0x22, 0x3, "47fceff38fc08ee80decb266fe1540d36e68f9d91e0c3b83cb717afa43ce6163"}}, &(0x7f00000005c0)={0x0, 0xf, 0x8e, {0x5, 0xf, 0x8e, 0x1, [@generic={0x89, 0x10, 0xa, "9aab9faf9fcdaf7826cd36a27e03e9085bbdcd8c797c7def6f29ed723b0f41dfc601cd498d7cf414a0a3d9486bfbc279fbd85872a0b553db24481fff73cddeee6233d0fa803dfe24bf018fa85fe5cfaba5a5967c00db375f052e301974b8b9c5e8ab6daca4d103ade79f031b9eabfc52aba47c763eea7fba6c9b90fa41a6505c07d0c52aa142"}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x6, 0xc, "34f334ac", "c87f6c44"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x6, 0x5, 0x2, 0x81, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000780)={0x2a99119187824952, 0xa, 0x97, "c772b8b3a67e4a2444f4f63946a0163f46c2773a6af03e694f2ce6a20c63be36f087f71daac16a956815ad9d153f96103f0b9542a26c2ff882d9bd9eddc5f7402b02d5a7ed5a15995ffa4ea414c1e61b0b81cd9674f7fbba31c34faa28b1979c0a08185347616538013f616cb831acde5447b9c250e411b3e58e19c647c9639f35ee024d8aa669b2eb9b5f0878fe5cab042945e28cb761"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0xc0, 0x4}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0xb, 0x2, '?g'}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x17, 0x6}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, '{\v'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x200000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="c0994ad1ddc385ea4f7b3449f1f4e88a69239e3aed5a60efb19942de846d90e48e3119ef20596bc61a5898fbafa4747d565d818ad121d66d5d00e699e45e83fb744b8bd546592ddd5815f5ec28b555f0192aa5149c4546380794dd88fa6e0bfc8170a7bc4878d8b8d3e68da35bf854f1741f69474f181b6cb384fa0b0b1188988c8c0a31463bbfcc4cd191b0dda985019b2706ce837b5e6c7fa02dd974c1b2b8862c8bd9d649ed8d084e5b7372de733ff378fe4d8bd54f372a23582c2bcacf8afe85052c", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050008000000"], 0x24}}, 0x5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, r3, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80c004a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2010}, 0x8040) [ 2383.876877][T11183] cdc_ncm 5-1:1.0: bind() failure [ 2383.907962][T11183] cdc_ncm 5-1:1.1: bind() failure [ 2383.953059][T11183] usb 5-1: USB disconnect, device number 50 17:58:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xe, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0xf]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xf, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x60, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x48]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xf0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2384.256781][T22664] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2384.264497][T22681] usb 3-1: new high-speed USB device number 76 using dummy_hcd 17:58:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x300, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x4c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2384.376586][T11183] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2384.626754][T22664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2384.638020][T22681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:58:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x40b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2384.746762][T11183] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2384.806684][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2384.816419][T22681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2384.825774][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.842541][T22681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.852459][T22664] usb 2-1: Product: syz [ 2384.857379][T22681] usb 3-1: Product: syz [ 2384.861781][T22664] usb 2-1: Manufacturer: syz [ 2384.866985][T22681] usb 3-1: Manufacturer: syz [ 2384.872380][T22664] usb 2-1: SerialNumber: syz [ 2384.878512][T22681] usb 3-1: SerialNumber: syz [ 2384.917125][T11183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2384.929859][T11183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.940615][T11183] usb 5-1: Product: syz [ 2384.945534][T11183] usb 5-1: Manufacturer: syz [ 2384.960613][T11183] usb 5-1: SerialNumber: syz [ 2386.026510][T22681] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2386.026539][T22681] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2386.042579][T22664] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2386.050908][T22664] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2386.058422][T22681] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2386.064360][T22664] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2386.258054][T22681] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2386.273298][T22664] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2386.300948][T22664] usb 2-1: USB disconnect, device number 15 [ 2386.307895][T22681] usb 3-1: USB disconnect, device number 76 [ 2386.325069][T22664] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2386.336888][T11183] cdc_ncm 5-1:1.0: bind() failure [ 2386.349705][T22681] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2386.367312][T11183] cdc_ncm 5-1:1.1: bind() failure [ 2386.566775][T25704] usb 5-1: USB disconnect, device number 51 [ 2387.016370][T22681] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2387.028086][T22664] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2387.356492][T17408] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2387.376698][T22681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.398195][T22664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.546448][T22681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2387.555656][T22681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.565857][T22681] usb 3-1: Product: syz [ 2387.572001][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2387.581550][T22681] usb 3-1: Manufacturer: syz [ 2387.586603][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.595699][T22681] usb 3-1: SerialNumber: syz [ 2387.604501][T22664] usb 2-1: Product: syz [ 2387.610016][T22664] usb 2-1: Manufacturer: syz [ 2387.614957][T22664] usb 2-1: SerialNumber: syz [ 2387.726754][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.786554][T22681] cdc_ncm 3-1:1.0: bind() failure [ 2387.811633][T22681] cdc_ncm 3-1:1.1: bind() failure 17:58:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x60]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x900, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2387.876414][T22664] cdc_ncm 2-1:1.0: bind() failure [ 2387.899885][T22681] usb 3-1: USB disconnect, device number 77 [ 2387.909544][T22664] cdc_ncm 2-1:1.1: bind() failure 17:58:19 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "85"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0xff, 0xa3}, {0x6, 0x24, 0x1a, 0x2, 0x2a}, [@obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x80, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x3, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x19, 0x5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0xc, 0x7f, 0x20, 0x9}, 0xcc, &(0x7f0000000340)={0x5, 0xf, 0xcc, 0x2, [@generic={0xbd, 0x10, 0x2, "baa0c1c15cec93eea62b69fdf41f8fe8d62f6e03e5b3e334c5c809bcfc5466ce7bdd6e03829b2267f2ecc4c40c2733902d989dd1d1fcd7f3dca805edd7d2a6c775fd5c46a7e53e0dc4848f5dc1e700ee660d6d9fdddc9e284837ef8f35df4d956c2f358c8735b17f9f758dfb228cf7c9194d4758194fe4d12ad4c3d30c4a629137c5e2101f167f6d26c216ed02a99304a2094d08eb6def7b0d865b680ac72a5082f96514e5e890a1bab5556e8ddaeef8215783f9ba74bf1d59f4"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0xe1, 0x4}]}, 0x3, [{0x68, &(0x7f0000000240)=@string={0x68, 0x3, "cca3a4d495f79fe38d250d9894fb30b26e57b9f296cc60a9aa21eb6c79eb57fee001643cbfbca76d904124fce0b1804ad56b65e6f8f9a7899dc05164484ecf8b84a129e9a0fea69033871142de612bb7f1dfbd343e55cc0aabcf719dd03f09787e7c052e0ace"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x447}}, {0xf9, &(0x7f0000000440)=@string={0xf9, 0x3, "6e6218162a830e9a1f3d76c02da0f7803959eba88027af52ebee8735ffedd67522eb6886c8ff74a73d2ef2f8f68dc00d2e204bddcf76e0c02216583701e61335bd1533a43a8d0ef62e58ca64239dad5b713c8bcbd0566ea6eb5c7e4cade306fd77e0a92581d0c661ca0a5828dd8e62a55116a7beb937a5ec5dd229ccd3be9ef48e55d496bebc8c3d346e028c8673e1214dd0e67c9f8ceb3e684178bf54d58bd1be1e7e6f0949d23855edb05ccebb0fbc8c020748d05fed3c92773004c6a7e66f5ca13119d761ed551762cf0ac4d1f0ba9b7a4796face9845f1e231627ba274d3ad32f743a0ff143ce6a74e61cf405518a2dc9be29e8292"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x7, 0x0, 0xfffffff8, 0x20, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1ff, 0xfffc, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x410, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:19 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080880}, 0x4000000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7ff}}, ["", "", "", "", "", ""]}, 0x24}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="456ebbfd5e64740d2991b3654a8940180638580f27a7b50bcd4a18fcfe97a1002bdeede088eac5e80700000000000000abb76eba73ca15b42ae786caa7ff7f00000000000012e93278c9361e7159595c6391c82ff9ac55f73317dc31ec", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf25010000000000000008410000001c0018000000016574683a76657468315f746f5f62617461647600"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_usb_control_io(r0, 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x87, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000002c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000240)={0x1, 0x3, 0x81, 0x8, 0x6, 0x3f, 0x1ff}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:19 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a440000102039291cc01090264000201000035976284048a8e6d00d102bda4f244a0a7b700000d240f0100000000000000000006241a00000008241c000000ad7f0905810904010102020d0000090582020002000000290503020002d562537f7c1100"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/212, 0xd4}], 0x5, &(0x7f00000002c0)}, 0xfffffffe}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x3, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x6862, @ipv4={[], [], @private=0xa010100}, 0x8}}, 0x7, 0x9, 0x8, 0x7f, 0x43}, &(0x7f0000000000)=0x65) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2387.956044][T22664] usb 2-1: USB disconnect, device number 16 [ 2387.996397][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2388.030657][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:58:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xd1f, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2388.060498][T17408] usb 5-1: Product: syz [ 2388.074802][T17408] usb 5-1: Manufacturer: syz [ 2388.126702][T17408] usb 5-1: can't set config #1, error -71 [ 2388.147454][T17408] usb 5-1: USB disconnect, device number 52 17:58:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xe00, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x68]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xf00, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x6c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x1f0d, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x74]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2388.456295][T22681] usb 3-1: new high-speed USB device number 78 using dummy_hcd 17:58:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x3f00, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2388.606307][T22664] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2388.616421][T17408] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2388.646641][T22681] usb 3-1: device descriptor read/64, error 18 [ 2388.886274][T22664] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 2388.916941][T22681] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2388.976496][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2389.006482][T22664] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2389.014207][T22664] usb 2-1: can't read configurations, error -61 [ 2389.106266][T22681] usb 3-1: device descriptor read/64, error 18 [ 2389.146261][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2389.155364][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.173598][T17408] usb 5-1: Product: syz [ 2389.177954][T22664] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2389.193386][T17408] usb 5-1: Manufacturer: syz [ 2389.198159][T17408] usb 5-1: SerialNumber: syz [ 2389.226465][T22681] usb usb3-port1: attempt power cycle [ 2389.456498][T22664] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 2389.576278][T22664] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2389.584001][T22664] usb 2-1: can't read configurations, error -61 [ 2389.592263][T22664] usb usb2-port1: attempt power cycle [ 2389.898012][T15184] udc-core: couldn't find an available UDC or it's busy [ 2389.905021][T15184] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2389.916183][T17408] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2389.922603][T17408] cdc_ncm 5-1:1.0: bind() failure [ 2389.931847][T17408] cdc_ncm 5-1:1.1: bind() failure [ 2389.937224][T22681] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2390.116129][T22681] usb 3-1: device descriptor read/8, error -61 [ 2390.306017][T22664] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2390.386019][T22681] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2390.436131][T22664] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 2390.556100][T22681] usb 3-1: device descriptor read/8, error -61 [ 2390.562393][T22664] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2390.571928][T22664] usb 2-1: can't read configurations, error -61 [ 2390.676108][T22681] usb usb3-port1: unable to enumerate USB device [ 2390.725958][T22664] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2390.856227][T22664] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 2390.975996][T22664] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2390.983771][T22664] usb 2-1: can't read configurations, error -61 [ 2390.990583][T22664] usb usb2-port1: unable to enumerate USB device 17:58:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x6000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x7a]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x414, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:23 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026400010000000904000001020d00000524060000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002f959465937e452cd25f5348f6c97ab8735c846e5faf34063bdbb736e8e912258ab4589fe202a026c28315312ed50392682a552fbd34739bca89def3dfec0e4687527ce65bc94095cefae15062ea2d161a96f8a32cfe597f8d84cb868b2ec0590fb340a3058c3de793f7077261701cff502361d53abd7cb699bbe50272878fa9397302cdacca6c3fb507ef335bdbe351aea0e7ace"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x7, 0x0, [], {0x0, @bt={0x7, 0xfff, 0x0, 0x2, 0xffffffff7fffffff, 0x2efb63b0, 0x6, 0x2, 0x4, 0x200, 0x0, 0x3ff, 0x1, 0x3, 0x2, 0x8, {0x5, 0x3}, 0x5, 0x3}}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0xe71, 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x5a, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x3}, &(0x7f0000000340)=0x28) 17:58:23 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x90) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:23 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010302640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010400000000000004010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000000000003d00000008000300", @ANYRES32=r3, @ANYBLOB="08005d0001390d6e9086259a4d00feff"], 0x24}, 0x1, 0x0, 0x0, 0x40000d5}, 0x20008094) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x6c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x845}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x38}}, 0x4) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffd}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2391.226849][T10063] usb 5-1: USB disconnect, device number 53 17:58:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xf000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0xfc]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x34000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x400300, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xf0ffff, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2391.615969][ T6589] usb 3-1: new high-speed USB device number 82 using dummy_hcd 17:58:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x2]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x1000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2391.747700][T22664] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2391.758320][T10063] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2391.986065][ T6589] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2391.996239][ T6589] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2392.005146][ T6589] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2392.116128][T22664] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2392.126622][T22664] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 17:58:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2392.156324][T10063] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 2392.164805][T10063] usb 5-1: can't read configurations, error -22 [ 2392.196339][ T6589] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2392.205421][ T6589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.214240][ T6589] usb 3-1: Product: syz [ 2392.222084][ T6589] usb 3-1: Manufacturer: syz [ 2392.227640][ T6589] usb 3-1: SerialNumber: syz [ 2392.277453][ T6589] cdc_ncm 3-1:1.0: bind() failure [ 2392.296626][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2392.310552][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.319247][T22664] usb 2-1: Product: syz [ 2392.323603][T22664] usb 2-1: Manufacturer: syz [ 2392.328823][T22664] usb 2-1: SerialNumber: syz [ 2392.337512][T10063] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2392.341981][T22664] usb 2-1: config 0 descriptor?? [ 2392.756164][T10063] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 2392.771355][T10063] usb 5-1: can't read configurations, error -22 [ 2392.785875][T10063] usb usb5-port1: attempt power cycle [ 2393.515702][T10063] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2393.735999][T10063] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 2393.744452][T10063] usb 5-1: can't read configurations, error -22 [ 2393.905915][T10063] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2394.155803][T10063] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 2394.164275][T10063] usb 5-1: can't read configurations, error -22 [ 2394.170969][T10063] usb usb5-port1: unable to enumerate USB device [ 2394.584855][T22664] usb 3-1: USB disconnect, device number 82 17:58:27 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x33, 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x3]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x2000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:27 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000a003531685d72ef202020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:27 executing program 2: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000140)=0x4) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2395.355511][T22664] usb 2-1: USB disconnect, device number 21 17:58:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x3000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x4]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x4000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x8000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x5]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2395.696226][T17408] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2395.709825][T10063] usb 5-1: new high-speed USB device number 58 using dummy_hcd 17:58:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x9000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2395.845571][T22664] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2396.055552][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2396.105887][T10063] usb 5-1: config 1 has an invalid descriptor of length 133, skipping remainder of the config [ 2396.121886][T10063] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2396.215576][T22664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2396.226922][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2396.236266][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.244245][T17408] usb 3-1: Product: syz [ 2396.257261][T17408] usb 3-1: Manufacturer: syz [ 2396.261873][T17408] usb 3-1: SerialNumber: syz [ 2396.305976][T10063] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2396.315056][T10063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.354776][T10063] usb 5-1: Product: syz [ 2396.372551][T10063] usb 5-1: Manufacturer: syz [ 2396.377382][T10063] usb 5-1: SerialNumber: syz [ 2396.396517][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2396.411601][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.426823][T10063] usb 5-1: selecting invalid altsetting 1 [ 2396.444481][T22664] usb 2-1: Product: syz [ 2396.459389][T22664] usb 2-1: Manufacturer: syz [ 2396.464150][T22664] usb 2-1: SerialNumber: syz [ 2396.845542][T10063] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 2396.851639][T10063] cdc_ncm 5-1:1.0: bind() failure [ 2397.175415][T22664] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 2397.181549][T22664] cdc_ncm 2-1:1.0: bind() failure [ 2397.195212][T22664] cdc_ncm 2-1:1.1: bind() failure [ 2397.227335][T22664] usb 5-1: USB disconnect, device number 58 [ 2397.415471][T17408] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2397.421972][T17408] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2397.440282][T17408] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2397.635008][T17408] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2397.670519][T17408] usb 3-1: USB disconnect, device number 83 [ 2397.696228][T17408] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2397.995285][T22664] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2398.355334][T22664] usb 5-1: config 1 has an invalid descriptor of length 133, skipping remainder of the config [ 2398.365843][T22664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2398.395288][T17408] usb 3-1: new high-speed USB device number 84 using dummy_hcd 17:58:30 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000140)={0x0, 0x9, 0xffffffff}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x6]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xd1f0000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2398.477300][T22681] usb 2-1: USB disconnect, device number 22 17:58:30 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000230d240f0100000000000000000006241a00000008241c010000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/212, 0xd4}], 0x5, &(0x7f00000002c0)}}], 0x1, 0x40000100, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000340)=0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x3, 0xfffffff8, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)=[0x2, 0x80000000, 0x4], &(0x7f00000000c0)=[0x9, 0x8, 0x4], &(0x7f00000001c0)=[0x80, 0x1f], 0x0, 0x0, 0x9}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2398.615616][T22664] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2398.634274][T22664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.674712][T22664] usb 5-1: Product: syz [ 2398.692450][T22664] usb 5-1: Manufacturer: syz [ 2398.745617][T22664] usb 5-1: can't set config #1, error -71 [ 2398.757264][T22664] usb 5-1: USB disconnect, device number 59 17:58:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905010000000000000904010000020d0000090401010ee9b108d892bc06020002000000090503020002c5e03aa0e2c24463e48c278cb6a83dceb8369543"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000300)={0xa30000, 0x20, 0x80, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x500cc, 0x401, [], @string=&(0x7f0000000280)=0xff}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000240)={0x3}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xe000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2398.830747][T17408] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2398.844296][T17408] usb 3-1: can't read configurations, error -71 17:58:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xf000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x7]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x3f000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x8]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2399.035475][T22681] usb 2-1: new high-speed USB device number 23 using dummy_hcd 17:58:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x60000000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2399.135192][T22664] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2399.235139][T17408] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2399.395255][T22681] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2399.505204][T22664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2399.575490][T22681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2399.584564][T22681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.603604][T17408] usb 3-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 2399.614043][T22681] usb 2-1: Product: syz [ 2399.618399][T22681] usb 2-1: Manufacturer: syz [ 2399.632060][T22681] usb 2-1: SerialNumber: syz [ 2399.636958][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2399.647584][T17408] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2399.685247][T22664] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2399.694327][T22664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.711036][T22664] usb 5-1: Product: syz [ 2399.717765][T22664] usb 5-1: Manufacturer: syz [ 2399.722383][T22664] usb 5-1: SerialNumber: syz [ 2399.815431][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2399.824599][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.834775][T17408] usb 3-1: Product: syz [ 2399.841736][T17408] usb 3-1: Manufacturer: syz [ 2399.846781][T17408] usb 3-1: SerialNumber: syz [ 2400.126449][T15430] udc-core: couldn't find an available UDC or it's busy [ 2400.133660][T15430] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2400.365242][T22681] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 2400.371439][T22681] cdc_ncm 2-1:1.0: bind() failure [ 2400.385535][T22681] cdc_ncm 2-1:1.1: bind() failure [ 2400.995079][T17408] cdc_ncm 3-1:1.0: bind() failure [ 2401.015788][T17408] cdc_ncm 3-1:1.1: bind() failure [ 2401.145109][T22664] cdc_ncm 5-1:1.0: bind() failure [ 2401.175137][T22664] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 2401.195122][T22664] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 2401.202060][T10063] usb 3-1: USB disconnect, device number 85 [ 2401.215398][T22664] usbtest: probe of 5-1:1.1 failed with error -71 [ 2401.234808][T22664] usb 5-1: USB disconnect, device number 60 17:58:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x9]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x9effffff, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:33 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x45, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000140)=""/69}, &(0x7f00000001c0)=0x78) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2401.591049][T25704] usb 2-1: USB disconnect, device number 23 [ 2401.874884][T17408] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2401.984887][T22664] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2402.164890][T25704] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2402.234953][T17408] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2402.344961][T22664] usb 3-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 2402.355482][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2402.373530][T22664] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 2402.405103][T17408] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2402.414457][T17408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.431866][T17408] usb 5-1: Product: syz [ 2402.439391][T17408] usb 5-1: Manufacturer: syz [ 2402.444036][T17408] usb 5-1: SerialNumber: syz 17:58:34 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a109000001020301a9509b7d0902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2402.545090][T17408] usb 5-1: can't set config #1, error -71 [ 2402.555282][T25704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2402.563819][T17408] usb 5-1: USB disconnect, device number 61 17:58:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = signalfd(r2, &(0x7f0000000000)={[0x7f]}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x2c, "0a383c7e2e03165797245ef1fbd7180b4016275c4132a2d1eed323d9c7815925bbed676aebd2224e7527502b"}, &(0x7f0000000180)=0x34) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x8d32, 0x1, 0x9, 0x7ff, r4}, 0x10) 17:58:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xf0ffffff, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0xa]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2402.644991][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2402.664322][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.710927][T22664] usb 3-1: Product: syz [ 2402.738094][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2402.744842][T22664] usb 3-1: Manufacturer: syz [ 2402.753852][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.775774][T25704] usb 2-1: Product: syz [ 2402.780182][T25704] usb 2-1: Manufacturer: syz 17:58:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xfcffffff, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2402.806702][T22664] usb 3-1: can't set config #1, error -71 [ 2402.817260][T22664] usb 3-1: USB disconnect, device number 86 [ 2402.823245][T25704] usb 2-1: SerialNumber: syz 17:58:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xfffff000, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xffffff7f, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0xe]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xffffff9e, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2403.054925][T17408] usb 5-1: new high-speed USB device number 62 using dummy_hcd 17:58:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0xf]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2403.244909][T22664] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2403.454846][T17408] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2403.462893][T17408] usb 5-1: can't read configurations, error -61 [ 2403.604829][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2403.615998][T17408] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2403.775005][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2403.784098][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.800832][T22664] usb 3-1: Product: syz [ 2403.808647][T22664] usb 3-1: Manufacturer: syz [ 2403.813340][T22664] usb 3-1: SerialNumber: syz [ 2403.954977][T25704] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2403.961446][T25704] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2403.972714][T25704] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2404.014904][T17408] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2404.022628][T17408] usb 5-1: can't read configurations, error -61 [ 2404.029296][T17408] usb usb5-port1: attempt power cycle [ 2404.189106][T25704] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2404.214518][T25704] usb 2-1: USB disconnect, device number 24 [ 2404.236331][T25704] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2404.745043][T17408] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2404.934758][ T5484] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2404.964651][T22664] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2404.971271][T22664] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2404.988302][T22664] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2404.994987][T17408] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2405.002687][T17408] usb 5-1: can't read configurations, error -61 [ 2405.154611][T17408] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2405.193256][T22664] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2405.229229][T22664] usb 3-1: USB disconnect, device number 87 [ 2405.247199][T22664] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2405.324734][ T5484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2405.405177][T17408] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2405.412815][T17408] usb 5-1: can't read configurations, error -61 [ 2405.427394][T17408] usb usb5-port1: unable to enumerate USB device [ 2405.504757][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2405.518460][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.532009][ T5484] usb 2-1: Product: syz [ 2405.542604][ T5484] usb 2-1: Manufacturer: syz [ 2405.553533][ T5484] usb 2-1: SerialNumber: syz 17:58:37 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:37 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_complete(0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000140)={0x690, 0x360, 0x550, 0x960, 0x6, 0x3, 0xf, 0x2, {0x0, 0xffff}, {0x5, 0x5, 0x1}, {0x4, 0x8000}, {0x6, 0x8}, 0x1, 0x40, 0x3, 0x7, 0x1, 0x3, 0x101, 0x800, 0x1000, 0x8, 0x2, 0x800, 0x6, 0x200, 0x1, 0xa}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8}}, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x80, 0x2, 0x0, 0x4, 0xa, [{0x7ff, 0xc, 0x7, [], 0x504}, {0x4, 0x5, 0x7, [], 0x2000}, {0xb4, 0x80000000, 0x100000000, [], 0x1000}, {0x6, 0x53, 0xffffffffffffff00, [], 0x902}, {0x9, 0xffffffffffffffe1, 0x3f, [], 0x204}, {0x1f, 0x80000000, 0x7ff}, {0x20, 0x7fff, 0x80000000, [], 0x84}, {0x7, 0x7, 0x0, [], 0x1f81}, {0xd4, 0x1, 0x9, [], 0x480}, {0x65c, 0x1, 0x8, [], 0x202}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2405.622338][ T5484] usb 2-1: can't set config #1, error -71 [ 2405.631980][ T5484] usb 2-1: USB disconnect, device number 25 [ 2405.964804][T17408] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2406.074549][ T5484] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2406.144560][T22664] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2406.324758][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2406.464586][ T5484] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2406.494738][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2406.503856][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.514912][T22664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2406.525903][T17408] usb 3-1: Product: syz [ 2406.530984][T17408] usb 3-1: Manufacturer: syz [ 2406.536088][T17408] usb 3-1: SerialNumber: syz 17:58:38 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d00000524060001052a0000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904018000020d00000904010102020d0000090509050302000200000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xd7, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x60, 0xff, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x1ff, 0x78, 0x1, {0x22, 0x8de}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x4, 0x4}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x6, 0x2, 0xa1, 0x10, 0x81}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0xa, [{0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="dd976a7380a1d1940774b74c"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3009}}, {0xc0, &(0x7f0000000380)=@string={0xc0, 0x3, "ec19440f1e66c06fcf569e8f16bff13683d29410d876c5afcef2c7f41117d3f1b8ee7804ac0577dd348ddb04e9643a6ee33b68cdde821d3341d98d9c6bc946f36a67945f2041684d758ab70bd3946266d1ee3992c11a49f3e471e0ff4ae2fc462b8dba221365f816351128dad3194ec5fd15eebb1a1993e5a6aa13ba2e14609f0245c15fcc4f809f144f9eba6872b24641312b297f6a4e738c13254b990e71791ef93e67119f5cb99fcf6b7c742f004ee2cbcb36c22e72f194da74487ec0"}}, {0x3b, &(0x7f0000000440)=@string={0x3b, 0x3, "e137f3c944ae43ccfad1c6d6e9c06d6a25691e47ba2b4eba03e8b967fa0092d468c393143c15de052fd7db61054ba39759635e0aa65f82fed3"}}, {0x87, &(0x7f0000000480)=@string={0x87, 0x3, "dc9dedf39b8da1ce68aaee10a3742eff347773ad3328ebdfef54f190a230d32530bbe10a311f2dad22e7bf329349ed2701a41793e706afd969456dbfdba14da86caf53a77d4d2c6f6de3c6d9eaf74909c1feb9be123d406680cbcd3230d69508a2dc0db59ae2cb4d092ccd67b5cece687902e1723e956271f83089165222542f8bf8707fd7"}}, {0x100, &(0x7f0000000540)=@string={0x100, 0x3, "fa4aa6ead0deeccf4709bf6838580a14716469f52aad2b82eb09b875655a9381cef4065725f026c63ac03e4a17823db10e361d90635b7365dde10ca57c4e6449cab6f739b318ff9aa2772132cc7050281d8f4683173c0b8d9be8c5cba4563f6f68162fd59a582e02900339cffe1c6ac77e87e8f0749aed222069074834155420cd4144a39e9abb30bb120dba62ca86622fba098ddd21bd94a1a426c23b786313206eb3ea3eb96e8e6818ea0a5210331c3f66cbd8c8bb6c6fa6c9f8f7629733ebbda7911ed70cbaf039e31568a2bf0006f40ff3c3e4624ed11c1f7e810c96040fe18c246659679db3b4847b4ab0be14fe3de53aa686bde17eafe7ea1cc9f0"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x807}}, {0x5c, &(0x7f0000000680)=@string={0x5c, 0x3, "f39d0b53269ca47ac3909a5437734cef88710cddc30f15e805c6d0c618e7bd440653ac5ad63b93cbb0f04c83b3aa49d9a0b9547f28aa18852784e38d79492f7ff675f24c26621f77df17973bf9da5f67f1f7c1471b0e0a909042"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x422}}, {0xe4, &(0x7f0000000740)=@string={0xe4, 0x3, "7b8b087688a9f4949696142f60f36fcd87e73cad8737d2406524e54edcf8dd0e8a9d9f8eee3468ed8b9d67aedb5169a6978033f590f24e4b8be2fdbfebe0ee8a3367fcdad5adebd08dd751fb2d271f311563f41ac8d0236c53c5d305d49f57e495068cabb7222eb4aaa8e4d470b6370a69ef16988321c218dac17f50486961fceaf6a084bdf78c8a227ebde6a3a8f7d3a5d430d02e28ce8761f81197ee99f53236babcf58f9e69733febff5441c97ac009627d64bbdaa416362c0a01c6b2725e8edc4818db5bd869f4f573dee81ff9630209fa807ebfb5fdb68cbc18361cc6775934"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000ac0)={0x24, &(0x7f0000000900)={0x40, 0x7, 0x96, {0x96, 0xb, "cae77528c82168265a301951307f6ffa856c3af0cc533fc47b9c92eb394a7f0fcead991a5ad15752797775ac7f951d5a3dea9246a54305f1f458474258555496c7a14c67872e1488e1a8c1b9ceb4107978a82e59d827cac38b90362df99b7d2baf70061ad31dda8bcb2b438af893eadd0a3c6a108f732eda4d08b5ac056347d04e55bde9e465baf18fd381bd6c98a9202561427f"}}, &(0x7f00000009c0)={0x0, 0x3, 0x48, @string={0x48, 0x3, "83e2c50f0b64536ffcb1fa188a97a7f0f6b92befe43afba9f7e43af708c20a8e5030281ef3614d1367ab236378ce15bce3887bc6fe717027a03df2e7534c8882d248776e7069"}}, &(0x7f0000000a40)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x1, 0x1, 0x9, "97"}, @main=@item_4={0x3, 0x0, 0xa, "72227f98"}, @local=@item_012={0x1, 0x2, 0xa, "e8"}, @global=@item_4={0x3, 0x1, 0x2, "da3238f3"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc7b, 0x3f, 0x1, {0x22, 0xef6}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x0, 0xc, 0x29, "c504bca13dcb63dc7525397ae4407fa961cf346b2e029b26c6ef200c4a28c4cfc45f4452063df1968e"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x52}, &(0x7f0000000bc0)={0x20, 0x1, 0xda, "3a7e3af9ca7135417214dd7cd03474c20bd22a173f49a4f13504b74249874b149642f879183e9f8d391273acce62ab3b5186010d152c0be63a015acc3fd26986c4ce1028ce8fe3ff02cccc6338ffca0d96aae635c62eaa9e186f411b56cb474d3eccf4edf16add96f592eab917b466a394f2e4ce336d0ef427640bbee4f4da8f1d97216d82e292111d5ef58cde8f8cfc613f2a3242cd3067b21e01c3a796719eee15dc1cf2007513dcd55c3556157eb9708ca4968205af306091a3b47a1721ef42b16a3875d77a857930114f16d01f4da82c6c71f854f4db067a"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000d40)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000d80)=0x10) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xfffffff0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x48]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2406.614718][T17408] usb 3-1: can't set config #1, error -71 [ 2406.627511][T17408] usb 3-1: USB disconnect, device number 88 [ 2406.654744][ T5484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2406.671323][ T5484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.694612][T22664] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2406.700574][ T5484] usb 2-1: Product: syz [ 2406.717582][T22664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.719675][ T5484] usb 2-1: Manufacturer: syz [ 2406.732882][T22664] usb 5-1: Product: syz [ 2406.737423][T22664] usb 5-1: Manufacturer: syz [ 2406.742154][T22664] usb 5-1: SerialNumber: syz 17:58:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xfffffffc, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2406.764483][ T5484] usb 2-1: SerialNumber: syz 17:58:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0xffffffff, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x4c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x2, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x3, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2407.134648][T17408] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2407.494580][T17408] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2407.504817][T17408] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2407.516603][T17408] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2407.544333][T17408] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2407.557319][T17408] usb 3-1: config 1 interface 1 has no altsetting 0 [ 2407.724433][T17408] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2407.733728][T17408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.750701][T17408] usb 3-1: Product: syz [ 2407.754999][T17408] usb 3-1: Manufacturer: syz [ 2407.759607][T17408] usb 3-1: SerialNumber: syz [ 2407.815566][T17408] cdc_ncm 3-1:1.0: skipping garbage [ 2407.894717][T22664] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2407.901914][T22664] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 2407.916604][ T5484] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2407.923020][ T5484] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2407.941145][ T5484] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2408.034439][T17408] usb 3-1: selecting invalid altsetting 0 [ 2408.040225][T17408] usb 3-1: selecting invalid altsetting 0 [ 2408.055462][T17408] cdc_ncm 3-1:1.0: bind() failure [ 2408.068104][T17408] usb 3-1: selecting invalid altsetting 0 [ 2408.073927][T17408] cdc_ncm: probe of 3-1:1.1 failed with error -22 [ 2408.094468][T17408] usb 3-1: selecting invalid altsetting 0 [ 2408.104846][T17408] cdc_mbim: probe of 3-1:1.1 failed with error -22 [ 2408.112086][T17408] usb 3-1: selecting invalid altsetting 0 [ 2408.129143][T22664] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2408.148916][ T5484] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2408.194490][T17408] usbtest: probe of 3-1:1.1 failed with error -22 [ 2408.206105][T22664] usb 5-1: USB disconnect, device number 66 [ 2408.212779][T22664] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 2408.238046][ T5484] usb 2-1: USB disconnect, device number 26 [ 2408.273628][ T5484] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2408.914251][T22664] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2408.921947][T11183] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2408.945965][T15778] udc-core: couldn't find an available UDC or it's busy [ 2408.952929][T15778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2409.284496][T22664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2409.295690][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2409.464369][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2409.473722][T22664] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2409.483143][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.491559][T22664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.499766][T11183] usb 2-1: Product: syz [ 2409.504004][T22664] usb 5-1: Product: syz [ 2409.508482][T11183] usb 2-1: Manufacturer: syz [ 2409.513163][T22664] usb 5-1: Manufacturer: syz [ 2409.517941][T11183] usb 2-1: SerialNumber: syz [ 2409.523487][T22664] usb 5-1: SerialNumber: syz 17:58:41 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x60]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2409.694393][T11183] cdc_ncm 2-1:1.0: bind() failure [ 2409.703020][T11183] cdc_ncm 2-1:1.1: bind() failure [ 2409.734435][T22664] cdc_ncm 5-1:1.0: bind() failure [ 2409.747267][T22664] cdc_ncm 5-1:1.1: bind() failure [ 2409.799983][T22664] usb 5-1: USB disconnect, device number 67 [ 2409.806103][T11183] usb 2-1: USB disconnect, device number 27 [ 2410.204200][T11183] usb 2-1: new high-speed USB device number 28 using dummy_hcd 17:58:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000140)=""/189, 0xbd) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)="9b20627ac0093f37ddf3ac2ea45b9f5f92", 0x11, 0x40080, &(0x7f0000000240)={0xa, 0x4e20, 0x1fffc0, @mcast1, 0xfffffff9}, 0x1c) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x4, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:42 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000101020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009058202000200000009050302000276bddb3a2dc177c5868b955c26b02ad8dc437204dc35e15afcd909c1f02d55b2a54a5522792dbbb085e0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xa8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x68]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2410.333695][T22664] usb 3-1: USB disconnect, device number 89 17:58:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x8, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x6c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x9, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2410.564395][T11183] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:58:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x74]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0xe, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2410.701286][ T6589] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2410.744477][T11183] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2410.753562][T11183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.765686][T22664] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2410.788410][T11183] usb 2-1: Product: syz [ 2410.792724][T11183] usb 2-1: Manufacturer: syz [ 2410.806364][T11183] usb 2-1: SerialNumber: syz [ 2411.084694][ T6589] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2411.095749][ T6589] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2411.134140][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2411.264176][ T6589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2411.273631][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.298496][ T6589] usb 5-1: Product: syz [ 2411.302711][ T6589] usb 5-1: Manufacturer: syz [ 2411.307799][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2411.324666][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.332676][T22664] usb 3-1: Product: syz [ 2411.344615][ T6589] usb 5-1: SerialNumber: syz [ 2411.359763][T22664] usb 3-1: Manufacturer: syz [ 2411.364540][T22664] usb 3-1: SerialNumber: syz [ 2411.616936][ T6589] cdc_ncm 5-1:1.1: bind() failure [ 2411.964025][T11183] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2411.970557][T11183] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2412.000915][T11183] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2412.179632][T11183] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2412.229210][T11183] usb 2-1: USB disconnect, device number 28 [ 2412.245872][T11183] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2412.564044][T22664] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2412.577855][T22664] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2412.595105][T22664] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2412.788192][T22664] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2412.818754][T22664] usb 3-1: USB disconnect, device number 90 [ 2412.836202][T22664] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2412.962921][T10063] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2413.363995][T10063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2413.397551][T11183] usb 5-1: USB disconnect, device number 68 [ 2413.533967][T25704] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2413.554207][T10063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2413.563269][T10063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:58:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x7a]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0xf, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2413.582454][T10063] usb 2-1: Product: syz [ 2413.586972][T10063] usb 2-1: Manufacturer: syz [ 2413.591578][T10063] usb 2-1: SerialNumber: syz [ 2413.633950][T10063] usb 2-1: can't set config #1, error -71 [ 2413.651158][T10063] usb 2-1: USB disconnect, device number 29 [ 2413.893880][T25704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2414.084278][T25704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2414.093363][T25704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.101472][T25704] usb 3-1: Product: syz [ 2414.106265][T25704] usb 3-1: Manufacturer: syz [ 2414.112075][T25704] usb 3-1: SerialNumber: syz 17:58:46 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00030c0000000c03549621ca1b7dbac458a3"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0xfffffffffffffeef}}}, 0x0) 17:58:46 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000101020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009058202000200000009050302000276bddb3a2dc177c5868b955c26b02ad8dc437204dc35e15afcd909c1f02d55b2a54a5522792dbbb085e0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xa8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x7, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:46 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000000)="543129810e745f15d56c3ad7b64156f3e34e6b16e6f0", &(0x7f0000000140)=""/72}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x60, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0xfc]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2414.239446][T25704] cdc_ncm 3-1:1.0: bind() failure [ 2414.262994][T25704] cdc_ncm 3-1:1.1: bind() failure [ 2414.317204][T25704] usb 3-1: USB disconnect, device number 91 17:58:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) 17:58:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x2, 0x6000}}, 0x14}}, 0x0) 17:58:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x3, 0x6000}}, 0x14}}, 0x0) [ 2414.569824][T11183] usb 5-1: new high-speed USB device number 69 using dummy_hcd 17:58:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x4, 0x6000}}, 0x14}}, 0x0) 17:58:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x2]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2414.659298][T10063] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2414.733812][T25704] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2414.933818][T11183] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2414.945000][T11183] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2415.074016][T10063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2415.103778][T11183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2415.113045][T11183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.129906][T11183] usb 5-1: Product: syz [ 2415.137588][T11183] usb 5-1: Manufacturer: syz [ 2415.142180][T11183] usb 5-1: SerialNumber: syz [ 2415.143939][T25704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2415.264196][T10063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2415.273248][T10063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.281613][T10063] usb 2-1: Product: syz [ 2415.287873][T10063] usb 2-1: Manufacturer: syz [ 2415.293946][T10063] usb 2-1: SerialNumber: syz [ 2415.334655][T25704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2415.364096][T25704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.374034][T25704] usb 3-1: Product: syz [ 2415.378307][T25704] usb 3-1: Manufacturer: syz [ 2415.387633][T25704] usb 3-1: SerialNumber: syz [ 2415.428832][T11183] cdc_ncm 5-1:1.1: bind() failure [ 2416.433719][T10063] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2416.440182][T10063] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2416.463576][T10063] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2416.525104][T15975] udc-core: couldn't find an available UDC or it's busy [ 2416.532054][T15975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2416.563630][T25704] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2416.570212][T25704] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2416.593457][T25704] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2416.667863][T10063] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2416.716286][T10063] usb 2-1: USB disconnect, device number 30 [ 2416.736074][T10063] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2416.789405][T25704] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 2416.864562][T25704] usb 3-1: USB disconnect, device number 92 [ 2416.884512][T25704] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2417.288103][T22681] usb 5-1: USB disconnect, device number 69 [ 2417.403680][T22664] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2417.543476][T11183] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2417.773778][T22664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2417.933643][T11183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2417.955239][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2417.966374][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.976539][T22664] usb 2-1: Product: syz [ 2417.982524][T22664] usb 2-1: Manufacturer: syz [ 2417.987918][T22664] usb 2-1: SerialNumber: syz [ 2418.073079][T22664] usb 2-1: can't set config #1, error -71 [ 2418.091452][T22664] usb 2-1: USB disconnect, device number 31 [ 2418.123570][T11183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2418.132715][T11183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2418.149974][T11183] usb 3-1: Product: syz [ 2418.156797][T11183] usb 3-1: Manufacturer: syz [ 2418.161407][T11183] usb 3-1: SerialNumber: syz 17:58:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x3]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x8, 0x6000}}, 0x14}}, 0x0) 17:58:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x8, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:50 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000101020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d000009058202000200000009050302000276bddb3a2dc177c5868b955c26b02ad8dc437204dc35e15afcd909c1f02d55b2a54a5522792dbbb085e0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xa8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:50 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a42300010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000984010000020d000009040182020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea2bdc9c1587a050000000000000042e33089754c8107c3cd4623dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb7bb50ec93c152fa483198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b0674cc5c1e298a16324fe27da2a908ba9ff3c009d36d691cc7911219a2fd5d", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r1}, &(0x7f0000000480)=""/250, 0x1b3, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, 0x0, r1}, &(0x7f0000000140)=""/77, 0x4d, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:50 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000700000000000006241a0000000824ec610000ad7f0905810300020000000904010000020d00000904110102020d00000905820200020000000905030200026a48dc88a6b9915718b23421c7a104779db52cbd5029b1a46120ec7418ad89607503d19b09c81cd92f7336"], 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000004c0)={0x50000, 0x0, [0x9, 0xbc2, 0x8, 0x1, 0xcde, 0xd840, 0xffffffff, 0x20]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)={0x3, 0x448, 0x3, 0x0, 0x0, [{{r1}, 0x2b4712fb}, {{r2}, 0x3}, {{r4}, 0xfff}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r5 = dup2(r3, r1) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000540)) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) getdents64(r6, &(0x7f0000000340)=""/180, 0xb4) [ 2418.213725][T11183] usb 3-1: can't set config #1, error -71 [ 2418.240294][T11183] usb 3-1: USB disconnect, device number 93 17:58:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x9, 0x6000}}, 0x14}}, 0x0) 17:58:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0xe, 0x6000}}, 0x14}}, 0x0) 17:58:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x4]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0xf, 0x6000}}, 0x14}}, 0x0) 17:58:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x60, 0x6000}}, 0x14}}, 0x0) [ 2418.546564][T25704] usb 5-1: new high-speed USB device number 70 using dummy_hcd 17:58:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x5]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6002}}, 0x14}}, 0x0) 17:58:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6003}}, 0x14}}, 0x0) [ 2418.693529][T22664] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2418.723314][T11183] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2418.913602][T25704] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2418.924811][T25704] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2419.083353][T25704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2419.092513][T25704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.103596][T11183] usb 3-1: config 1 has an invalid interface number: 17 but max is 1 [ 2419.114561][T25704] usb 5-1: Product: syz [ 2419.114710][T22664] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2419.119578][T25704] usb 5-1: Manufacturer: syz 17:58:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x9, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2419.136734][T11183] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2419.149766][T22664] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2419.175138][T11183] usb 3-1: config 1 has no interface number 2 [ 2419.176508][T25704] usb 5-1: SerialNumber: syz [ 2419.181406][T22664] usb 2-1: config 1 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2419.200708][T11183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2419.213656][T11183] usb 3-1: config 1 interface 17 has no altsetting 0 [ 2419.220736][T22664] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2419.403726][T11183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2419.413011][T11183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.424747][T22664] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.23 [ 2419.441300][T22664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.453950][T11183] usb 3-1: Product: syz [ 2419.458139][T11183] usb 3-1: Manufacturer: syz [ 2419.462749][T11183] usb 3-1: SerialNumber: syz [ 2419.474839][T22664] usb 2-1: Product: syz [ 2419.476992][T25704] cdc_ncm 5-1:1.1: bind() failure [ 2419.482776][T22664] usb 2-1: Manufacturer: syz [ 2419.489155][T22664] usb 2-1: SerialNumber: syz [ 2419.564499][T22664] usb 2-1: selecting invalid altsetting 1 [ 2419.570282][T22664] usb 2-1: selecting invalid altsetting 0 [ 2419.577132][T11183] usb 3-1: selecting invalid altsetting 1 [ 2419.594613][T22664] usb 2-1: selecting invalid altsetting 0 [ 2419.617518][T22664] cdc_ncm 2-1:1.0: bind() failure [ 2419.635925][T22664] usb 2-1: selecting invalid altsetting 0 [ 2419.641754][T22664] usbtest: probe of 2-1:1.1 failed with error -22 [ 2419.983263][T11183] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 2419.989422][T11183] cdc_ncm 3-1:1.0: bind() failure [ 2420.018348][T11183] cdc_ncm 3-1:1.1: bind() failure 17:58:53 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000001c0)={0xe, 0x2, 0xffffff1f}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000340)=""/4096) init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f0000000140)='\x00') [ 2421.252009][T11183] usb 5-1: USB disconnect, device number 70 17:58:53 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d10070100000000000000030fd258fb12f512000006241a00000008241c000000020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/4096, &(0x7f0000000000)=0xffffff31) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2421.481813][T25704] usb 2-1: USB disconnect, device number 32 [ 2421.703121][T11183] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2421.913008][T25704] usb 2-1: new high-speed USB device number 33 using dummy_hcd 17:58:53 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$session_to_parent(0x12) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x6]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6004}}, 0x14}}, 0x0) 17:58:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) [ 2422.001073][T22664] usb 3-1: USB disconnect, device number 94 [ 2422.073454][T11183] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:58:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6008}}, 0x14}}, 0x0) 17:58:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6009}}, 0x14}}, 0x0) [ 2422.263331][T11183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2422.274934][T25704] usb 2-1: config 1 has an invalid descriptor of length 210, skipping remainder of the config [ 2422.277251][T11183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.296381][T25704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 17:58:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x600e}}, 0x14}}, 0x0) [ 2422.311635][T25704] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2422.333048][T11183] usb 5-1: Product: syz [ 2422.345740][T11183] usb 5-1: Manufacturer: syz [ 2422.356255][T11183] usb 5-1: SerialNumber: syz 17:58:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x7]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x600f}}, 0x14}}, 0x0) [ 2422.495877][T25704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2422.510707][T25704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.530902][T25704] usb 2-1: Product: syz 17:58:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6060}}, 0x14}}, 0x0) [ 2422.543037][T22664] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2422.551381][T25704] usb 2-1: Manufacturer: syz [ 2422.561514][T25704] usb 2-1: SerialNumber: syz [ 2422.614202][T25704] cdc_ncm 2-1:1.0: skipping garbage [ 2422.619470][T25704] cdc_ncm 2-1:1.0: bind() failure [ 2422.963355][T22664] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2423.153798][T22664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2423.168593][T22664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.178666][T22664] usb 3-1: Product: syz [ 2423.184924][T22664] usb 3-1: Manufacturer: syz [ 2423.189550][T22664] usb 3-1: SerialNumber: syz [ 2423.483163][T11183] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2423.489748][T11183] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2423.509493][T11183] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 2423.722574][T11183] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 2423.759921][T11183] usb 5-1: USB disconnect, device number 71 [ 2423.785369][T11183] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM 17:58:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x4]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2424.313002][T22664] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2424.319583][T22664] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2424.342758][T22664] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2424.542041][T22664] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 17:58:56 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904ff0300000d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0xa356, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f0000000180)=""/66, 0x42, 0x0) [ 2424.602982][T22664] usb 3-1: USB disconnect, device number 95 [ 2424.603707][T25703] usb 2-1: USB disconnect, device number 33 [ 2424.609599][T22664] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 2425.102721][T25703] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2425.302684][T22681] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2425.463461][T25703] usb 2-1: config 1 has an invalid interface number: 255 but max is 1 [ 2425.471668][T25703] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2425.491902][T25703] usb 2-1: config 1 has no interface number 2 [ 2425.501234][T25703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2425.517614][T25703] usb 2-1: config 1 interface 255 has no altsetting 0 [ 2425.528067][T25703] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2425.693031][T25703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2425.694471][T22681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2425.702107][T25703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.732257][T25703] usb 2-1: Product: syz [ 2425.739560][T25703] usb 2-1: Manufacturer: syz [ 2425.749327][T25703] usb 2-1: SerialNumber: syz [ 2425.893121][T22681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2425.902170][T22681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.920488][T22681] usb 3-1: Product: syz [ 2425.927894][T22681] usb 3-1: Manufacturer: syz [ 2425.933426][T22681] usb 3-1: SerialNumber: syz [ 2426.012740][T25703] usb 2-1: selecting invalid altsetting 0 [ 2426.018666][T25703] usb 2-1: selecting invalid altsetting 0 [ 2426.042715][T25703] cdc_ncm 2-1:1.0: bind() failure 17:58:57 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="0000402505a100000924000001020d00000524060001052400000eac510000001d00000006241a00000008241c000000ad7f0905810300020000000904010002020002000404010102020d000009058202000200000000009ad4ac4d30dbab67e92a2e0b1f00e9a40544228889777d85eb10946fc8eb532abc158965d61d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x6ab, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0xd8, 0xbf, 0xb8, 0xff, 0x7cf, 0x1167, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x699, 0x1, 0x7, 0x5, 0x20, 0x8, [{{0x9, 0x4, 0x30, 0x1f, 0xe, 0xe9, 0xf1, 0xba, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x4}, [@feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x0, 0xa, 0x6], 0x95}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0xd1, "f0"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x5, 0x1f, 0x638, 0xfa, 0x9}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x3, 0x7, "fee99ca7c5e6"}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x6, 0x5, [0x1, 0x2, 0x1, 0x2, 0x6], 0x6}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x3, 0x3, 0x2], 0x6}]}], [{{0x9, 0x5, 0x0, 0x3, 0x20, 0x1, 0x2, 0x1, [@generic={0x64, 0x1, "3f9aba8ba1a55bf1be9667edb482a6a07f1910a4680915601f2985228638d9f7dc54041a1a6c763c3a93fe582f84413e5e2194677ac7fec5fb34268adf13d514bf4863bc2fca362debfcdedab9c0d17fd581fe3c45ceb8c5516bfffd1b350d687f7d"}, @generic={0x7c, 0x2, "8ae5291531c0de5a6d09494b67f06ade1243d70681ae955e245bfe50fcc10ef7a84f10d99ef18882f4c3b3f6c06f1f22be86d066c2eff7ac195cee1f73eaf8df4ace11366c00c69f2869637b708e35c686c17aad8684ee83a17b5287cb40e2a2c16f71f171cb01868dd267505081cae058652a00613e6f3fd341"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x3b, 0x22, 0x80}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x80, 0x5, 0x9}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x7f, 0x7, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x8, 0x9, 0x7f, [@generic={0x9e, 0xc, "428cc9bf5644563544976f4050dd533a6d186c8894ad17de30c54e8db49d43722b603f6fea4d00024fae14f218d2289d80342b775fb6ccffedfcffec4f189ca99fa79ca66ef69d3d3aab93b1fa042f646fd4615bd0958a6bc54c6b96b88928d6b5d9680cf4e156e2ec4e01f4644f391e72a53e4d7e7a7330442462321e0a9708677987941503970618b7ab694d2140a8e128c99d9c3614774a65e2f4"}, @generic={0xd9, 0x0, "cd6d9931cfa92699c6dfbad4be526f60199938ecb893713628c6572be77e8fb45e699210b8b32f1af4e6adf3b4bcf58ad099a52f8e52edbe05659885032aea17f9c65117c66db05a39940fe9866a6ffc6205e68f500d83f21ced5e899dac3a0022d1a73630928f3ffd666700c3b3e49bbc4e0195a378c9ac11373e15d88760f7f8805da86d5f42edf518c3e188405105190040692282008bf3e3abdd24939d7d506184c836494584172e4ef3b6433485d0b2d72ed5f7aa43f5de19ea6f0e77b3ab68dc7f2ae990204abc937a97207e05ea41abe569d9d6"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x1, 0x4, 0x40, [@generic={0xf3, 0x22, "dc57062ea3a3762420259718c6b769c0e56cc5e46018bede64325536f80016303b9f9eaad48a1afb765bf767b254b4c20e5768a78ae0b7e6559b48213207e511d9ed752e16103ec384584d286eee2420e4a751882979a6590a20f15b95a1f1c4d0b16241b1a217e948942a6e2dc41073b3c192463b0ca3daea73f86af70f28355e3bb141826de11d65a637a49681ff6589467ae42800cf06309e3cf731a0ece197e997edd44607d134dc7037e4d41c612e93022f364b8fb5c2535b2c4075dbb76ed9f9d0fd4427f62e641a8f1a8346bb6c24dc26e43b4016f35d5bafdeadfe59d6ecc280be74d48eabe7b988eba21acadd"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x7, 0x4}}, {{0x9, 0x5, 0x9, 0x4, 0x69c779fe63731dc4, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa3}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x81, 0x6, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x9, 0x3f, 0x9, [@generic={0xfb, 0x1, "1310acb794f5aafc198468b43092ddee51e6cc9e4f9630c6b0d66801599450d92d962242606254d132a5ffdace035208f3c6e654e39a2aa7dddb7a21bd948c4b45bc9aa62dc6a152c25b94f484d41f6499e983529f48a4f671e0e2163ec89abeb43eb12ee8457ccf4ef8ee700f6ce169f49e9225b2e33378dc555085e627eea2b4298a96fe46d8a14cff9917b87a86f8dbf235981b0b2e40f0ea89083a26898e18f2090e1dcea630a239d4c6360aba8f3276068ef0402f4c8a7bc2d068f56eed210c84b58b351af375325e58af72416dd8cd9a6e1569697423781b09ecf811157577097deb3f8c38a5976520cef64d7546505e9843b8b44bb5"}, @generic={0x4a, 0x8, "f550dbbfd61a44ef96095f49464c50de9869f9e003e4ce1dfd2cb93d5a0b84475c07bef9e437228a8187cb420b3667c2752a4cb08d266445e5669221090ff6e2de3adebedaaa52dc"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x9, 0xe9, 0x1, [@generic={0x3c, 0x22, "0fa190e91b2165cc1998317c8bf1a046b8711eb6f2ed51f3590f304a2e4a55e46c1699e38da42519ca1e5db824763d9cb5c70ece509047f9b82c"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x0, 0x94, 0x9, [@generic={0xdd, 0x21, "69a2c06088984d682f1e7e7325333f70b579875984529ac6d9660c343da839651eb5abbe2922232df19e0ff17664b718560ab5f7feb40e9d270b0f4051a608fb1c170a5104db8c72704b4117d9fd40fafac5b5940cabeb66787d6005c3b294f01d5b70104e491b5993e80ca4a88e9d56116b645130ad478042a0a017b6d9c6afafaa757cdef11db7676fc6564768745a157d1563f7c6f4c062252001d3a2b79b25d43768d7567b9799674009230e54eb3c38b22b7b83b99e4b3d305659f4f24fac37050ad5887b9a36eaaa6becdee22fb2d23389ba6bc76c8c7af1"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x0, 0x3f, 0x1}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x76, 0x40, 0x10, 0x6}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x20, 0x0, 0x7, 0x8700}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x4, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x11, 0xff, 0xff, 0x0, 0x5}, @ptm_cap={0x3}]}, 0xa, [{0x62, &(0x7f0000000900)=@string={0x62, 0x3, "51da3e2dad3be382dcf562bc8e9d211aee0b4c2f45bcaeb163ffdb09a91de330a3c2786304e8318a71e3c8b033ce767201d6ce2ce050985d3604d47fb36824d81c0186551e4b6b1939526bc1c17cc833d7f6e12824c44738b8ef578f20ab0a3c"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41b}}, {0xea, &(0x7f0000000a40)=@string={0xea, 0x3, "6a1fd07c79998e4c6e532ed4c85582471af93f686f48ad757d9a3c9d66ff8fe541ea8151e569884e50d5372d67fbb03259b176ef230d7640f5d131ce01197e98dc8924582ba2269f6716cecd07bcf5275b21e476443ceec59625d6112a21e25f11538e101fbcc7f20d1bc4922ab7311c5158c8b1a3868a9d45ad840af98c1c3b46f6fe2dc9277dace8155223e088af8aef42f3ba2f6123413e65158dd31ecb9653922b3f7d1521852ebe9799e9855627120393ad2389ecbe8348599b3f12b393a7074fd5e6679a3d3dc8483e4387f6ceaec12dcbc940158d45d9f0a33df1441fa28111a8e6585be3"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x411}}, {0x71, &(0x7f0000000b80)=@string={0x71, 0x3, "73102d6ce83a939dcf845095e2cc2ef8f40124d8d98e6103608a28aac6c7f3da3c43e525093e1bfc7931c8a432d93ce919535f73baf15ab052c01d4e2cb434ac8964be294138429068671069e0b08d47c0ced6b85e7847e6bdacfca010c433e8f3c91a585658fd426d883f089dd67b"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x81a}}, {0x32, &(0x7f0000000c40)=@string={0x32, 0x3, "f29ef31ecb2f86d8728cf166e34345b17002ff2d95400795fdaf2d6b2456cb20f0a945d706d338234a0f205582dd9e63"}}, {0x58, &(0x7f0000000c80)=@string={0x58, 0x3, "ec6ace8eec14daa756d1517c8460fb428eba15d1134bd25b313675fb22b8f10f987d0fb5bf59f0e739eb9b634e578df84404e2470e98b76368d6f308c0a4b5bd0528768c1e75df1f181d5179d5c6fc98e3cd36847a75"}}]}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x8]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0xf}}, 0x0) 17:58:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0xb, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:58:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}}, 0x0) [ 2426.063029][T25703] usb 2-1: selecting invalid altsetting 0 [ 2426.106226][T25703] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 2426.123119][T22681] cdc_ncm 3-1:1.0: bind() failure [ 2426.136380][T22681] cdc_ncm 3-1:1.1: bind() failure [ 2426.139572][T25703] usb 2-1: selecting invalid altsetting 0 [ 2426.190457][T25703] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 2426.195085][T22681] usb 3-1: USB disconnect, device number 96 [ 2426.219462][T25703] usb 2-1: selecting invalid altsetting 0 17:58:58 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d00000905820200020000000905030200020000000000000000512f8473eee34486a6dd5abe461205805514510cd756805321dedf5448e448a90137a4e2e83b8adc312330"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=[0x5, 0x4, 0x9, 0x1d3], &(0x7f0000000240)=[0xb1], &(0x7f0000000280)=[0x1, 0x5, 0x2, 0x101, 0x10001, 0xe], &(0x7f00000002c0)=[0x1000, 0x7, 0x99, 0xfffffc00, 0xfffe, 0x5359, 0x2], 0x0, 0x6}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:58:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0xc0}}, 0x0) [ 2426.278579][T25703] usbtest: probe of 2-1:1.1 failed with error -22 17:58:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0xec0}}, 0x0) 17:58:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x9]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:58:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x33fe0}}, 0x0) 17:58:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0xa]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2426.652873][T11183] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2426.732600][T22681] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2426.952823][T22681] usb 3-1: device descriptor read/64, error 18 [ 2427.072781][T11183] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.083614][T11183] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2427.096287][T11183] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2427.234178][T22681] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2427.322947][T11183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2427.333359][T11183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.341532][T11183] usb 5-1: Product: syz [ 2427.354196][T11183] usb 5-1: Manufacturer: syz [ 2427.360243][T11183] usb 5-1: SerialNumber: syz [ 2427.448411][T22681] usb 3-1: device descriptor read/64, error 18 [ 2427.572707][T22681] usb usb3-port1: attempt power cycle [ 2428.302459][T22681] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2428.532666][T22681] usb 3-1: device descriptor read/8, error -61 17:59:00 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'veth1\x00', {0x2, 0x0, @local}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000140)=0x200, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2428.620334][T10063] usb 2-1: USB disconnect, device number 34 [ 2428.812436][T22681] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2429.002517][T22681] usb 3-1: device descriptor read/8, error -61 [ 2429.132895][T22681] usb usb3-port1: unable to enumerate USB device [ 2429.144113][T10063] usb 2-1: new high-speed USB device number 35 using dummy_hcd 17:59:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x20000354}}, 0x0) 17:59:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0xe]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:59:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:59:01 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'vlan0\x00', {0xfff}, 0x80}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="01800000", @ANYRES16=0x0, @ANYBLOB="82072bbd7000fddbdf250900000005002d000000000008003a00070000000a000900000000000002830000"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000780)={0x4, 0x101}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_usb_connect(0x4, 0x24, &(0x7f00000045c0)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 17:59:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x7ffff000}}, 0x0) 17:59:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x1c4, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3f, 0x6, 0x6, 0x7, 0x2, 0xa65, 0x8, 0x2}}, {0x8, 0x2, [0x7, 0x1000]}}, {{0x1c, 0x1, {0xbe, 0x3f, 0x3, 0x800, 0x2, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x0]}}, {{0x1c, 0x1, {0x4, 0x2, 0x8, 0x9, 0x1, 0x3, 0xdd9a, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x0, 0x81, 0x20, 0x1, 0x2, 0x0, 0x76, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8, 0x1, 0x0, 0x101, 0x8000, 0x4}}, {0xc, 0x2, [0x8, 0x75, 0x7ff, 0x4]}}, {{0x1c, 0x1, {0x0, 0x3, 0x3f, 0x0, 0x2, 0x3, 0x6, 0x5}}, {0xe, 0x2, [0x1000, 0x1ff, 0x1000, 0x7, 0x8000]}}, {{0x1c, 0x1, {0xff, 0x1, 0x3, 0x3b58, 0x1, 0x800, 0x2, 0x2}}, {0x8, 0x2, [0x39, 0xd028]}}, {{0x1c, 0x1, {0xff, 0x1, 0x101, 0x7, 0x1, 0x2, 0xfb, 0x7}}, {0x12, 0x2, [0x0, 0xffff, 0x400, 0x1f, 0x13c6, 0x0, 0x3]}}, {{0x1c, 0x1, {0x1, 0xbb, 0x1, 0x5, 0x2, 0x9, 0xe5, 0x2}}, {0x8, 0x2, [0x8, 0x2]}}, {{0x1c, 0x1, {0x5, 0xff, 0x5, 0x1000, 0x2, 0xffff8001, 0x82a, 0x1}}, {0x6, 0x2, [0x7ff]}}]}]}, 0x1c4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettfilter={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x5}}}, 0x24}}, 0x0) [ 2429.406759][T25703] usb 5-1: USB disconnect, device number 72 [ 2429.512785][T10063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2429.522988][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:59:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0xfffffdef}}, 0x0) 17:59:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x7}]}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @remote, @remote, @null, @netrom, @netrom, @default, @default]}, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/129}, {&(0x7f0000000180)=""/180}, {&(0x7f0000000240)=""/93}, {&(0x7f0000000480)=""/214}, {&(0x7f0000000580)=""/212}], 0x0, &(0x7f00000002c0)}}], 0x2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x29, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2429.572801][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:59:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0xf]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2429.683074][T10063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2429.693587][T10063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.712544][T10063] usb 2-1: Product: syz [ 2429.727660][T10063] usb 2-1: Manufacturer: syz 17:59:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}, 0x2}, 0x0) [ 2429.739595][T10063] usb 2-1: SerialNumber: syz [ 2429.792348][T22681] usb 3-1: new high-speed USB device number 101 using dummy_hcd 17:59:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}, 0x3}, 0x0) [ 2430.202803][T22681] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2430.412324][T22681] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2430.421568][T22681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.433502][T22681] usb 3-1: Product: syz [ 2430.438346][T22681] usb 3-1: Manufacturer: syz [ 2430.443462][T22681] usb 3-1: SerialNumber: syz [ 2430.892263][T10063] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2430.898739][T10063] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2430.922122][T10063] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 2431.126751][T10063] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 2431.174593][T10063] usb 2-1: USB disconnect, device number 35 [ 2431.198479][T10063] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 2431.576300][T16420] udc-core: couldn't find an available UDC or it's busy [ 2431.583312][T16420] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2431.591768][T16420] udc-core: couldn't find an available UDC or it's busy [ 2431.602099][T16420] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2431.652203][T22681] cdc_ncm 3-1:1.0: bind() failure [ 2431.692309][T22681] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 2431.712225][T22681] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 2431.732856][T22681] usbtest: probe of 3-1:1.1 failed with error -71 [ 2431.741735][T22681] usb 3-1: USB disconnect, device number 101 [ 2431.892055][ T6589] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2432.302196][ T6589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2432.382050][ T5484] usb 3-1: new high-speed USB device number 102 using dummy_hcd 17:59:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}, 0x7}, 0x0) 17:59:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x600, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5e4, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x8}]}]}]}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x268, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff9, 0x1f, 0x7ff, 0x2, 0x12, 0xa4, 0x7]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xf800, 0x9, 0x3ff, 0x200, 0x5, 0xfffd, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x1, 0xb, 0x9, 0xb, 0x36, 0x30, 0x6c, 0x9, 0x48, 0x30, 0x48, 0x7b, 0x6, 0x1b, 0x9, 0xc, 0x6, 0x60, 0x16, 0x36, 0x6c, 0x55, 0x5, 0x60, 0x0, 0x36, 0x12, 0x9, 0x1, 0x1]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x0, 0x69, 0x24, 0x3, 0x16, 0x36, 0x64, 0x60, 0x3, 0x24, 0x5, 0x4, 0x6, 0x24, 0x3, 0x16, 0x12, 0x18, 0x16, 0x30, 0x6c, 0xc, 0x1b, 0xb, 0x1, 0x1, 0x3, 0x24, 0x9, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x36, 0x5a, 0x36, 0x18, 0x48, 0x6c, 0x1b, 0x1b, 0x9, 0x16, 0x12, 0x6, 0x16, 0x1b, 0x16]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x36, 0x2, 0xc, 0x36, 0x30, 0x30, 0x30, 0x0, 0x9, 0x30, 0x9, 0x30, 0x12, 0x5, 0x4, 0x65, 0x48, 0x4b, 0x2, 0x24, 0x18]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x3}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x11}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x4}, {0x3, 0x3}, {0x3}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x6, 0x4}, {}, {0x6, 0x4}, {0x2, 0x9}, {0x2, 0x7}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x7}, {}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x8}, {0x6, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x6}, {}, {0x5, 0x7}, {0x4, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x8000, 0x0, 0xffff, 0x1, 0x2, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x36, 0x0, 0x24, 0x3, 0x5, 0x48, 0xb, 0x48, 0xc, 0x48, 0x16, 0x48, 0x1b, 0x22, 0x6c, 0x60, 0x30, 0x4, 0x24, 0x2, 0xc, 0x30, 0x78]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x20, 0x394d, 0x3, 0x7f, 0x1, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x7, 0xff7f, 0x0, 0xd6, 0x5, 0x81]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3f]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x5}, {0x1, 0x4}, {0x6, 0x6}, {0x4, 0x4}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0x7}, {0x3, 0x5}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x6, 0xc, 0xb, 0x24, 0x12, 0x4, 0x18, 0x12, 0x12, 0x16, 0x4, 0x0, 0x48, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0x7, 0xfff, 0x800, 0x4, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x18, 0x0, 0x12, 0x60, 0x6c, 0x18, 0x6c, 0x16, 0x5, 0x6, 0x18, 0x6, 0x31, 0x5, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x16, 0x6c, 0xc, 0x5a, 0x16, 0x9, 0x3]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x5}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x4}, {0x5}, {0x2, 0x2}, {}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x5, 0x1}, {0x3, 0x9}, {0x5, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x1, 0x4, 0x6, 0x2, 0x1b, 0x6c, 0x6c, 0xc, 0x4, 0x3]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x3}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {}, {0x5, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x5, 0x8}, {0x4}, {0x0, 0x1}, {0x0, 0x5}, {0x3}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0xa}, {0x6, 0x7}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x6}, {0x4, 0x1}, {0x7, 0x7}, {0x4, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x2}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x1}, {0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x9, 0x24, 0x48, 0x9, 0x48, 0x36, 0x12, 0x1]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0xa}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x1}, {}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x5, 0x3, 0x4, 0x4, 0x48, 0x49eb6096cf4ae67e, 0x1b, 0x18, 0xb, 0x4, 0x1b, 0x48, 0x9, 0x2, 0x30, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x1, 0x8, 0x3, 0x7a6, 0x0, 0xff89]}}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x1b, 0x30, 0x6c, 0x12, 0x1, 0x24, 0x18, 0x0, 0xb, 0x12, 0x24, 0x0, 0x9, 0x18, 0x1, 0x6c, 0x2, 0x6c, 0x36, 0x1, 0x12, 0x5, 0x6, 0x6c]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0xc]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0xa}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x3}, {0x5, 0x7}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x60, 0xc, 0x5, 0x2, 0x4, 0x18, 0x60, 0x4, 0x12, 0xb, 0xb, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x1}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x4, 0x5}, {0x6}, {0x2, 0xa}, {0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x2, 0x9}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0x4}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x3}, {0x1}, {0x4, 0x6}, {0x2}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1b96, 0x1f, 0xf95b, 0x8b01, 0x3f, 0x40, 0x6]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x1, 0x2, 0x2, 0x24, 0x12, 0x18, 0x12, 0x2, 0x3, 0x6, 0x6c, 0x16, 0x60, 0x24, 0x16, 0x24, 0xb, 0x60, 0xb, 0x48, 0x12, 0x9, 0x48, 0x48, 0x4, 0x0]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0x3}, {0x6, 0x6}, {0x6}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x3}, {0x7, 0x6}, {0x3, 0x9}, {0x3, 0x6}, {0x1, 0x1f}, {0x6, 0x8}, {0x4, 0x2}, {0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0xa}, {0x2, 0x8}, {0x3, 0x8}, {0x7, 0x7}, {0x4, 0x2}, {0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x4}, {0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x7fff, 0x6, 0x7fff, 0x5, 0xc259, 0x2, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xfff8, 0xfff8, 0x2, 0x0, 0x7, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x2}, {}, {0x3}, {0x4, 0x7}, {0x5, 0x9}, {0x4, 0xa}, {0x6, 0x2}, {0x4, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x6}, {0x6, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x1}, {0x2, 0xa}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0xa}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x7}, {0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0xa}, {0x6}, {0x5, 0x7}, {0x5, 0x1}, {0x3, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x401, 0x8, 0x2, 0x5161, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0xa}, {0x5}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x1}, {0x1}, {0x1, 0x6}, {}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x5}, {}, {0x5, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x6, 0x9}, {0x5, 0xa}, {0x6, 0x4}, {0x2, 0x6}, {0x3, 0x6}, {}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xc, 0xc, 0x1, 0x24, 0x36, 0x36, 0xc, 0x48, 0x1, 0x3, 0x13]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x8}, {0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x4, 0x9}, {0x6, 0x9}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0x8}, {}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x7}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x4}, {0x6, 0x4}, {0x4, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x600}, 0x1, 0x0, 0x0, 0x8041}, 0x40) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="24b68dc4ff1b5d50"], 0x1a) add_key(&(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) [ 2432.492194][ T6589] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2432.501268][ T6589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.519735][ T6589] usb 2-1: Product: syz [ 2432.529433][ T6589] usb 2-1: Manufacturer: syz [ 2432.534266][ T6589] usb 2-1: SerialNumber: syz 17:59:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x48]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:59:04 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x85, 0x2}]}, 0xc, 0x2) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7f0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000045c0)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xc, @string={0xc, 0x3, "549621ca1b7dbac4588e"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2432.572142][ T6589] usb 2-1: can't set config #1, error -71 [ 2432.579879][ T6589] usb 2-1: USB disconnect, device number 36 [ 2432.745288][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2432.922049][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2432.931104][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.941167][ T5484] usb 3-1: Product: syz [ 2432.947617][ T5484] usb 3-1: Manufacturer: syz [ 2432.952605][ T5484] usb 3-1: SerialNumber: syz 17:59:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d0110000120003042bbd7000fbdbdf25060418074e204e220500006adfd0457aa91f5a6700", @ANYRES32, @ANYBLOB="01000100010000000500000003000000a50001004b05667c14521f8f785c62fd2c0190d89eb8f3a55761c7f7080003"], 0x11d0}}, 0x0) 17:59:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x568, 0x500}}], 0xf, 0xa, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x300}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) 17:59:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}, 0x8}, 0x0) 17:59:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x4c]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) 17:59:04 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c000000ad7e0905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80082, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000340)={0x103, 0x29, 0x2, {0x2, [{{0x8, 0x3, 0x4}, 0x4, 0x3f, 0x7, './file0'}, {{0x8, 0x1, 0x8}, 0xfffffffffffffc01, 0x9, 0x7, './file0'}, {{0x2, 0x2, 0x2}, 0x2, 0x9d, 0x7, './file0'}, {{0x20, 0x4, 0x7}, 0x6, 0x0, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x8, 0x8, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x5, 0x0, 0x7, './file0'}, {{0x10, 0x3, 0x4}, 0x10001, 0x8, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0x40, 0x7f, 0x7, './file0'}]}}, 0x103) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2433.072044][ T5484] cdc_ncm 3-1:1.0: bind() failure [ 2433.101742][ T5484] cdc_ncm 3-1:1.1: bind() failure [ 2433.142074][ T6589] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2433.157182][ T5484] usb 3-1: USB disconnect, device number 102 17:59:05 executing program 4: ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x7, 0x400}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0xc62f98480d383858}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x98, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x40000007, 0x0, 0x0, 0xffff, 0x4cb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x40000], 0xf000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x7, 0x9, 0x9, 0x3f, 0x0, 0x9, 0x2024e, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5d, 0x2, @perf_config_ext={0x9, 0x401}, 0x0, 0x1, 0x49, 0x4, 0x81, 0xffffffff, 0x1ff}, 0xffffffffffffffff, 0x7, r3, 0x8) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000001c0)) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000100)={0xfc, 0x0, 0x6, 0x401}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/81) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xc}, 0xc980, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:59:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x14, r3, 0x917, 0x0, 0x0, {0x0, 0x0, 0x6000}}, 0x14}, 0x600}, 0x0) 17:59:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x5c, r3, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x60]}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @dev}}]}, 0x5c}}, 0x0) [ 2433.542517][ T6589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2433.572178][ T5484] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2433.642063][ C1] ================================================================================ [ 2433.651941][ C1] UBSAN: shift-out-of-bounds in net/core/gen_estimator.c:83:38 [ 2433.659504][ C1] shift exponent -122 is negative [ 2433.664584][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.10.0-syzkaller #0 [ 2433.672236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2433.682308][ C1] Call Trace: [ 2433.685588][ C1] [ 2433.688418][ C1] dump_stack+0x107/0x163 [ 2433.692749][ C1] ubsan_epilogue+0xb/0x5a [ 2433.697187][ C1] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 2433.703982][ C1] ? gen_kill_estimator+0x50/0x50 [ 2433.709036][ C1] ? est_fetch_counters+0xc6/0x160 [ 2433.714183][ C1] est_timer.cold+0xbb/0x12d [ 2433.718796][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 2433.723678][ C1] ? gen_kill_estimator+0x50/0x50 [ 2433.729790][ C1] ? gen_kill_estimator+0x50/0x50 [ 2433.734839][ C1] call_timer_fn+0x1a5/0x710 [ 2433.740126][ C1] ? msleep_interruptible+0x170/0x170 [ 2433.745514][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 2433.750395][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2433.755620][ C1] ? gen_kill_estimator+0x50/0x50 [ 2433.761260][ C1] __run_timers.part.0+0x692/0xa80 [ 2433.766406][ C1] ? call_timer_fn+0x710/0x710 [ 2433.771208][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 2433.776438][ C1] ? sched_clock+0x2a/0x40 [ 2433.781271][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 2433.786153][ C1] run_timer_softirq+0xb3/0x1d0 [ 2433.791785][ C1] __do_softirq+0x2bc/0xa77 [ 2433.796322][ C1] asm_call_irq_on_stack+0xf/0x20 [ 2433.802474][ C1] [ 2433.805415][ C1] do_softirq_own_stack+0xaa/0xd0 [ 2433.810458][ C1] __irq_exit_rcu+0x17f/0x200 [ 2433.815160][ C1] irq_exit_rcu+0x5/0x20 [ 2433.819895][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 2433.825644][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2433.831674][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 2433.837505][ C1] Code: 6d 61 57 f8 84 db 75 ac e8 e4 5a 57 f8 e8 bf 30 5d f8 e9 0c 00 00 00 e8 d5 5a 57 f8 0f 00 2d 0e 94 ae 00 e8 c9 5a 57 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 a4 62 57 f8 48 85 db [ 2433.857131][ C1] RSP: 0018:ffffc90000d27d18 EFLAGS: 00000293 [ 2433.863219][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2433.871979][ C1] RDX: ffff8880115a0000 RSI: ffffffff891be8f7 RDI: 0000000000000000 [ 2433.879967][ C1] RBP: ffff888141908064 R08: 0000000000000001 R09: 0000000000000001 [ 2433.887948][ C1] R10: ffffffff817919d8 R11: 0000000000000000 R12: 0000000000000001 [ 2433.895939][ C1] R13: ffff888141908000 R14: ffff888141908064 R15: ffff8881439a6004 [ 2433.903933][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 2433.909188][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 2433.914423][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 2433.921217][ C1] acpi_idle_enter+0x361/0x500 [ 2433.926017][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 2433.931171][ C1] cpuidle_enter+0x4a/0xa0 [ 2433.935609][ C1] do_idle+0x3eb/0x590 [ 2433.939697][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 2433.939808][ T5484] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2433.944741][ C1] cpu_startup_entry+0x14/0x20 [ 2433.944825][ C1] start_secondary+0x274/0x350 [ 2433.944858][ C1] ? set_cpu_sibling_map+0x2460/0x2460 [ 2433.971986][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 2433.977984][ C1] ================================================================================ [ 2433.987298][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 2433.993891][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.10.0-syzkaller #0 [ 2434.002013][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2434.012077][ C1] Call Trace: [ 2434.015392][ C1] [ 2434.018243][ C1] dump_stack+0x107/0x163 [ 2434.022801][ C1] panic+0x343/0x77f [ 2434.026721][ C1] ? __warn_printk+0xf3/0xf3 [ 2434.031371][ C1] ? ubsan_epilogue+0x3e/0x5a [ 2434.036080][ C1] ubsan_epilogue+0x54/0x5a [ 2434.041054][ C1] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 2434.047855][ C1] ? gen_kill_estimator+0x50/0x50 [ 2434.052909][ C1] ? est_fetch_counters+0xc6/0x160 [ 2434.058052][ C1] est_timer.cold+0xbb/0x12d [ 2434.062662][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 2434.067536][ C1] ? gen_kill_estimator+0x50/0x50 [ 2434.072595][ C1] ? gen_kill_estimator+0x50/0x50 [ 2434.077641][ C1] call_timer_fn+0x1a5/0x710 [ 2434.082353][ C1] ? msleep_interruptible+0x170/0x170 [ 2434.087828][ C1] ? lock_downgrade+0x6d0/0x6d0 [ 2434.092712][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2434.099432][ C1] ? gen_kill_estimator+0x50/0x50 [ 2434.104486][ C1] __run_timers.part.0+0x692/0xa80 [ 2434.109682][ C1] ? call_timer_fn+0x710/0x710 [ 2434.114470][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 2434.119688][ C1] ? sched_clock+0x2a/0x40 [ 2434.124118][ C1] ? sched_clock_cpu+0x18/0x1f0 [ 2434.130177][ C1] run_timer_softirq+0xb3/0x1d0 [ 2434.135054][ C1] __do_softirq+0x2bc/0xa77 [ 2434.139914][ C1] asm_call_irq_on_stack+0xf/0x20 [ 2434.142627][ T5484] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2434.145126][ C1] [ 2434.145139][ C1] do_softirq_own_stack+0xaa/0xd0 [ 2434.145172][ C1] __irq_exit_rcu+0x17f/0x200 [ 2434.166800][ C1] irq_exit_rcu+0x5/0x20 [ 2434.169413][ T5484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.171056][ C1] sysvec_apic_timer_interrupt+0x4d/0x100 [ 2434.171098][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2434.192296][ C1] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 2434.197254][ T5484] usb 3-1: Product: syz [ 2434.198126][ C1] Code: 6d 61 57 f8 84 db 75 ac e8 e4 5a 57 f8 e8 bf 30 5d f8 e9 0c 00 00 00 e8 d5 5a 57 f8 0f 00 2d 0e 94 ae 00 e8 c9 5a 57 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 a4 62 57 f8 48 85 db [ 2434.217450][ T5484] usb 3-1: Manufacturer: syz [ 2434.221865][ C1] RSP: 0018:ffffc90000d27d18 EFLAGS: 00000293 [ 2434.221893][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2434.221912][ C1] RDX: ffff8880115a0000 RSI: ffffffff891be8f7 RDI: 0000000000000000 [ 2434.221930][ C1] RBP: ffff888141908064 R08: 0000000000000001 R09: 0000000000000001 [ 2434.221947][ C1] R10: ffffffff817919d8 R11: 0000000000000000 R12: 0000000000000001 [ 2434.221966][ C1] R13: ffff888141908000 R14: ffff888141908064 R15: ffff8881439a6004 [ 2434.221991][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 2434.222031][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 2434.222070][ C1] ? acpi_idle_do_entry+0x1c7/0x250 [ 2434.222104][ C1] acpi_idle_enter+0x361/0x500 [ 2434.222141][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 2434.240568][ T5484] usb 3-1: SerialNumber: syz [ 2434.240831][ C1] cpuidle_enter+0x4a/0xa0 [ 2434.310106][ C1] do_idle+0x3eb/0x590 [ 2434.314206][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 2434.320831][ C1] cpu_startup_entry+0x14/0x20 [ 2434.325623][ C1] start_secondary+0x274/0x350 [ 2434.330545][ C1] ? set_cpu_sibling_map+0x2460/0x2460 [ 2434.336040][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 2434.343097][ C1] Kernel Offset: disabled [ 2434.347712][ C1] Rebooting in 86400 seconds..