N={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x480800, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$dsp(r1, &(0x7f0000000780)="d9cc47d02e5c9b10cb39bd829c1dc2ed57c085b5879ede9432d411a57fd26ca6d21b2bf5714b08c65af5e306e3884d3ee27a", 0x32) r3 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000800)={'#! ', './file0', [{0x20, 'system_u:object_r:load_policy_exec_t:s0\x00'}, {}, {0x20, 'syz2\x00'}, {0x20, 'system_u:object_r:semanage_exec_t:s0\x00'}, {0x20, '/dev/vsock\x00'}, {0x20, 'syz0\x00'}], 0xa, "1473720eabb13948b5fcf210504be08b25f80524a138a61c1c2908708c4568d407a908e6e60523be321a6a4b4d5a09eef39a5666ad597c0591641bdb524161c1339b392bf15a1128182de0526efc31edfd2b0ab33ce1622c57025769db8d36412cf51a35c1980f470a7aa463ce36f0c6ddea41cf5d117eb1b562306f4db0a646e0ee5ecbb2d6e5c8cf5ce2833f0c07be097da88016699d5756610e15283f84f545a0900c8cc26e36453bafd922e88fcdcd366c8ec1aa05503c7c21680e18dc7263ac768ae88c2e29a64730a7cc1b12fa2a977637e095d5"}, 0x14a) openat$zero(0xffffff9c, &(0x7f0000000980)='/dev/zero\x00', 0x2a0281, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5451) 10:02:16 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x480800, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$dsp(r1, &(0x7f0000000780)="d9cc47d02e5c9b10cb39bd829c1dc2ed57c085b5879ede9432d411a57fd26ca6d21b2bf5714b08c65af5e306e3884d3ee27a", 0x32) r3 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000800)={'#! ', './file0', [{0x20, 'system_u:object_r:load_policy_exec_t:s0\x00'}, {}, {0x20, 'syz2\x00'}, {0x20, 'system_u:object_r:semanage_exec_t:s0\x00'}, {0x20, '/dev/vsock\x00'}, {0x20, 'syz0\x00'}], 0xa, "1473720eabb13948b5fcf210504be08b25f80524a138a61c1c2908708c4568d407a908e6e60523be321a6a4b4d5a09eef39a5666ad597c0591641bdb524161c1339b392bf15a1128182de0526efc31edfd2b0ab33ce1622c57025769db8d36412cf51a35c1980f470a7aa463ce36f0c6ddea41cf5d117eb1b562306f4db0a646e0ee5ecbb2d6e5c8cf5ce2833f0c07be097da88016699d5756610e15283f84f545a0900c8cc26e36453bafd922e88fcdcd366c8ec1aa05503c7c21680e18dc7263ac768ae88c2e29a64730a7cc1b12fa2a977637e095d5"}, 0x14a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:16 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), 0x0, 0x0}) 10:02:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1015.621699][ T27] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1015.771429][ T17] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1015.861556][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 1015.982246][ T27] usb 1-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 1015.992832][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1016.004749][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1016.019812][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1016.142142][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.159396][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.192222][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.209392][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.220704][ T27] usb 1-1: Product: syz [ 1016.231409][ T27] usb 1-1: Manufacturer: syz [ 1016.236305][ T27] usb 1-1: SerialNumber: syz [ 1016.289678][ T27] cdc_ncm 1-1:1.0: skipping garbage [ 1016.299513][ T27] cdc_ncm 1-1:1.0: bind() failure [ 1016.331453][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.340528][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.354161][ T17] usb 6-1: Product: syz [ 1016.358345][ T17] usb 6-1: Manufacturer: syz [ 1016.364147][ T17] usb 6-1: SerialNumber: syz [ 1016.412331][ T17] usb 6-1: selecting invalid altsetting 1 [ 1016.851402][ T17] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1016.857460][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1016.886982][ T17] cdc_ncm 6-1:1.1: bind() failure 10:02:19 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5452) 10:02:19 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x480800, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$dsp(r1, &(0x7f0000000780)="d9cc47d02e5c9b10cb39bd829c1dc2ed57c085b5879ede9432d411a57fd26ca6d21b2bf5714b08c65af5e306e3884d3ee27a", 0x32) openat$6lowpan_enable(0xffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), 0x0, 0x0}) [ 1018.356397][T30214] usb 6-1: USB disconnect, device number 40 [ 1018.870980][T30214] usb 6-1: new high-speed USB device number 41 using dummy_hcd 10:02:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x0, r1) keyctl$describe(0x6, r1, &(0x7f0000000040)=""/105, 0x69) syz_usb_control_io(r0, 0x0, 0x0) 10:02:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5460) 10:02:19 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x480800, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$dsp(r1, &(0x7f0000000780)="d9cc47d02e5c9b10cb39bd829c1dc2ed57c085b5879ede9432d411a57fd26ca6d21b2bf5714b08c65af5e306e3884d3ee27a", 0x32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), 0x0, 0x0}) [ 1018.912811][ T17] usb 1-1: USB disconnect, device number 42 10:02:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5502) [ 1019.151000][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1019.281543][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.298255][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.491608][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.505401][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.516864][T30214] usb 6-1: Product: syz [ 1019.520890][ T17] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1019.526061][T30214] usb 6-1: Manufacturer: syz [ 1019.535529][T30214] usb 6-1: SerialNumber: syz [ 1019.607949][T30214] usb 6-1: selecting invalid altsetting 1 [ 1019.760823][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1019.880942][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.900916][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.920860][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1019.933651][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1020.040917][T30214] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1020.047728][T30214] cdc_ncm 6-1:1.0: bind() failure [ 1020.069454][T30214] cdc_ncm 6-1:1.1: bind() failure [ 1020.104881][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1020.116175][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.133665][ T17] usb 1-1: Product: syz [ 1020.137840][ T17] usb 1-1: Manufacturer: syz [ 1020.146550][ T17] usb 1-1: SerialNumber: syz [ 1021.290923][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1021.310767][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1021.330895][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1021.352684][ T17] usb 1-1: USB disconnect, device number 43 10:02:22 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:22 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x480800, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:22 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5503) [ 1021.466017][ T27] usb 6-1: USB disconnect, device number 41 [ 1021.604564][T16246] FAULT_INJECTION: forcing a failure. [ 1021.604564][T16246] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.604610][T16246] CPU: 0 PID: 16246 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1021.604620][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.604625][T16246] Call Trace: [ 1021.604648][T16246] dump_stack+0x18f/0x20d [ 1021.604671][T16246] should_fail.cold+0x5/0x14 [ 1021.604695][T16246] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1021.604710][T16246] should_failslab+0x5/0xf [ 1021.604725][T16246] __kmalloc+0x27d/0x340 [ 1021.604744][T16246] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1021.604764][T16246] tomoyo_realpath_from_path+0xc3/0x620 [ 1021.604783][T16246] ? tomoyo_profile+0x42/0x50 [ 1021.604803][T16246] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1021.604820][T16246] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1021.604839][T16246] ? tomoyo_execute_permission+0x470/0x470 [ 1021.604856][T16246] ? find_held_lock+0x2d/0x110 [ 1021.604879][T16246] ? ksys_write+0x212/0x250 [ 1021.604916][T16246] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1021.604942][T16246] ? __fget_files+0x294/0x400 [ 1021.604965][T16246] security_file_ioctl+0x50/0xb0 [ 1021.604985][T16246] __do_compat_sys_ioctl+0x50/0x230 [ 1021.605007][T16246] do_syscall_32_irqs_on+0x3f/0x60 [ 1021.605024][T16246] do_fast_syscall_32+0x7f/0x120 [ 1021.605046][T16246] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1021.605059][T16246] RIP: 0023:0xf7fe9569 [ 1021.605065][T16246] Code: Bad RIP value. [ 1021.605073][T16246] RSP: 002b:00000000f5dc30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1021.605089][T16246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004605 [ 1021.605098][T16246] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.605107][T16246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1021.605116][T16246] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1021.605125][T16246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1021.605149][T16246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1022.076829][ T17] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1022.084624][ T27] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1022.330543][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1022.335691][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 1022.461279][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.472175][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.485669][ T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.496885][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.514730][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.527928][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:02:23 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) openat$vga_arbiter(0xffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x480800, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600)='NLBL_UNLBL\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 10:02:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5505) 10:02:23 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:23 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x81, 0x0, 0x24, 0x30f}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1022.682514][ T27] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.704034][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.725139][ T27] usb 6-1: Product: syz [ 1022.760692][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.774287][ T27] usb 6-1: Manufacturer: syz [ 1022.784522][ T27] usb 6-1: SerialNumber: syz [ 1022.790575][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:02:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5506) 10:02:23 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) openat$vga_arbiter(0xffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x480800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1022.824342][ T17] usb 1-1: Product: syz [ 1022.824461][ T17] usb 1-1: Manufacturer: syz [ 1022.850642][ T17] usb 1-1: can't set config #1, error -71 [ 1022.852256][ T17] usb 1-1: USB disconnect, device number 44 [ 1022.861437][ T27] usb 6-1: selecting invalid altsetting 1 [ 1022.888014][T16271] FAULT_INJECTION: forcing a failure. [ 1022.888014][T16271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1022.888031][T16271] CPU: 0 PID: 16271 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1022.888039][T16271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.888044][T16271] Call Trace: [ 1022.888064][T16271] dump_stack+0x18f/0x20d [ 1022.888082][T16271] should_fail.cold+0x5/0x14 [ 1022.888102][T16271] __alloc_pages_nodemask+0x1a3/0x930 [ 1022.888121][T16271] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1022.888143][T16271] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1022.888161][T16271] cache_grow_begin+0x8c/0xb20 [ 1022.888176][T16271] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1022.888194][T16271] cache_alloc_refill+0x27b/0x340 [ 1022.888207][T16271] ? lockdep_hardirqs_off+0x66/0xa0 [ 1022.888226][T16271] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1022.888237][T16271] __kmalloc+0x319/0x340 [ 1022.888255][T16271] tomoyo_realpath_from_path+0xc3/0x620 [ 1022.888269][T16271] ? tomoyo_profile+0x42/0x50 [ 1022.888286][T16271] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1022.888299][T16271] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1022.888315][T16271] ? tomoyo_execute_permission+0x470/0x470 [ 1022.888327][T16271] ? find_held_lock+0x2d/0x110 [ 1022.888346][T16271] ? ksys_write+0x212/0x250 [ 1022.888375][T16271] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1022.888394][T16271] ? __fget_files+0x294/0x400 [ 1022.888421][T16271] security_file_ioctl+0x50/0xb0 [ 1022.888437][T16271] __do_compat_sys_ioctl+0x50/0x230 [ 1022.888456][T16271] do_syscall_32_irqs_on+0x3f/0x60 [ 1022.888471][T16271] do_fast_syscall_32+0x7f/0x120 [ 1022.888487][T16271] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1022.888497][T16271] RIP: 0023:0xf7fe9569 [ 1022.888502][T16271] Code: Bad RIP value. [ 1022.888509][T16271] RSP: 002b:00000000f5dc30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1022.888522][T16271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004605 [ 1022.888530][T16271] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1022.888542][T16271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1022.888551][T16271] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1022.888558][T16271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1023.300576][ T27] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1023.300622][ T27] cdc_ncm 6-1:1.0: bind() failure [ 1023.302596][ T27] cdc_ncm 6-1:1.1: bind() failure [ 1023.330489][ T17] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1023.710444][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1023.831127][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.850501][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.870440][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1023.882264][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.051060][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1024.060128][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.079270][ T17] usb 1-1: Product: syz [ 1024.095822][ T17] usb 1-1: Manufacturer: syz [ 1024.101236][ T17] usb 1-1: SerialNumber: syz 10:02:25 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 10:02:25 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) r0 = openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x8, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5507) 10:02:25 executing program 2 (fault-call:2 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1024.592511][T28418] usb 6-1: USB disconnect, device number 42 10:02:25 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) openat$vsock(0xffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5508) 10:02:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 10:02:25 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f00000003c0)={0x1, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1024.740762][T16311] FAULT_INJECTION: forcing a failure. [ 1024.740762][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.740780][T16311] CPU: 1 PID: 16311 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1024.740788][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.740792][T16311] Call Trace: [ 1024.740812][T16311] dump_stack+0x18f/0x20d [ 1024.740830][T16311] should_fail.cold+0x5/0x14 [ 1024.740849][T16311] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1024.740862][T16311] should_failslab+0x5/0xf [ 1024.740875][T16311] __kmalloc+0x27d/0x340 [ 1024.740889][T16311] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1024.740905][T16311] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1024.740920][T16311] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1024.740935][T16311] tomoyo_encode+0x28/0x50 [ 1024.740950][T16311] tomoyo_realpath_from_path+0x186/0x620 [ 1024.740970][T16311] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1024.740983][T16311] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1024.740999][T16311] ? tomoyo_execute_permission+0x470/0x470 [ 1024.741012][T16311] ? find_held_lock+0x2d/0x110 [ 1024.741030][T16311] ? ksys_write+0x212/0x250 [ 1024.741059][T16311] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1024.741078][T16311] ? __fget_files+0x294/0x400 [ 1024.741097][T16311] security_file_ioctl+0x50/0xb0 [ 1024.741112][T16311] __do_compat_sys_ioctl+0x50/0x230 [ 1024.741130][T16311] do_syscall_32_irqs_on+0x3f/0x60 [ 1024.741144][T16311] do_fast_syscall_32+0x7f/0x120 [ 1024.741160][T16311] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1024.741170][T16311] RIP: 0023:0xf7fe9569 [ 1024.741175][T16311] Code: Bad RIP value. [ 1024.741182][T16311] RSP: 002b:00000000f5dc30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1024.741194][T16311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004605 [ 1024.741201][T16311] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.741208][T16311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1024.741215][T16311] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1024.741222][T16311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1024.741253][T16311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1025.124582][T28418] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1025.260222][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1025.286560][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1025.300291][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1025.302260][ T17] usb 1-1: USB disconnect, device number 45 [ 1025.393777][T28418] usb 6-1: Using ep0 maxpacket: 8 [ 1025.530887][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.544816][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.557834][T28418] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1025.740763][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1025.754363][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.780012][T28418] usb 6-1: Product: syz [ 1025.784197][T28418] usb 6-1: Manufacturer: syz [ 1025.788794][T28418] usb 6-1: SerialNumber: syz [ 1026.030028][ T17] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1026.270029][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1026.391634][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.405372][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.416763][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.434130][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:02:27 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000050000000000000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009058103400000030009047cf492d20d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) prctl$PR_GET_DUMPABLE(0x3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5509) 10:02:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', 0x0}) [ 1026.640109][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1026.657140][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.676093][ T17] usb 1-1: Product: syz [ 1026.709992][ T17] usb 1-1: can't set config #1, error -71 [ 1026.718393][ T17] usb 1-1: USB disconnect, device number 46 [ 1026.920008][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1026.950005][T28418] usb 6-1: USB disconnect, device number 43 [ 1027.109945][ T17] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1027.389918][ T17] usb 1-1: device descriptor read/64, error 18 10:02:28 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:28 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', 0x0}) 10:02:28 executing program 2 (fault-call:2 fault-nth:3): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550b) 10:02:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550f) 10:02:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', 0x0}) 10:02:28 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1027.570913][T16382] FAULT_INJECTION: forcing a failure. [ 1027.570913][T16382] name failslab, interval 1, probability 0, space 0, times 0 10:02:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5510) [ 1027.570934][T16382] CPU: 0 PID: 16382 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1027.570944][T16382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.570949][T16382] Call Trace: [ 1027.570970][T16382] dump_stack+0x18f/0x20d [ 1027.570991][T16382] should_fail.cold+0x5/0x14 [ 1027.571011][T16382] ? fb_alloc_cmap_gfp+0x481/0x780 [ 1027.571026][T16382] should_failslab+0x5/0xf [ 1027.571042][T16382] __kmalloc+0x27d/0x340 [ 1027.571062][T16382] fb_alloc_cmap_gfp+0x481/0x780 [ 1027.571088][T16382] fb_set_user_cmap+0x154/0x450 [ 1027.571104][T16382] ? fb_cmap_to_user+0x450/0x450 [ 1027.571125][T16382] ? __might_fault+0x190/0x1d0 [ 1027.571148][T16382] do_fb_ioctl+0x66e/0x6c0 [ 1027.571167][T16382] ? fb_set_suspend+0x1a0/0x1a0 [ 1027.571197][T16382] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1027.571215][T16382] ? tomoyo_path_number_perm+0x244/0x4d0 [ 1027.571236][T16382] ? lock_acquire+0x1f1/0xad0 [ 1027.571249][T16382] ? __might_fault+0xef/0x1d0 [ 1027.571263][T16382] ? find_held_lock+0x2d/0x110 [ 1027.571278][T16382] ? __might_fault+0x11f/0x1d0 [ 1027.571297][T16382] ? lock_downgrade+0x820/0x820 [ 1027.571319][T16382] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1027.571345][T16382] fb_compat_ioctl+0x551/0xc10 [ 1027.571362][T16382] ? fb_open+0x430/0x430 [ 1027.571381][T16382] ? __fget_files+0x294/0x400 [ 1027.571403][T16382] ? fb_open+0x430/0x430 [ 1027.571420][T16382] __do_compat_sys_ioctl+0x1d3/0x230 [ 1027.571442][T16382] do_syscall_32_irqs_on+0x3f/0x60 [ 1027.571460][T16382] do_fast_syscall_32+0x7f/0x120 [ 1027.571479][T16382] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.571492][T16382] RIP: 0023:0xf7fe9569 [ 1027.571497][T16382] Code: Bad RIP value. [ 1027.571506][T16382] RSP: 002b:00000000f5dc30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1027.571521][T16382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004605 [ 1027.571530][T16382] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1027.571539][T16382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1027.571548][T16382] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1027.571557][T16382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1027.799904][ T17] usb 1-1: device descriptor read/64, error 18 [ 1027.881367][ T27] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1028.069742][ T17] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1028.122862][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 1028.248472][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.248521][ T27] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.349749][ T17] usb 1-1: device descriptor read/64, error 18 [ 1028.400532][ T27] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.419658][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.427648][ T27] usb 6-1: Product: syz [ 1028.450771][ T27] usb 6-1: Manufacturer: syz [ 1028.455402][ T27] usb 6-1: SerialNumber: syz [ 1028.501774][ T27] usb 6-1: selecting invalid altsetting 1 [ 1028.739702][ T17] usb 1-1: device descriptor read/64, error 18 [ 1028.859803][ T17] usb usb1-port1: attempt power cycle [ 1028.939743][ T27] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1028.945951][ T27] cdc_ncm 6-1:1.0: bind() failure [ 1028.978989][ T27] cdc_ncm 6-1:1.1: skipping garbage [ 1028.997662][ T27] cdc_ncm 6-1:1.1: bind() failure [ 1029.569626][ T17] usb 1-1: new high-speed USB device number 49 using dummy_hcd 10:02:30 executing program 4: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:30 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x20, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "32aa365e1eab"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x81, 0xf000, 0x80}, {0x6, 0x24, 0x1a, 0x22f, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0xffe0}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x60, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x1f, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe, 0x8, 0x6}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x67b7007b17b3e21e, 0x7f, 0x4, 0x81, 0x10, 0x5}, 0x116, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4, [{0xb6, &(0x7f0000000140)=@string={0xb6, 0x3, "93a5fa1a884eee2cf22ffc28babcd67c82c08e849da3fdf3a5bb4f1f5abcb8f09990fe1dbf86f48fe9e9bc57c09eca4ccf36ca10b4db2535a4dfc582c3aab31653a6cc7af2be832b53f4ef103d02087387548cae06459ce75fa3a5c616b4ac369a8acb0ec1ce14634cb1cde5f30dfefa00356890363fef1cde5a9d3c0c88d6844f43642bd266eedd2502547b5131cdfb0471d636c4066dd78198a4c09971ab61bb84b9488ad94b54b8bc98e060370c065cce406f"}}, {0x2c, &(0x7f0000000400)=@string={0x2c, 0x3, "87b875a392e15f62c0ab483b9911f588f4a3905c21ec69985677aeffcd601e7e466f7c7b837c2c7906ce"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5513) [ 1029.709667][ T17] usb 1-1: device descriptor read/8, error -71 [ 1029.919649][ T17] usb 1-1: device descriptor read/8, error -71 [ 1030.409475][ T17] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1030.500189][ T17] usb 1-1: Using ep0 maxpacket: 8 10:02:31 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:31 executing program 2 (fault-call:2 fault-nth:4): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5525) 10:02:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1030.552589][T30884] usb 6-1: USB disconnect, device number 44 10:02:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x0, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:31 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1030.620180][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.650197][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:02:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5546) 10:02:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x0, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:31 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1030.716934][T16434] FAULT_INJECTION: forcing a failure. [ 1030.716934][T16434] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.716951][T16434] CPU: 0 PID: 16434 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 1030.716959][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.716964][T16434] Call Trace: [ 1030.716982][T16434] dump_stack+0x18f/0x20d [ 1030.717000][T16434] should_fail.cold+0x5/0x14 [ 1030.717015][T16434] ? fb_alloc_cmap_gfp+0x481/0x780 [ 1030.717027][T16434] should_failslab+0x5/0xf [ 1030.717041][T16434] __kmalloc+0x27d/0x340 [ 1030.717056][T16434] fb_alloc_cmap_gfp+0x481/0x780 [ 1030.717073][T16434] fb_set_user_cmap+0x154/0x450 [ 1030.717086][T16434] ? fb_cmap_to_user+0x450/0x450 [ 1030.717102][T16434] ? __might_fault+0x190/0x1d0 [ 1030.717120][T16434] do_fb_ioctl+0x66e/0x6c0 [ 1030.717134][T16434] ? fb_set_suspend+0x1a0/0x1a0 [ 1030.717158][T16434] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1030.717173][T16434] ? tomoyo_path_number_perm+0x244/0x4d0 [ 1030.717191][T16434] ? lock_acquire+0x1f1/0xad0 [ 1030.717202][T16434] ? __might_fault+0xef/0x1d0 [ 1030.717218][T16434] ? find_held_lock+0x2d/0x110 [ 1030.717230][T16434] ? __might_fault+0x11f/0x1d0 [ 1030.717245][T16434] ? lock_downgrade+0x820/0x820 [ 1030.717263][T16434] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1030.717283][T16434] fb_compat_ioctl+0x551/0xc10 [ 1030.717297][T16434] ? fb_open+0x430/0x430 [ 1030.717312][T16434] ? __fget_files+0x294/0x400 [ 1030.717329][T16434] ? fb_open+0x430/0x430 [ 1030.717343][T16434] __do_compat_sys_ioctl+0x1d3/0x230 [ 1030.717361][T16434] do_syscall_32_irqs_on+0x3f/0x60 [ 1030.717375][T16434] do_fast_syscall_32+0x7f/0x120 [ 1030.717391][T16434] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1030.717401][T16434] RIP: 0023:0xf7fe9569 [ 1030.717405][T16434] Code: Bad RIP value. [ 1030.717412][T16434] RSP: 002b:00000000f5dc30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1030.717424][T16434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004605 [ 1030.717431][T16434] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.717438][T16434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1030.717445][T16434] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1030.717453][T16434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1030.731223][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1030.731247][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1030.908895][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1030.908917][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.908932][ T17] usb 1-1: Product: syz [ 1030.908947][ T17] usb 1-1: Manufacturer: syz [ 1030.908963][ T17] usb 1-1: SerialNumber: syz [ 1031.131991][T30884] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1031.384248][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1031.388656][T16414] udc-core: couldn't find an available UDC or it's busy [ 1031.388676][T16414] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1031.499374][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.499421][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.668807][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.668828][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.668843][T30884] usb 6-1: Product: syz [ 1031.668858][T30884] usb 6-1: Manufacturer: syz [ 1031.668872][T30884] usb 6-1: SerialNumber: syz [ 1031.723577][T30884] usb 6-1: selecting invalid altsetting 1 [ 1032.082499][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1032.119449][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1032.149498][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1032.159808][T30884] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1032.169717][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1032.178227][ T17] usb 1-1: USB disconnect, device number 50 [ 1032.201374][T30884] cdc_ncm 6-1:1.1: skipping garbage [ 1032.227276][T30884] cdc_ncm 6-1:1.1: bind() failure [ 1032.839290][ T17] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1033.089049][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1033.209100][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.229095][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.249020][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1033.269211][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.439796][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1033.448855][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.465042][ T17] usb 1-1: Product: syz [ 1033.495060][ T17] usb 1-1: Manufacturer: syz [ 1033.500699][ T17] usb 1-1: SerialNumber: syz 10:02:34 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0028487506cc00090500739e00"/102], 0x0) io_setup(0x80000001, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000300)={0x2, 0x2, 0x5, {0x8, 0x7, 0x7, 0x9}}) io_pgetevents(r1, 0x4, 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x4]}, 0x8}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x0, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1033.538953][ C1] raw-gadget gadget: ignoring, device is not running [ 1033.546165][ T17] usb 1-1: can't set config #1, error -32 [ 1033.562922][ T17] usb 1-1: USB disconnect, device number 51 10:02:34 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5563) 10:02:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:34 executing program 2 (fault-call:2 fault-nth:5): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67]}}) [ 1033.738510][T30884] usb 6-1: USB disconnect, device number 45 10:02:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101]}}) 10:02:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x6364) 10:02:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1]}}) [ 1034.009146][ T17] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1034.284216][ T17] usb 1-1: device descriptor read/64, error 18 [ 1034.319060][T30884] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1034.568938][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1034.679518][ T17] usb 1-1: device descriptor read/64, error 18 [ 1034.690014][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.708892][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.899584][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1034.915379][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.927090][T30884] usb 6-1: Product: syz [ 1034.948912][ T17] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1034.956520][T30884] usb 6-1: Manufacturer: syz [ 1034.968899][T30884] usb 6-1: SerialNumber: syz [ 1035.019777][T30884] usb 6-1: selecting invalid altsetting 1 [ 1035.218822][ T17] usb 1-1: device descriptor read/64, error 18 [ 1035.458848][T30884] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1035.464878][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1035.490121][T30884] cdc_ncm 6-1:1.1: skipping garbage [ 1035.495359][T30884] cdc_ncm 6-1:1.1: bind() failure [ 1035.628773][ T17] usb 1-1: device descriptor read/64, error 18 [ 1035.748890][ T17] usb usb1-port1: attempt power cycle [ 1036.458709][ T17] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1036.558715][ T17] usb 1-1: Invalid ep0 maxpacket: 9 10:02:37 executing program 0: r0 = gettid() ptrace$setregs(0xd, r0, 0xf0, &(0x7f0000000040)="2e56a84e02334dad92c185c0bc2f1ba153407a53df10ce5cf3b3121be8a745b8feb46a306ad2164c5a6ae0993cb61e8d429d4b924c6cb1c5ada5729e5d57c4") r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x121800, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r3}}, 0x18) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 10:02:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1036.708705][ T17] usb 1-1: new high-speed USB device number 55 using dummy_hcd 10:02:37 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8912) 10:02:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6]}}) 10:02:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1036.866758][T28418] usb 6-1: USB disconnect, device number 46 10:02:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9]}}) 10:02:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8933) 10:02:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1037.198539][ T17] usb 1-1: device not accepting address 55, error -71 [ 1037.206758][ T17] usb usb1-port1: unable to enumerate USB device [ 1037.368567][T28418] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1037.583377][ T17] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1037.628433][T28418] usb 6-1: Using ep0 maxpacket: 8 [ 1037.749094][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.769190][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.818507][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1037.939157][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.955744][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.968806][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1037.976980][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1037.977843][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.977858][T28418] usb 6-1: Product: syz [ 1037.977873][T28418] usb 6-1: Manufacturer: syz [ 1037.994740][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.018328][T28418] usb 6-1: SerialNumber: syz [ 1038.179182][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1038.188245][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.205249][ T17] usb 1-1: Product: syz [ 1038.210212][ T17] usb 1-1: Manufacturer: syz [ 1038.214947][ T17] usb 1-1: SerialNumber: syz [ 1039.148443][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1039.165435][T28418] usb 6-1: USB disconnect, device number 47 [ 1039.368537][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1039.408493][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1039.428302][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1039.448636][ T17] usb 1-1: USB disconnect, device number 56 [ 1040.128214][ T17] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1040.378153][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1040.498887][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.514740][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.539159][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1040.555552][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:02:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002e90b082505a1a440000102030109025c000201000000090400000101fa0000052406200105240000080000000000000000000000000006241a000000020d00000906010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$ion(0xffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xff02) 10:02:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000]}}) 10:02:41 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1040.768185][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:02:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3]}}) 10:02:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400454ca) 10:02:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 10:02:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004550a) 10:02:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5]}}) [ 1040.787754][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.787771][ T17] usb 1-1: Product: syz [ 1040.828208][ T17] usb 1-1: can't set config #1, error -71 10:02:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) [ 1040.830675][ T17] usb 1-1: USB disconnect, device number 57 [ 1041.068228][T28420] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1041.228074][ T17] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1041.311221][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1041.428902][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.442786][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.488073][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1041.608085][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.619840][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.629051][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.637034][T28420] usb 6-1: Product: syz [ 1041.644869][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1041.654863][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1041.668948][T28420] usb 6-1: Manufacturer: syz [ 1041.673559][T28420] usb 6-1: SerialNumber: syz [ 1041.838606][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.852189][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.864550][ T17] usb 1-1: Product: syz [ 1041.872911][ T17] usb 1-1: Manufacturer: syz [ 1041.877619][ T17] usb 1-1: SerialNumber: syz [ 1042.827912][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1042.858835][T28420] usb 6-1: USB disconnect, device number 48 10:02:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000200000853aaa1a440000102030109025c0002010000000904000001027c4900052406000105240000000d240f0100000000000000007bcffb36dda4f51420f2d77aac0006241a00000000090582739e000000000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f}}) 10:02:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045564) 10:02:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 10:02:44 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1043.834507][T28420] usb 1-1: USB disconnect, device number 58 10:02:45 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', 0x0}) 10:02:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045565) 10:02:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045566) 10:02:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', 0x0}) [ 1044.204060][T30884] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1044.388206][T28420] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1044.407663][T28417] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1044.448100][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1044.568337][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.587587][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.613751][T30884] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1044.627751][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1044.657675][T28417] usb 2-1: Using ep0 maxpacket: 8 [ 1044.767802][T28420] usb 1-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 1044.778394][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.788314][T28417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.792173][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.805117][T28417] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.810532][T28420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1044.827621][T30884] usb 6-1: Product: syz [ 1044.831921][T30884] usb 6-1: Manufacturer: syz [ 1044.836647][T30884] usb 6-1: SerialNumber: syz [ 1044.843287][T28420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1044.899317][T30884] usb 6-1: selecting invalid altsetting 1 [ 1045.007949][T28417] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1045.017000][T28417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.018194][T28420] usb 1-1: New USB device found, idVendor=aa53, idProduct=a4a1, bcdDevice= 0.40 [ 1045.036276][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.045426][T28420] usb 1-1: Product: syz [ 1045.047965][T28417] usb 2-1: Product: syz [ 1045.051127][T28420] usb 1-1: Manufacturer: syz [ 1045.056306][T28417] usb 2-1: Manufacturer: syz [ 1045.060069][T28420] usb 1-1: SerialNumber: syz [ 1045.075601][T28417] usb 2-1: SerialNumber: syz [ 1045.337562][T30884] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1045.343611][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1045.374385][T30884] cdc_ncm 6-1:1.1: bind() failure [ 1046.257625][T28417] cdc_ncm 2-1:1.0: bind() failure [ 1046.283501][T28417] usb 2-1: USB disconnect, device number 72 [ 1046.896833][T30884] usb 6-1: USB disconnect, device number 49 10:02:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000810340000000000904010000020d00000904010102020d0000090582739e0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x2c0040) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x6f, 0x9}) 10:02:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', 0x0}) 10:02:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045567) 10:02:48 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:48 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:48 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1046.996545][ T17] usb 1-1: USB disconnect, device number 59 10:02:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045568) 10:02:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x0, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045569) 10:02:48 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4606, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x0, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1047.377176][T28417] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1047.467368][T30884] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1047.557292][ T17] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1047.647458][T28417] usb 2-1: Using ep0 maxpacket: 8 [ 1047.707298][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1047.787214][T28417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.797197][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1047.807105][T28417] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.827905][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.847171][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.867171][T30884] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1047.917260][ T17] usb 1-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 1047.937114][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1047.946019][ T17] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.017784][T28417] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.026834][T28417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.037961][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.056671][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.057035][T28417] usb 2-1: Product: syz [ 1048.065297][T30884] usb 6-1: Product: syz [ 1048.074179][T30884] usb 6-1: Manufacturer: syz [ 1048.079305][T30884] usb 6-1: SerialNumber: syz [ 1048.079862][T28417] usb 2-1: Manufacturer: syz [ 1048.113296][T28417] usb 2-1: SerialNumber: syz [ 1048.127920][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.138157][T30884] usb 6-1: selecting invalid altsetting 1 [ 1048.146096][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.180573][ T17] usb 1-1: Product: syz [ 1048.190765][ T17] usb 1-1: Manufacturer: syz [ 1048.201147][ T17] usb 1-1: SerialNumber: syz [ 1048.251175][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1048.577203][T30884] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1048.583241][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1048.602492][T30884] cdc_ncm 6-1:1.1: bind() failure [ 1049.307097][T28417] cdc_ncm 2-1:1.0: bind() failure [ 1049.332370][T28417] usb 2-1: USB disconnect, device number 73 [ 1050.072663][ T17] usb 6-1: USB disconnect, device number 50 10:02:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556a) 10:02:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x0, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) 10:02:51 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x460f, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:51 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe4) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040), 0x1d4, r3) r4 = request_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\xee\x89\x1c\x1b\x05K\xb8F\x87E\xa2}\x12f\x00', r3) keyctl$get_persistent(0x16, r2, r4) syz_usb_control_io(r0, 0x0, 0x0) 10:02:51 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1050.865931][T28417] usb 1-1: USB disconnect, device number 60 10:02:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67]}}) 10:02:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 10:02:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101]}}) 10:02:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556c) 10:02:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1051.242265][T28418] usb 6-1: new high-speed USB device number 51 using dummy_hcd 10:02:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1]}}) 10:02:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4610, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) [ 1051.376915][T28417] usb 1-1: new high-speed USB device number 61 using dummy_hcd 10:02:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6]}}) [ 1051.477537][T28418] usb 6-1: Using ep0 maxpacket: 8 [ 1051.608253][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.608304][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.608323][T28418] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1051.677440][T28417] usb 1-1: device descriptor read/64, error 18 [ 1051.797893][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1051.813764][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.842614][T28418] usb 6-1: Product: syz [ 1051.857961][T28418] usb 6-1: Manufacturer: syz [ 1051.869502][T28418] usb 6-1: SerialNumber: syz [ 1051.928484][T28418] usb 6-1: selecting invalid altsetting 1 [ 1052.076657][T28417] usb 1-1: device descriptor read/64, error 18 [ 1052.356650][T28417] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1052.376847][T28418] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1052.382893][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1052.401166][T28418] cdc_ncm 6-1:1.1: bind() failure [ 1052.646599][T28417] usb 1-1: device descriptor read/64, error 18 [ 1053.056476][T28417] usb 1-1: device descriptor read/64, error 18 [ 1053.178037][T28417] usb usb1-port1: attempt power cycle [ 1053.906448][T28417] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1053.931514][ T17] usb 6-1: USB disconnect, device number 51 10:02:55 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:02:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000, 0x9]}}) 10:02:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 10:02:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:55 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:55 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d0000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1054.056524][T28417] usb 1-1: device descriptor read/8, error -71 10:02:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3, 0x28000]}}) 10:02:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40049409) 10:02:55 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1054.276559][T28417] usb 1-1: device descriptor read/8, error -71 10:02:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5, 0x3]}}) [ 1054.476539][ T17] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1054.716273][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1054.776378][T28417] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1054.841921][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.866536][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.886441][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1054.886977][ T17] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1055.016404][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.042844][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.055541][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1055.056860][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1055.073770][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.106222][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.114208][ T17] usb 6-1: Product: syz [ 1055.146604][ T17] usb 6-1: Manufacturer: syz [ 1055.151221][ T17] usb 6-1: SerialNumber: syz [ 1055.207636][ T17] usb 6-1: selecting invalid altsetting 1 [ 1055.276942][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1055.286437][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.294558][T28417] usb 1-1: Product: syz [ 1055.316274][T28417] usb 1-1: Manufacturer: syz [ 1055.320882][T28417] usb 1-1: SerialNumber: syz [ 1055.592348][T16906] udc-core: couldn't find an available UDC or it's busy [ 1055.604069][T16906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1055.646344][ T17] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1055.652526][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1055.669480][ T17] cdc_ncm 6-1:1.1: bind() failure [ 1056.092207][T28417] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1056.099567][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1056.135559][T28417] cdc_ncm 1-1:1.1: bind() failure [ 1056.161076][T28417] usb 1-1: USB disconnect, device number 64 [ 1056.846048][ T17] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1057.066465][T30884] usb 6-1: USB disconnect, device number 52 [ 1057.086111][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1057.206601][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.222468][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.243657][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1057.262056][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1057.426685][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1057.435751][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.445319][ T17] usb 1-1: Product: syz [ 1057.450753][ T17] usb 1-1: Manufacturer: syz [ 1057.455371][ T17] usb 1-1: SerialNumber: syz 10:02:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_control_io(r0, 0x0, 0x0) 10:02:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40085503) 10:02:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f, [0x5]}}) 10:02:58 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:58 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:58 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d0000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1057.537124][ T17] usb 1-1: can't set config #1, error -71 10:02:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x0, 0x61f}}) [ 1057.580692][ T17] usb 1-1: USB disconnect, device number 65 10:02:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 10:02:58 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 10:02:58 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:02:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40095505) [ 1057.875960][T28418] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1058.119682][T28418] usb 6-1: Using ep0 maxpacket: 8 [ 1058.126801][ T17] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1058.246545][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.262477][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.275017][T28418] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1058.365986][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1058.456553][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1058.475849][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.483867][T28418] usb 6-1: Product: syz [ 1058.486549][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.495782][T28418] usb 6-1: Manufacturer: syz [ 1058.502677][T28418] usb 6-1: SerialNumber: syz [ 1058.503761][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.527515][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1058.545082][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.586695][T28418] usb 6-1: selecting invalid altsetting 1 [ 1058.715941][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1058.725241][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.755958][ T17] usb 1-1: Product: syz [ 1058.760647][ T17] usb 1-1: Manufacturer: syz [ 1058.765257][ T17] usb 1-1: SerialNumber: syz [ 1059.015865][T28418] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1059.023286][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1059.033693][T28418] cdc_ncm 6-1:1.1: bind() failure [ 1059.895824][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1059.935937][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1059.965802][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1059.986746][ T17] usb 1-1: USB disconnect, device number 66 [ 1060.580909][T30884] usb 6-1: USB disconnect, device number 53 [ 1060.665951][T28418] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1060.925997][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1061.056463][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.077347][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.105705][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.117079][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:03:02 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 10:03:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 10:03:02 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d0000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1061.335697][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1061.344784][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:03:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40186366) 10:03:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) [ 1061.412489][T28418] usb 1-1: Product: syz 10:03:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1061.412507][T28418] usb 1-1: Manufacturer: syz [ 1061.445561][T28418] usb 1-1: can't set config #1, error -71 10:03:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020940d) [ 1061.446961][T28418] usb 1-1: USB disconnect, device number 67 [ 1061.685556][T28417] usb 6-1: new high-speed USB device number 54 using dummy_hcd 10:03:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4004556d) [ 1061.915391][T28418] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1061.946242][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1062.066031][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.096146][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.117629][T28417] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1062.165460][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1062.286972][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.298631][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.315513][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.330227][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.340356][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1062.359722][T28417] usb 6-1: Product: syz [ 1062.368424][T28417] usb 6-1: Manufacturer: syz [ 1062.373948][T28417] usb 6-1: SerialNumber: syz [ 1062.381187][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1062.445838][T28417] usb 6-1: selecting invalid altsetting 1 [ 1062.556148][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.575218][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.583375][T28418] usb 1-1: Product: syz [ 1062.605291][T28418] usb 1-1: Manufacturer: syz [ 1062.609921][T28418] usb 1-1: SerialNumber: syz [ 1062.855393][T28417] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1062.861579][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1062.894939][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1063.755284][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1063.795497][T28418] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1063.818749][T28418] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1063.831364][T28418] usb 1-1: USB disconnect, device number 68 [ 1064.384383][T28420] usb 6-1: USB disconnect, device number 54 [ 1064.525207][T30214] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1064.775086][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1064.895750][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.915341][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.955063][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.966957][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.145220][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.154300][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.181884][T30214] usb 1-1: Product: syz [ 1065.186983][T30214] usb 1-1: Manufacturer: syz 10:03:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) 10:03:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:06 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x402c5828) 10:03:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 10:03:06 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1065.191661][T30214] usb 1-1: SerialNumber: syz [ 1065.235161][T30214] usb 1-1: can't set config #1, error -71 10:03:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 10:03:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x402c5829) 10:03:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1065.265090][T30214] usb 1-1: USB disconnect, device number 69 10:03:06 executing program 4: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4004556d) 10:03:06 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x402c582a) [ 1065.555141][T28417] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1065.735035][T30214] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1065.815014][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1065.947448][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.947489][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.986096][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1066.107292][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1066.116465][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.127466][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.138173][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.150250][T28417] usb 6-1: Product: syz [ 1066.154436][T28417] usb 6-1: Manufacturer: syz [ 1066.161325][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1066.173775][T28417] usb 6-1: SerialNumber: syz [ 1066.179996][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.375047][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1066.384252][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.401147][T30214] usb 1-1: Product: syz [ 1066.406425][T30214] usb 1-1: Manufacturer: syz [ 1066.411196][T30214] usb 1-1: SerialNumber: syz [ 1066.880044][T28417] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1066.894902][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1066.926639][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1066.962253][T28417] usb 6-1: USB disconnect, device number 55 [ 1067.600869][T30214] cdc_ncm 1-1:1.0: bind() failure [ 1067.630998][T30214] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1067.662459][T30214] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1067.672467][T30214] usb 1-1: USB disconnect, device number 70 [ 1068.354585][T30214] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1068.594564][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1068.715251][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.731068][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.745049][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1068.764781][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.964607][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1068.973656][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.002777][T30214] usb 1-1: Product: syz [ 1069.007837][T30214] usb 1-1: Manufacturer: syz 10:03:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020400040e000000000000000000000005000600000000000a00000000000000ff0200000000000034b4f154c339000000000000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000200100"/118], 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x7fff, 0x1f) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x3) r3 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) [ 1069.012462][T30214] usb 1-1: SerialNumber: syz 10:03:10 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:10 executing program 4: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4004556d) 10:03:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x402c582b) 10:03:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1069.044601][T30214] usb 1-1: can't set config #1, error -71 [ 1069.062253][T30214] usb 1-1: USB disconnect, device number 71 10:03:10 executing program 4: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4004556d) 10:03:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x402c5839) 10:03:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 10:03:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x405c5503) [ 1069.398478][T30884] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1069.614740][T30214] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1069.664531][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1069.785075][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.814477][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.905134][T30214] usb 1-1: device descriptor read/64, error 18 [ 1070.004626][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.013678][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.023321][T30884] usb 6-1: Product: syz [ 1070.029661][T30884] usb 6-1: Manufacturer: syz [ 1070.042302][T30884] usb 6-1: SerialNumber: syz [ 1070.324421][T30214] usb 1-1: device descriptor read/64, error 18 [ 1070.596187][T30214] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1070.744380][T30884] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1070.751092][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1070.792149][T30884] cdc_ncm 6-1:1.1: bind() failure [ 1070.819520][T30884] usb 6-1: USB disconnect, device number 56 [ 1070.884488][T30214] usb 1-1: device descriptor read/64, error 18 [ 1071.284377][T30214] usb 1-1: device descriptor read/64, error 18 [ 1071.404444][T30214] usb usb1-port1: attempt power cycle [ 1072.125120][T30214] usb 1-1: new high-speed USB device number 74 using dummy_hcd 10:03:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006240905810340000000000904010000020d00000904010102020d0000090582739e00000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406055c9) 10:03:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 10:03:13 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:13 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1072.234335][T30214] usb 1-1: device descriptor read/8, error -71 10:03:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 10:03:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 10:03:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x41015500) [ 1072.444308][T30214] usb 1-1: device descriptor read/8, error -71 10:03:13 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4004556d) 10:03:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:13 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x8912, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1072.595688][T28417] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1072.835672][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1072.954163][T30214] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1072.964810][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.977103][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.081039][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1073.164261][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1073.173792][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.189617][T28417] usb 6-1: Product: syz [ 1073.195779][T28417] usb 6-1: Manufacturer: syz [ 1073.200513][T28417] usb 6-1: SerialNumber: syz [ 1073.211454][T30214] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 1073.223619][T30214] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1073.247437][T30214] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1073.444875][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1073.458666][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.470806][T30214] usb 1-1: Product: syz [ 1073.479748][T30214] usb 1-1: Manufacturer: syz [ 1073.488462][T30214] usb 1-1: SerialNumber: syz [ 1073.544874][T30214] cdc_ncm 1-1:1.0: bind() failure [ 1073.924011][T28417] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1073.930068][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1073.952264][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1073.985968][T28417] usb 6-1: USB disconnect, device number 57 10:03:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:16 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4004556d) 10:03:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 10:03:16 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:16 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1075.350005][T28417] usb 1-1: USB disconnect, device number 75 10:03:16 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0024f100000d240f0100000000000000000904010000020000000000000002020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000000c0)={0xfff9, {0x928, 0x0, 0x4, 0x9, 0xfff, 0x8ab8}}) 10:03:16 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x4004556d) 10:03:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80084505) 10:03:16 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:16 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x89f7, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80085502) [ 1075.713762][T28420] usb 6-1: new high-speed USB device number 58 using dummy_hcd 10:03:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086301) 10:03:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:17 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xab09, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1075.913772][T28417] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1075.953707][T28420] usb 6-1: Using ep0 maxpacket: 8 10:03:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8010661b) [ 1076.023720][ T17] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1076.074371][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.074421][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.163749][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1076.234391][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1076.243460][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.253304][T28420] usb 6-1: Product: syz [ 1076.258329][T28420] usb 6-1: Manufacturer: syz [ 1076.262939][T28420] usb 6-1: SerialNumber: syz [ 1076.274344][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 1076.295916][T28417] usb 1-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 1076.317873][T28417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1076.360524][T28417] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1076.396801][ T17] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.434413][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.554309][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1076.563423][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.572640][T28417] usb 1-1: Product: syz [ 1076.579073][T28417] usb 1-1: Manufacturer: syz [ 1076.584565][T28417] usb 1-1: SerialNumber: syz [ 1076.633896][ T17] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1076.642941][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.673702][ T17] usb 5-1: Product: syz [ 1076.677894][ T17] usb 5-1: Manufacturer: syz [ 1076.682479][ T17] usb 5-1: SerialNumber: syz [ 1076.832481][T17318] udc-core: couldn't find an available UDC or it's busy [ 1076.846579][T17318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1076.954292][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1076.961749][T28417] usb 1-1: USB disconnect, device number 76 [ 1076.963720][T28420] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1076.983726][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1077.017868][T28420] cdc_ncm 6-1:1.1: bind() failure [ 1077.073984][T28420] usb 6-1: USB disconnect, device number 58 10:03:18 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1077.493775][ T17] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1077.499837][ T17] cdc_ncm 5-1:1.0: bind() failure [ 1077.544917][ T17] cdc_ncm 5-1:1.1: bind() failure [ 1077.583747][ T17] usb 5-1: USB disconnect, device number 29 [ 1077.743539][T28420] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1077.793560][T28417] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1077.983517][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1078.033381][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1078.103565][T28420] usb 1-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 1078.115249][T28420] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1078.127452][T28420] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1078.183621][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.203547][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.293801][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1078.302851][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.323468][T28420] usb 1-1: Product: syz [ 1078.327708][T28420] usb 1-1: Manufacturer: syz [ 1078.332278][T28420] usb 1-1: SerialNumber: syz [ 1078.423546][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1078.432712][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.442446][T28417] usb 6-1: Product: syz [ 1078.463327][T28417] usb 6-1: Manufacturer: syz [ 1078.467949][T28417] usb 6-1: SerialNumber: syz 10:03:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xae01, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:19 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x802c560a) 10:03:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="11e40000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000200000000000006241a0000000905810340000002000904010000020d00000904010102020000000001000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x824, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0xe3, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x1, 0x63, 0x1, {0x22, 0x979}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xe2, 0x4, 0x24}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0xcf49f32cdee192fc, 0xff, 0x0, 0xa, 0x20, 0x7}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x20, 0x2, 0x0, 0x7, 0x7, [0xcf, 0xffc0ff]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x40, 0x8000}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1809}}, {0x24, &(0x7f0000000140)=@string={0x24, 0x3, "0fa4dc1622365b9a2f7933c233339d6be06ec45d78a1b89056ba435b11ebcfc90402"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x409}}, {0x33, &(0x7f0000000400)=ANY=[@ANYBLOB="3303ea0c757fd115417d04dda18242e0d6f56260195673f9e1937495d32b3157bc279fd30932d1468bd1634e761c000064606ca3"]}, {0x7, &(0x7f0000000300)=@string={0x7, 0x3, "833df98f78"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x140c}}, {0x0, 0x0}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:03:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1078.523985][T28420] cdc_ncm 1-1:1.0: bind() failure [ 1078.545924][T28420] usb 1-1: USB disconnect, device number 77 10:03:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 10:03:19 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 10:03:19 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0085504) 10:03:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) [ 1079.103334][T28420] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1079.183478][T28417] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1079.190990][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1079.246486][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1079.269976][T28417] usb 6-1: USB disconnect, device number 59 [ 1079.353268][T28420] usb 1-1: Using ep0 maxpacket: 32 [ 1079.556988][T28420] usb 1-1: config 1 interface 0 altsetting 227 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 1079.573634][T28420] usb 1-1: config 1 interface 0 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1079.603290][T28420] usb 1-1: config 1 interface 0 has no altsetting 0 10:03:20 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xae41, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) [ 1079.763281][T28420] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1079.763301][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.763315][T28420] usb 1-1: Product: Э [ 1079.763331][T28420] usb 1-1: Manufacturer: ꐏᛜ㘢驛礯숳㌳殝滠巄ꅸ邸멖孃짏Ȅ [ 1079.763346][T28420] usb 1-1: SerialNumber: Љ [ 1080.010346][T17421] udc-core: couldn't find an available UDC or it's busy [ 1080.010370][T17421] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1080.043171][T28418] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1080.233226][T28420] usbhid 1-1:1.0: can't add hid device: -71 [ 1080.239226][T28420] usbhid: probe of 1-1:1.0 failed with error -71 [ 1080.255207][T28420] usb 1-1: USB disconnect, device number 78 [ 1080.283229][T28418] usb 6-1: Using ep0 maxpacket: 8 [ 1080.423946][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.434493][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.633797][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.646680][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.658741][T28418] usb 6-1: Product: syz [ 1080.663849][T28418] usb 6-1: Manufacturer: syz [ 1080.668593][T28418] usb 6-1: SerialNumber: syz [ 1080.843417][T28417] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1081.093001][T28417] usb 1-1: Using ep0 maxpacket: 32 [ 1081.303811][T28417] usb 1-1: config 1 interface 0 altsetting 227 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 1081.322015][T28417] usb 1-1: config 1 interface 0 altsetting 227 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.345345][T28417] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1081.373188][T28418] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1081.382447][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1081.415304][T28418] cdc_ncm 6-1:1.1: bind() failure [ 1081.430858][T28418] usb 6-1: USB disconnect, device number 60 [ 1081.524056][T28417] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1081.542986][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.550976][T28417] usb 1-1: Product: Э [ 1081.556888][T28417] usb 1-1: Manufacturer: ꐏᛜ㘢驛礯숳㌳殝滠巄ꅸ邸멖孃짏Ȅ [ 1081.567022][T28417] usb 1-1: SerialNumber: Љ 10:03:22 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d000005240600010524000000240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) 10:03:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) 10:03:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0189436) 10:03:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xae60, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1081.663637][T28417] usb 1-1: can't set config #1, error -71 [ 1081.687999][T28417] usb 1-1: USB disconnect, device number 79 10:03:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 10:03:22 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06055c8) 10:03:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) 10:03:23 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xae80, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:23 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:23 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1082.153019][T28417] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1082.302981][T28418] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1082.392962][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1082.527810][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.552921][T28418] usb 6-1: Using ep0 maxpacket: 8 [ 1082.558075][T28417] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1082.574696][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1082.586396][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.601027][T28417] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1082.673656][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.689539][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.784678][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1082.802906][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.810914][T28417] usb 1-1: Product: syz [ 1082.817372][T28417] usb 1-1: Manufacturer: syz [ 1082.821984][T28417] usb 1-1: SerialNumber: syz [ 1082.883254][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1082.892311][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.901848][T28417] cdc_ncm 1-1:1.0: skipping garbage [ 1082.907161][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1082.942934][T28418] usb 6-1: Product: syz [ 1082.947123][T28418] usb 6-1: Manufacturer: syz [ 1082.962917][T28418] usb 6-1: SerialNumber: syz [ 1083.662890][T28418] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1083.668958][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1083.699502][T28418] cdc_ncm 6-1:1.1: bind() failure [ 1083.718854][T28418] usb 6-1: USB disconnect, device number 61 10:03:25 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 10:03:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:25 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:25 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:25 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = dup(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x2, 0x0, 0x0, 0x0, 0x1f}, 0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = dup(r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) dup3(r4, r5, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}}, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x4, 0x654, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x58, 0xcd, 0x3b, 0x20, 0x4fc, 0xffff, 0xd039, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x642, 0x2, 0x2, 0x0, 0xa0, 0x1, [{{0x9, 0x4, 0x68, 0x0, 0x3, 0xf0, 0xdd, 0x13, 0x7, [], [{{0x9, 0x5, 0x4, 0x4, 0x40, 0x3, 0x3, 0x1, [@generic={0x73, 0x9, "a7418d202fcf378bf21a37dbb4e6edb7d5038ec6660208cd7e1ca4b5aa73f166bb0bde127402ee267afd73913522665958e8dd19ff3266df9c0f632c19997d01b7f9f45c2c40a5fc9e89c517663cfe2c9e3ffd042749bb0272ed58de07dcbdb67a89fb1c1ea38b5acaf7f19fc84821d7a6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x33}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0xcd, 0xee, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x40, 0x2, 0x7, [@generic={0xe9, 0x9, "81b5277781c617ac025ed3dbe9b0e2eb93ce5a2042000a14fe8897851c0a3081979c54264645ec55e8904de70ee1dcb7a53bc510ea5148dd9f32423f22f1ea67ddc37717f67a51d5da8e1b9318b7f8666fbca854b589bac347d8fe818432e7d26b770ae75efab3208c0b2fdbde64f3bda64fe5bd0933b1b6fc5146aa88250397d702a037ac99eadf82e33232bacfef6f5eacc03d5f666898858d8b1a3cdf544211c92016be993ca4e2673f386ec91b305df471eb40152bfca405cdbb8c2136610db658e544a9e3f0c4afa8ae68923e1fc762070260be3407e3c590a8a386358fab90998586a888"}]}}]}}, {{0x9, 0x4, 0x77, 0xff, 0xa, 0x34, 0xef, 0x8f, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e1947b"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x39}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0xfff}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x24fb, [0x2, 0x0, 0x6, 0x1, 0x29ae, 0x43]}, @mbim={0xc, 0x24, 0x1b, 0x200, 0x200, 0x1f, 0xff}, @acm={0x4, 0x24, 0x2, 0xf}, @mbim={0xc, 0x24, 0x1b, 0xacf2, 0x8001, 0x2, 0x5, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x6, 0x7, 0xf2, 0x9, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x6}, [@selector_unit={0x9, 0x24, 0x5, 0x5, 0x4, "a8e0f72f"}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x6, 0xe0, "bb"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x9, "7248c2433fea"}]}], [{{0x9, 0x5, 0xc, 0x4, 0x8, 0x2, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xe2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x1, 0x4, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x1000}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x7, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x5}, @generic={0x61, 0x21, "f86b6823ff0233514460a1f8217293341c2a850160f7300faaff912aa0affaeabf476ac4c020190992cc102d6a1258f0bb694ef1d0b5ac6d6691e97e97e57032ca5e39dd74e8ea7386e9c1b2e4f9f2910a80aadd1df49b539f7a24995b42df"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x8, 0x7f, 0x1, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x40, 0x40, 0x3, [@generic={0xba, 0xbd364b7f5d00e528, "97cca26b6a0936ea0335bda2f75014e621809bd52e8cd1aacff1e01901775059af3ee905e200608ced6964ddad1e58cafdb9f15cef14b87b06c17e32dd263ba20d4a4ebad6ca52a3c59d340b6cfdf43e947a0645b44557b61f492c15db91b325ec57e275c9b12da87ba517715e9789e79342eb15b8fc7252db06c960769b127f95e76221d3a4f551369d8fa6803464c9a0dbef5b44eb50760f3fd8be50a200fad064ef9f173d06d9fab7b0a126e6aa68e14c506455aab871"}, @generic={0x34, 0x31, "59afdff43f03f05dcc6b194a829733403def097db4d7e70872f0404a1fcf40c9ea395f8d9a8169360a761239cc64e9e5151f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xff, 0xab, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x3ff}]}}, {{0x9, 0x5, 0xf, 0xa, 0x400, 0x3, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x4, 0x1f, [@generic={0xf3, 0xc, "d4e35c76326abbf4ec06eb29f0d38f41703ee1ce2a441dc4a69975a619a54ae3647aa71f8c6436ddefc8348467fff00a4e2a34e312805161612b46997a0dd57ab47afe4463daafa35937efc9834572d6e8ded59bdccfe133d5a5c40ceada7fa43aeeb0a5362fda6b9ca0c60c4d1d738f0dc8a372c0e211ffcc3ca75bd3b8f7730ab3349443548721b6d86fced6d133e1a0a54f9948961eef22ac53b4cebf7fc7c4fd99fbda574497ad4ea3be63455573c14333d198af21c3db9a5157d10ae3125e07eccfc385a996f7e85baf4f24a7d22a05d5ca89f027754fc37b9c2f9b7555681c053f46a5beb1393ea5dd3f1f239a31"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1f}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x6, 0xff, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x81, 0x4, 0x7f, [@generic={0xe1, 0x30, "7d46553aac6f0cae249a8b244d34ddaf0ecf6641a1fba8625edf84d7e34b7f33b4ffc60d0c4a73cf347ae3aeeb45e57a6dcb1fbabc1f3b27dd9911fc1d1a843cb3082f050393c3fe83b821c9041524dadccaee8c93c7e0fa2d5bc9b52411e2cff104a5848bb65fa4647c951262e2fc510d80ddfd7bfd37d3bb1843a38fcb84778129896da0c0b480f1314b33b7515978a15ae96c731c2a4dd1e352f743735449720c1eee764ea087195b6295cf5eec2bad8ca7e761a925c8963e1824a1e057dac4207e1c6391a659f116d2f96bd61174a85012e55b7886ce9a42b05948f434"}, @generic={0x6b, 0x31, "51d57608a2103ee5a01b6a79f3aa46c322ab6a05d2280f17ca254e196abb0544da6dac290ae4208102eb16bbfc5451b9ef129e42aab1b26abb9fd703eba8a1ecb3b0891468e9649de094df466087191fee83ae792812c6f589d4a4bbe83d01911110bb6fadd8ecfcb7"}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0xfb, 0x6, 0x10, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x9, [{0x6a, &(0x7f00000000c0)=@string={0x6a, 0x3, "3118736067dceb26ea73992d7d3d3b5f3f7b45eeca460d0f96f026effea7cfb8729d0e1417248ff29518240c5e75bf8032b3e6214731585407832395e856378650f8f39c14e2ad9108cd2a879b1a4bfe06fbc20e1b113f1095c2aee6f6f0247a9b2000a4746169f4"}}, {0xfc, &(0x7f0000000940)=@string={0xfc, 0x3, "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"}}, {0x92, &(0x7f0000000140)=@string={0x92, 0x3, "53690c4fc76c04529cb7d4be3d0c72d8a420d6a88012342a3655fd0d1bacbe111b03c56e0c674acd31dcab0612eb1195f8b4502b63b9ffa6525ca369b6eb16141919f377f66711d673267c31e7527cf99a756f62a62a981e59e4d05db2dceb6f0ea22b9f999d109bb3cd2d9bb2258bd07f2bf2e1b16bad8456596c94171d8fb963e7cb64eb9ed5446e4668669982d462"}}, {0x34, &(0x7f0000000a40)=ANY=[@ANYBLOB="3403c32364f4bb4624d6cfb728c3c2d16aba9691c7bbd96164c4057ba410dead5d2085ca21333571f26ed05c1b04235fe4679834"]}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x140c}}, {0x31, &(0x7f0000000b40)=@string={0x31, 0x3, "b4c8cbea2dd9f2d4afdfa589607d72affbf3ac66b18586cd6c78132bc998a5a2b774f1309c1a7bc4e6f7544fe2fa8a"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000c40)='/dev/vga_arbiter\x00', 0x101040, 0x0) write$snapshot(r2, &(0x7f0000000d00)="6d693c6ecc1ebd7ad4d08f1d108c8b57e5fcab4eaa4c676105548dc901dc8f0534b9cb85c59f50ae9baf591a504e35550f983311b8b3cc6c90eb0525500a153ebc28044c7af7f66cc907a4ccebae0da03ac311517736e53fc161a17b1aeb91adb5ab5d7bd13f6c454ba36b26db89c3af20eb1b695cca532a96e749203eae7f05d75543714663da9b377d3136c1f08016b640bc4067767b14c492545bd79c9f777626", 0xa2) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000c80)={0x1, 0x3}) [ 1084.760968][T28418] usb 1-1: USB disconnect, device number 80 10:03:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0845658) 10:03:26 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_lifetime={0x4, 0x4, 0x7}]}, 0xc0}}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0}) [ 1085.142650][T28417] usb 6-1: new high-speed USB device number 62 using dummy_hcd 10:03:26 executing program 4: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:26 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1085.330974][T17598] input: syz0 as /devices/virtual/input/input344 [ 1085.342505][T28418] usb 1-1: new high-speed USB device number 81 using dummy_hcd 10:03:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0}) [ 1085.382611][T28417] usb 6-1: Using ep0 maxpacket: 8 10:03:26 executing program 4: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:26 executing program 3: ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r0, 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000020c0)=ANY=[@ANYRES16=r1, @ANYBLOB="30012cbd700055"], 0x18}}, 0x8001) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x180, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "9a1d7aa992c75cb6b3661689a83b5766681c47a378f0582d770d62"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "72cb8d3a9c86f3e8baf2e9e6eaac120f3d23b29366d4e9a194b980802c592538bbeff1e0e105a952dad8"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6a7dcb862e25ee2d78069508ea655af236e7cdbd5bb60bd0521ca76e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private0, 0xa2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xae}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x840) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 1085.458172][T17609] input: syz0 as /devices/virtual/input/input345 [ 1085.503258][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.503307][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.603466][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1085.683457][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1085.683478][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.683493][T28417] usb 6-1: Product: syz [ 1085.683508][T28417] usb 6-1: Manufacturer: syz [ 1085.683522][T28417] usb 6-1: SerialNumber: syz [ 1085.707442][T17622] input: syz0 as /devices/virtual/input/input346 [ 1085.723417][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.723477][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.723509][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1085.723531][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1085.763009][T17629] input: syz0 as /devices/virtual/input/input347 [ 1085.903341][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1085.903363][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.903381][T28418] usb 1-1: Product: syz [ 1085.903397][T28418] usb 1-1: Manufacturer: syz [ 1085.903419][T28418] usb 1-1: SerialNumber: syz [ 1086.392698][T28417] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1086.398755][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1086.434339][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1086.462477][T28417] usb 6-1: USB disconnect, device number 62 [ 1086.875742][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1086.903304][T28418] cdc_ncm 1-1:1.1: bind() failure 10:03:27 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1086.928810][T28418] usb 1-1: USB disconnect, device number 81 [ 1087.272313][T28417] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1087.512231][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1087.643996][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.659853][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.682268][T28418] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1087.843248][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1087.856959][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.868561][T28417] usb 6-1: Product: syz [ 1087.879115][T28417] usb 6-1: Manufacturer: syz [ 1087.886709][T28417] usb 6-1: SerialNumber: syz [ 1087.942228][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1088.083038][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.099750][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.112926][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1088.125519][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:03:29 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000080)) 10:03:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0}) 10:03:29 executing program 4: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4008ae93, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(r1) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0xff, 0x2010}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 1088.312721][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1088.321773][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.321789][T28418] usb 1-1: Product: syz 10:03:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:03:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x10}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1088.363980][T28418] usb 1-1: can't set config #1, error -71 [ 1088.365378][T28418] usb 1-1: USB disconnect, device number 82 10:03:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1088.602132][T28417] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS 10:03:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1088.602178][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1088.604128][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1088.606540][T28417] usb 6-1: USB disconnect, device number 63 [ 1088.759189][T28418] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1089.020682][T28418] usb 1-1: Using ep0 maxpacket: 8 10:03:30 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1089.152374][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.174225][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.214556][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1089.242292][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.442823][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1089.451886][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.452120][T28420] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1089.466144][T28418] usb 1-1: Product: syz [ 1089.474131][T28418] usb 1-1: Manufacturer: syz [ 1089.485116][T28418] usb 1-1: SerialNumber: syz [ 1089.732014][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1089.852089][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.877856][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.042039][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.051106][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.060722][T28420] usb 6-1: Product: syz [ 1090.067307][T28420] usb 6-1: Manufacturer: syz [ 1090.072866][T28420] usb 6-1: SerialNumber: syz [ 1090.631990][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1090.664982][T28418] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1090.682154][T28418] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1090.702423][T28418] usb 1-1: USB disconnect, device number 83 [ 1090.772120][T28420] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1090.778149][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1090.794208][T28420] cdc_ncm 6-1:1.1: bind() failure [ 1091.381848][T28418] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1091.631957][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1091.752416][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.767395][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.782488][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1091.802011][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.982516][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1091.991580][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.007942][T28418] usb 1-1: Product: syz [ 1092.013199][T28418] usb 1-1: Manufacturer: syz [ 1092.031888][T28418] usb 1-1: SerialNumber: syz 10:03:33 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00'}, 0xfffffffffffffc85) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0xfffc, 0x0, 0x3395, 0x2}, 'syz1\x00', 0x31}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:03:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:33 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000020c0)=ANY=[@ANYRES16=r2, @ANYBLOB="30012cbd700055"], 0x18}}, 0x8001) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x11}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x13c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040080) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000020c0)=ANY=[@ANYRES16=r4, @ANYBLOB="30012cbd700055"], 0x18}}, 0x8001) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x268, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x400, @private2, 0x10001}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa6bf9f6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0xf4, 0x2, @local, 0x101}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x119}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x200400e4) [ 1092.084990][T28418] usb 1-1: can't set config #1, error -71 [ 1092.117183][T28418] usb 1-1: USB disconnect, device number 84 10:03:33 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:03:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4008ae93, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:33 executing program 3: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r0, 0x6) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x12, 0x25, &(0x7f00000000c0)="ae563b093618bba1f7bf17846a63e8202e7bc9cdc1e440c9fb0102e535c728b6d812e6486b"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) 10:03:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x4, 0x81, 0x1000, 0x5e3, 0x1], 0x5, 0x5, 0xdf, 0xdd38, 0x5, 0x3, 0xffff, {0x101, 0x2, 0x7, 0x4, 0x1, 0x8, 0x1f, 0x0, 0x5, 0x7, 0x8, 0x8, 0x800, 0x1, "9618ac8998f715f490159e20fbd8cc8e894f0c6d383ba986864005e6c08ab6cf"}}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1092.204382][ T3791] usb 6-1: USB disconnect, device number 64 10:03:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1092.547727][T17792] input: syz0 as /devices/virtual/input/input356 10:03:33 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1092.782158][ T3791] usb 6-1: new high-speed USB device number 65 using dummy_hcd 10:03:33 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x12b4, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x3}, 0x8, 0x8, 0x8, 0x3ff, 0x1c, 'syz0\x00', "3806972715c745ebb97055f574c579a9c97e547e4e3bc75b8156c173c2f81ced", "3b28cdcb5ab7b1c8abf92921dc4ee21f4bea77e16ebe01f1736fc67e512f3d3e", [{0x5, 0x1, {0x0, 0x7fff}}, {0x8, 0x2, {0x3, 0x6}}, {0x6, 0x6, {0x2, 0x81}}, {0x2, 0x200, {0x0, 0x2f}}, {0x4, 0x5, {0x3}}, {0x22, 0x401, {0x0, 0x6}}, {0x9, 0x0, {0x0, 0x7}}, {0x9, 0x1, {0x1, 0x8001}}, {0x1, 0x4, {0x3, 0x3}}, {0x4, 0x27f4, {0x2, 0x1}}, {0x8, 0x1000, {0x1, 0xffff4b05}}, {0x200, 0xc81, {0x2}}, {0x9, 0xc5, {0x2, 0xfffffce0}}, {0x0, 0x1, {0x3, 0x4}}, {0x8001, 0x9a0, {0x3, 0x7fff}}, {0x6, 0x0, {0x0, 0xfffffffa}}, {0x3, 0xfff7, {0x0, 0x9}}, {0xffff, 0xd0, {0x2, 0x36}}, {0x5, 0x3f, {0x0, 0x80}}, {0xaa, 0x6, {0x0, 0x2}}, {0x2, 0x7ff, {0x3, 0x7}}, {0x8001, 0x7169, {0x3, 0xd84}}, {0x7, 0x2, {0x3, 0xb3e8}}, {0x1, 0x44, {0x3, 0xba}}, {0x7fff, 0x8, {0x3, 0x5}}, {0x40, 0x8, {0x1}}, {0x9a7, 0x7ff, {0x0, 0x3}}, {0xf001, 0x8df, {0x1, 0x40}}, {0x9, 0xef5, {0x2, 0xa0}}, {0x8000, 0x200, {0x0, 0x800}}, {0xa4db, 0x800, {0x0, 0x3}}, {0x0, 0x5, {0x0, 0x1}}, {0xc96d, 0x4, {0x3, 0x6}}, {0x8000, 0xffff, {0x0, 0x7fff}}, {0x7, 0x5, {0x3, 0x9}}, {0x0, 0x3ff, {0x1, 0x9d27}}, {0x5, 0x0, {0x1, 0x4}}, {0x3, 0x6}, {0x1, 0x8, {0x2, 0x800}}, {0x2, 0x3, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x1ff}, 0x7, 0x0, 0x3, 0xc79, 0xd, 'syz1\x00', "5fad6c1eb058961b35f2d1ea9c37e7ec7e788f75035aea0d3df0af94642d9561", "f5f84bbe9a384624470091594ae21d0239c99e4640d430e2b2736f00e48aebcc", [{0x0, 0x3f, {0x2, 0x10001}}, {0x2, 0x5, {0x2, 0x8}}, {0x6, 0x1000, {0x1, 0x3}}, {0x7, 0xfffc, {0x0, 0x20}}, {0x3, 0x6, {0x2, 0x10001}}, {0x0, 0x400, {0x1, 0x3}}, {0x8, 0xf801, {0x3, 0x6}}, {0x1f, 0x100, {0x0, 0xfffffff8}}, {0x3, 0x6, {0x2, 0x6}}, {0x9, 0xa237, {0x3, 0x7}}, {0x8000, 0x8, {0x0, 0x7}}, {0x0, 0x963a, {0x3, 0x8}}, {0x5, 0x80, {0x1}}, {0x7ff, 0x796a, {0x0, 0x2}}, {0x90, 0x6, {0x3, 0x6}}, {0x1, 0x1, {0x3, 0x10001}}, {0x2, 0xfffa}, {0xffff, 0x9, {0x3, 0x180}}, {0xffff, 0xd833, {0x2, 0x8}}, {0x4726, 0x9, {0x1, 0x9}}, {0x1e2, 0x0, {0x2, 0xa00}}, {0x8, 0x8, {0x0, 0x6}}, {0x5, 0x3, {0x1, 0x100}}, {0xff, 0x9, {0x2, 0xc878}}, {0x3, 0x1f, {0x1, 0x1}}, {0x0, 0x2, {0x1, 0xfffffffd}}, {0x432, 0x9, {0x3, 0x1}}, {0x7, 0x6, {0x0, 0x8}}, {0x3, 0xfc01, {0x3, 0xffffffff}}, {0x100, 0x9, {0x2, 0x7}}, {0x7, 0x6, {0x1, 0x4}}, {0x5, 0x200, {0x3, 0x400}}, {0x1ff, 0x8, {0x1, 0x4}}, {0x4, 0x2}, {0xd70, 0x8000, {0x3, 0x24}}, {0x2, 0xa70, {0x1, 0x6}}, {0x9, 0x80, {0x1, 0x10001}}, {0xfffa, 0x62e5, {0x1, 0x2}}, {0x2, 0x9, {0x980d3fa3458c8b7f, 0x2}}, {0x57d, 0x1, {0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x9f5}, 0x5, 0x40, 0x6, 0x1, 0x1c, 'syz0\x00', "8e18c77b8927e8308eb860aaa72c507f97613458a00eb23e159002dfebf495bd", "84a77257fbcfa508450f5347b315d4d54a8c7cc3fa5aa120e0e2a96374e677fe", [{0x8001, 0x9, {0x3, 0xfff}}, {0x5, 0xfffd, {0x3, 0xfffffff8}}, {0x5, 0x26, {0x2, 0x2}}, {0x508, 0x4, {0x3, 0x40}}, {0x1f, 0x4, {0x2, 0x4}}, {0x2, 0x3ff, {0x3}}, {0x1000, 0x24, {0x1, 0x7}}, {0x6, 0xc058, {0x3, 0x200}}, {0x800, 0xdb0, {0x3, 0x10000}}, {0x1, 0x40, {0x0, 0x1}}, {0x8001, 0x631, {0x0, 0x800}}, {0x401, 0x1, {0x0, 0x7fff}}, {0x7, 0x1, {0x0, 0x7}}, {0xfff8, 0x101, {0x0, 0x80000001}}, {0x8, 0x93ae, {0x1, 0x6}}, {0x800, 0x1, {0x2, 0xc6e}}, {0x7, 0x1, {0x1, 0x8}}, {0x4, 0x88d8, {0x2, 0x2}}, {0xb42, 0x0, {0x2fec983b5576ce76, 0xff5}}, {0x9, 0x5, {0x3, 0x5}}, {0x401, 0x1f, {0x1, 0x7fffffff}}, {0x9ca, 0x5, {0x1, 0x3}}, {0x2, 0x0, {0x3, 0x4}}, {0x1000, 0x7a0, {0x2, 0x7}}, {0x400, 0xbb, {0x2, 0x9}}, {0x0, 0x2, {0x0, 0x8000}}, {0x7, 0xffff, {0x3, 0x1}}, {0x2, 0x5, {0x2, 0x7}}, {0xa7, 0x363, {0x3, 0x1}}, {0x401, 0x1, {0x2, 0x2}}, {0x9, 0x101, {0x3, 0x9}}, {0x6, 0x1, {0x0, 0x3}}, {0x3, 0x7, {0x3, 0x7fff}}, {0x5c86, 0x0, {0x1, 0x7b}}, {0x1f, 0x2, {0x3, 0xfff}}, {0x2, 0x2, {0x1, 0x7ff}}, {0x9, 0x0, {0x3, 0x80}}, {0x3ff, 0x4, {0x2, 0x93d}}, {0x0, 0x8, {0x1, 0x6}}, {0x4, 0x81, {0x1, 0x8001}}]}}}, {{0x254, 0x1, {{0x2}, 0x37, 0x0, 0x1054, 0xa1, 0x7, 'syz0\x00', "30670c7f64afbdb2fcadaa66fdd2d57f37eb9518ba3eb5b06753ec53e9a6b5d0", "3fc8369083ec4a652ff30fd0a07955d2c8690172e96491bf4285d40039d24800", [{0x4, 0xa, {0x0, 0x3}}, {0x2, 0x3, {0x0, 0x40}}, {0x4d, 0xd1, {0x3, 0x6}}, {0x3f, 0x5, {0x1, 0xf18}}, {0x0, 0x38, {0x0, 0xffffffff}}, {0x44, 0x9, {0x1, 0x401}}, {0x2, 0x6fa, {0x1, 0x200}}, {0xff, 0x7fff, {0x0, 0x7}}, {0x876, 0x1ff, {0x3, 0x1}}, {0x1f, 0x0, {0x1, 0x1ff}}, {0x79de, 0x14, {0x1, 0x5}}, {0xf801, 0x3ff, {0x2}}, {0x9, 0x1000, {0x2, 0x3ff}}, {0x7b46, 0x7f, {0x3, 0x4}}, {0x101, 0x7fff, {0x3, 0x1000}}, {0x3, 0x7f, {0x0, 0x6}}, {0x81, 0x81, {0x0, 0x4}}, {0x1000, 0x100, {0x3, 0x7}}, {0x1ff, 0x1, {0x0, 0x1}}, {0x0, 0xfff9, {0x0, 0x8d8}}, {0x9, 0x3f, {0x0, 0x3}}, {0x8, 0x5, {0x2, 0x1}}, {0xffff, 0x114, {0x3, 0x1}}, {0x6, 0x8, {0x3, 0x4}}, {0x8000, 0xb, {0x3, 0x959c}}, {0x5ce8, 0x3f, {0x3, 0x3}}, {0x400, 0x401, {0x6, 0xa6a5}}, {0x0, 0x9, {0x1, 0x1f}}, {0x7fff, 0x100, {0x2, 0x7}}, {0x3, 0x81, {0x0, 0x400}}, {0x2, 0xff, {0x943638a929bf6cc0, 0x8001}}, {0x20, 0xff, {0x3, 0x9847}}, {0xfffb, 0x9, {0x3, 0x10000}}, {0x3901, 0x1, {0x3, 0x7f}}, {0x0, 0x1000, {0x3, 0x8000}}, {0x2, 0xa62, {0x1, 0x77}}, {0x81, 0x40, {0x2, 0x5}}, {0x1, 0x8, {0x3, 0x2}}, {0xdc, 0x41d, {0x1, 0x60}}, {0x7, 0x3, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0xea, 0x7f, 0xffff, 0xfff, 0x1a, 'syz0\x00', "a12b507fe8d956d8584d155ab153cf63aaa0f2a78dba020568a52c6c3fbcf9cc", "b2e6923f550227906ebf95f62fe39dc9f01e82e7cb65d9d8ee48488d5f9f15dd", [{0x9, 0x3ff, {0x0, 0x4}}, {0x4, 0x1, {0x0, 0xffffffff}}, {0x0, 0x9, {0x1, 0x4}}, {0x5, 0x3ff, {0x2, 0x1}}, {0x747b, 0x3, {0x2, 0x4800}}, {0x4, 0x3, {0x0, 0x8000}}, {0x8, 0x0, {0x2, 0x3}}, {0x2, 0x5ae0, {0x0, 0x1}}, {0x3, 0x6b, {0x2, 0x1}}, {0x9, 0x4, {0x3, 0xa1e0}}, {0x100, 0x800, {0x3, 0xf284}}, {0x0, 0x400, {0x1, 0xfffffffe}}, {0x0, 0x80, {0x3, 0x20}}, {0x6, 0x2, {0x1, 0xfffffff7}}, {0x0, 0x5a, {0x0, 0xffffffff}}, {0x3, 0x0, {0x0, 0x7}}, {0xffff, 0x1, {0x2, 0x80000001}}, {0x8, 0x7, {0x2, 0x6}}, {0x0, 0xda, {0x3, 0x80}}, {0x4, 0x8, {0x1, 0x2}}, {0x7, 0xcf2a, {0x0, 0x3}}, {0x401, 0xa8, {0x2, 0x2}}, {0x68, 0x40, {0x0, 0xb9}}, {0x7, 0x5, {0x0, 0x3}}, {0x6, 0x0, {0x3, 0xc9}}, {0x800, 0x7, {0x2, 0x1}}, {0x80, 0xf5a6, {0x0, 0xa04}}, {0x6, 0x6, {0x2, 0xe5}}, {0xa3d0, 0x2, {0x2, 0x3}}, {0x1, 0x2, {0x1}}, {0x3, 0x7fff, {0x3, 0x800}}, {0xfff7, 0x3, {0x2, 0x10000}}, {0x8, 0x7f}, {0x0, 0x400, {0x3, 0x4}}, {0x7, 0xfc01, {0x2, 0x6}}, {0x9, 0x0, {0x1}}, {0x0, 0xfff7, {0x0, 0x8402}}, {0xb5d, 0xffff, {0x0, 0xfffffffd}}, {0x0, 0x8, {0x0, 0x1}}, {0x6, 0x6, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1}, 0x7f, 0x0, 0x1, 0x5, 0xc, 'syz0\x00', "d70fd73abbfe7aad2cca8a1e6a8e813183f327c22a38f5f5d06a924475e47454", "7bd597fb00093dfe291f89040af1dadebf8e80c4a3003a04986a32143d04051d", [{0x4, 0x1, {0x3, 0xce64}}, {0x1, 0x0, {0x2}}, {0x5, 0x4, {0x1, 0x7}}, {0x7, 0x7, {0x3, 0x7fff}}, {0x82e2, 0x3d80, {0x3, 0x6}}, {0x9, 0x9, {0x2, 0xfffffffc}}, {0x6, 0x4, {0x0, 0x20}}, {0x1f, 0xf71, {0x2, 0x6}}, {0x5, 0x1, {0x2, 0x2}}, {0x27d, 0x5, {0x2, 0x3}}, {0x400, 0x7fff, {0x3, 0x9}}, {0x303, 0x100, {0x3, 0x1}}, {0x7ff, 0x1f, {0x3, 0x1000}}, {0x100, 0x7, {0x2, 0x1}}, {0x7e6, 0x3, {0x2, 0x6}}, {0x3, 0x40, {0x0, 0x3c4d}}, {0xacb5, 0x8001, {0x0, 0x1}}, {0x7ff, 0x5, {0x1, 0x3}}, {0xb6, 0xfbff, {0x3, 0x8f}}, {0x559, 0x4, {0x1, 0x3}}, {0x0, 0x0, {0x3, 0x10000}}, {0x3, 0x0, {0x3, 0x48}}, {0x0, 0x5, {0x1, 0xe3a}}, {0x7, 0x65, {0x1, 0x4}}, {0xfff, 0x0, {0xd2462118ebcbaaf2, 0x1b1e}}, {0x17a, 0xf800, {0x1, 0x3e99}}, {0x9, 0xfe00, {0x0, 0xef}}, {0x81, 0x3d, {0x1, 0x51090024}}, {0x1ff, 0x400, {0x0, 0xb40}}, {0x2, 0x9a, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x9}}, {0x3, 0x101, {0x0, 0x9}}, {0x40, 0x100, {0x3, 0x67}}, {0x0, 0x1ff, {0x1, 0x3}}, {0x6, 0x500c, {0x0, 0x4}}, {0x4, 0x5, {0x1, 0xf20}}, {0x1, 0x1, {0x2, 0x7824}}, {0xffff, 0x7, {0x0, 0xffffffff}}, {0x34, 0xd371, {0x1, 0x6}}, {0xfffc, 0x1, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x2}, 0xff, 0x20, 0x1400, 0x7, 0xb, 'syz1\x00', "5181c02523f092d4c235b88de649f7c5dcbed3d65590b7712e9b8092f2de91e5", "864ee42156e423507abce464b35451622b36275e7aa5be39fe99e956afe87f94", [{0xfc2, 0x5, {0x3, 0x1}}, {0x4, 0x5, {0x0, 0xab}}, {0x2, 0x1, {0x0, 0x7fff}}, {0x44, 0x2, {0x1, 0x6}}, {0x1f, 0x5, {0x0, 0x1}}, {0x9b, 0x3, {0x2, 0x1ff}}, {0x9, 0x48a6, {0x1, 0x7}}, {0x8, 0x5, {0x2, 0xfffffff9}}, {0x7, 0x3, {0x5, 0x1000}}, {0x6, 0x3, {0x0, 0x2}}, {0xfff, 0x7f8b, {0x2, 0x1}}, {0x9, 0x4, {0x0, 0x6}}, {0x4, 0x8000, {0x2, 0x7ff}}, {0x9, 0x200, {0x2, 0x3}}, {0x400, 0x20, {0x0, 0x3}}, {0x3ff, 0x7, {0x0, 0x7bf}}, {0x8, 0x4, {0x3, 0x80}}, {0x5, 0x3ff, {0x0, 0x7bd4}}, {0xfff, 0x3, {0x1, 0xe9}}, {0xb984, 0x6, {0x3, 0x3ea93714}}, {0x7f, 0x1, {0x3, 0x20}}, {0x8, 0x3, {0x2, 0x8001}}, {0x916, 0x4, {0x2, 0x9}}, {0x6, 0x3, {0x1, 0x8f0}}, {0x6, 0xa626, {0x3}}, {0x8, 0x4, {0x2, 0x8001}}, {0x8, 0x8000, {0x0, 0x80000001}}, {0x8001, 0x9b, {0x2, 0x3}}, {0x9, 0x5, {0x0, 0xffff}}, {0x401, 0x0, {0x0, 0xfd}}, {0x8, 0x800, {0x0, 0x5}}, {0x826, 0x2, {0x0, 0x7f}}, {0x6, 0x0, {0x0, 0x3}}, {0xff, 0x5, {0x0, 0xffffffff}}, {0x0, 0x1, {0x0, 0x8}}, {0x9bb7, 0x4, {0x2, 0x800}}, {0xa1, 0x2, {0x2, 0x89c}}, {0x0, 0x7, {0x3, 0x7ff}}, {0x6, 0x3, {0x2}}, {0x2, 0x4, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0xff, 0x1, 0x5, 0x4, 0x27, 'syz1\x00', "265b57d88c2603e475780bac48ad91e0c534c61a96e1d88a9400fa28c0a98636", "0bd20b2597347fe918871faf2db71f5e05066a2e2cd659b940e76f1abeb8788e", [{0x59, 0x9b, {0x0, 0x4}}, {0x7, 0x2, {0x0, 0x1}}, {0x401, 0x400, {0x3, 0xff}}, {0x6, 0x200, {0x0, 0x4}}, {0x4, 0x0, {0x3, 0x6}}, {0x40, 0x5, {0x2, 0x6}}, {0x56c8, 0x6, {0x3, 0x7}}, {0xff, 0x5, {0x0, 0x6}}, {0x2, 0x4, {0x2}}, {0x1ff, 0x1, {0x3, 0x80000000}}, {0x0, 0x1c, {0x3}}, {0x7fff, 0x8, {0x0, 0x6}}, {0x3, 0x7, {0x3, 0x3}}, {0xffc0, 0xe35, {0x1}}, {0x1, 0x6, {0x1, 0x2c}}, {0x800, 0x101, {0x2, 0x25b7}}, {0x1ff, 0x7, {0x0, 0x6}}, {0x1, 0x6, {0x2, 0x111f15fa}}, {0x20, 0x8001, {0x1, 0x6}}, {0x200, 0xffff, {0x1, 0xffffffff}}, {0x2, 0x2, {0x2, 0x6}}, {0x3f, 0xfff2, {0x0, 0x2}}, {0x9, 0x3, {0x3, 0xffff7fff}}, {0x8, 0x4, {0x0, 0xa20}}, {0x2, 0x8, {0x0, 0x4}}, {0x400, 0x9, {0x2, 0x1}}, {0x26, 0x1, {0x0, 0xffff9d19}}, {0x7f, 0x80, {0x6291958adcd8ee37}}, {0x0, 0x8000, {0x3, 0x9}}, {0xf74, 0x200, {0x1, 0x8001}}, {0x0, 0x0, {0x3}}, {0x9, 0x8, {0x3, 0x1}}, {0xe, 0x4, {0x1}}, {0x8, 0x1000, {0x0, 0x400}}, {0xfa5e, 0x9, {0x1, 0x6}}, {0x1, 0x2, {0x49f1131880a515be, 0x25}}, {0x6, 0x8, {0x2, 0x1}}, {0x3, 0x9, {0x3}}, {0x9, 0x1ff, {0x0, 0x9}}, {0x6, 0x5, {0x1, 0x101}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000050}, 0x8014) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:33 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:33 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4020ae46, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1093.041677][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1093.162309][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.180442][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.241781][T30884] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1093.361684][T28418] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1093.382429][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.401545][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.409539][ T3791] usb 6-1: Product: syz [ 1093.417336][ T3791] usb 6-1: Manufacturer: syz [ 1093.422620][ T3791] usb 6-1: SerialNumber: syz [ 1093.491588][T30884] usb 2-1: Using ep0 maxpacket: 8 [ 1093.611597][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1093.612173][T30884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.641553][T30884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.742833][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.758732][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.778534][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1093.796297][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1093.821624][T30884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.830669][T30884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.851504][T30884] usb 2-1: Product: syz [ 1093.855725][T30884] usb 2-1: Manufacturer: syz [ 1093.860302][T30884] usb 2-1: SerialNumber: syz [ 1094.002216][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1094.011837][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.020008][T28418] usb 1-1: Product: syz [ 1094.031043][T28418] usb 1-1: Manufacturer: syz [ 1094.037483][T28418] usb 1-1: SerialNumber: syz [ 1094.108910][ T3791] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1094.118916][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1094.149364][ T3791] cdc_ncm 6-1:1.1: bind() failure [ 1094.641468][T30884] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1094.648860][T30884] cdc_ncm 2-1:1.0: bind() failure [ 1094.683048][T30884] cdc_ncm 2-1:1.1: bind() failure [ 1094.708662][T30884] usb 2-1: USB disconnect, device number 74 [ 1095.187376][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1095.211661][T28418] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1095.241651][T28418] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1095.267562][T28418] usb 1-1: USB disconnect, device number 85 10:03:36 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:03:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x7f}}, 0x18) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5828, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) [ 1095.354943][ T3791] usb 6-1: USB disconnect, device number 65 10:03:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x3}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1095.445858][T17866] input: syz0 as /devices/virtual/input/input360 10:03:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1095.684134][T17884] input: syz1 as /devices/virtual/input/input362 [ 1095.783600][T17893] input: syz1 as /devices/virtual/input/input363 [ 1095.901362][ T3791] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1095.941444][T28418] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1096.151472][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1096.181311][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1096.272267][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.291178][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.331446][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.351347][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.381392][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1096.400067][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1096.502127][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1096.516679][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.526388][ T3791] usb 6-1: Product: syz [ 1096.530673][ T3791] usb 6-1: Manufacturer: syz [ 1096.537340][ T3791] usb 6-1: SerialNumber: syz 10:03:37 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:03:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5829, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:37 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) 10:03:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400080, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x9203, 0x4, 0x7, 0x4}, 'syz1\x00', 0x3d}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1096.641396][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1096.664467][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.692394][T17908] input: syz0 as /devices/virtual/input/input364 [ 1096.728674][T28418] usb 1-1: Product: syz [ 1096.728691][T28418] usb 1-1: Manufacturer: syz [ 1096.761494][T28418] usb 1-1: can't set config #1, error -71 [ 1096.763383][T28418] usb 1-1: USB disconnect, device number 86 [ 1096.791803][T17922] input: syz0 as /devices/virtual/input/input365 [ 1097.161149][T28418] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1097.241475][ T3791] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1097.247529][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1097.271803][ T3791] cdc_ncm 6-1:1.1: bind() failure [ 1097.401233][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1097.531269][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.551110][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.571101][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1097.585683][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.751876][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.765660][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.777713][T28418] usb 1-1: Product: syz [ 1097.786184][T28418] usb 1-1: Manufacturer: syz [ 1097.796011][T28418] usb 1-1: SerialNumber: syz 10:03:39 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close(r1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) sendfile(r1, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) 10:03:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) 10:03:39 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c582a, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1098.468384][ T3791] usb 6-1: USB disconnect, device number 66 10:03:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) 10:03:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x6000, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x800) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1098.714004][T17915] udc-core: couldn't find an available UDC or it's busy [ 1098.730476][T17915] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1098.990958][ T3791] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1099.002000][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1099.027309][T28418] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1099.061197][T28418] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1099.080473][T28418] usb 1-1: USB disconnect, device number 87 [ 1099.230890][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1099.361631][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.381089][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.551040][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.560097][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.580816][ T3791] usb 6-1: Product: syz [ 1099.584993][ T3791] usb 6-1: Manufacturer: syz [ 1099.589575][ T3791] usb 6-1: SerialNumber: syz [ 1099.760867][T28418] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1100.000800][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1100.121705][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.142720][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.170889][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1100.187924][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1100.290919][ T3791] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1100.298190][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1100.324663][ T3791] cdc_ncm 6-1:1.1: bind() failure [ 1100.381247][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.390297][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.421197][T28418] usb 1-1: Product: syz [ 1100.425394][T28418] usb 1-1: Manufacturer: syz 10:03:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c582b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:41 executing program 1: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, 0x0) 10:03:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3f, 0x6999, 0x0, 0x3, 0xf, "f446c792fcaa6b95"}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1100.429993][T28418] usb 1-1: SerialNumber: syz 10:03:41 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) fanotify_init(0x1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000001c0)=0x2, 0x4) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020400040c000000fcffffff0000000005000600ff0000000a00000000000000ff020000000000000000000000000001548eddc76d000000000000000002000100000000000000000000000000030005000000000002004e20ac1414bb0000000000000000"], 0x60}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000240)) syz_usb_control_io(r0, 0x0, 0x0) [ 1100.488321][T28418] usb 1-1: can't set config #1, error -71 [ 1100.489778][T28418] usb 1-1: USB disconnect, device number 88 [ 1100.562243][T18005] input: syz0 as /devices/virtual/input/input370 [ 1101.020747][T28418] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1101.270788][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1101.411790][T28418] usb 1-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1101.430586][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.443603][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 154, changing to 11 [ 1101.455786][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:03:42 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:42 executing program 1: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, 0x0) 10:03:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f00000000c0)={0xcefc, [[0x1, 0x4, 0x1ff, 0x80000000, 0x0, 0xfffffffe, 0x7, 0x3], [0x7fff, 0x6, 0x8, 0xdbc1, 0x401, 0x2, 0x10001, 0x5], [0x5, 0x20, 0x401, 0x1, 0xfffeffff, 0x2, 0x401, 0xae1]], [], [{0x7, 0x46, 0x1, 0x0, 0x1}, {0x4, 0x5, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x0, 0x1}, {0x3, 0x6, 0x1, 0x1, 0x0, 0x1}, {0xa2a, 0xe9}, {0xfffffff7, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x1de, 0x1}, {0x2, 0x2, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1}, {0x8, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x7, 0x1, 0x0, 0x1, 0x1}], [], 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5839, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1101.618336][T28417] usb 6-1: USB disconnect, device number 67 [ 1101.641380][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1101.687148][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:03:42 executing program 1: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, 0x0) 10:03:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) gettid() ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1101.741911][T28418] usb 1-1: Product: syz 10:03:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) [ 1101.741928][T28418] usb 1-1: Manufacturer: syz 10:03:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, 0x0) [ 1101.741943][T28418] usb 1-1: SerialNumber: syz [ 1101.743253][T18031] input: syz0 as /devices/virtual/input/input372 [ 1102.104747][T18053] input: syz0 as /devices/virtual/input/input374 [ 1102.180547][T28417] usb 6-1: new high-speed USB device number 68 using dummy_hcd 10:03:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) [ 1102.440552][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1102.560562][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.580482][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.760645][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1102.769848][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.786198][T28417] usb 6-1: Product: syz [ 1102.794369][T28417] usb 6-1: Manufacturer: syz [ 1102.799098][T28417] usb 6-1: SerialNumber: syz [ 1102.910873][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1102.942457][T28418] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1102.970642][T28418] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1102.984416][T28418] usb 1-1: USB disconnect, device number 89 [ 1103.504800][T28417] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1103.514449][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1103.538095][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1103.750330][T30214] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1104.000430][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1104.141058][T30214] usb 1-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1104.160351][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.176725][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 154, changing to 11 [ 1104.188238][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:03:45 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1104.390417][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1104.407089][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.417119][T30214] usb 1-1: Product: syz [ 1104.440407][T30214] usb 1-1: can't set config #1, error -71 [ 1104.448825][T30214] usb 1-1: USB disconnect, device number 90 10:03:45 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:03:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) setsockopt$inet_dccp_int(r1, 0x21, 0x10, &(0x7f00000000c0)=0x2, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, 0x0) 10:03:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4400ae8f, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:45 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, 0x0) [ 1104.748665][ T17] usb 6-1: USB disconnect, device number 68 10:03:45 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, 0x0) 10:03:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, 0x0) 10:03:46 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, 0x0) [ 1104.845213][T18116] input: syz0 as /devices/virtual/input/input376 [ 1104.850888][T30214] usb 1-1: new high-speed USB device number 91 using dummy_hcd 10:03:46 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1105.130615][T30214] usb 1-1: Using ep0 maxpacket: 8 10:03:46 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4602, 0x0) [ 1105.270980][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.271031][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.271062][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1105.271093][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1105.280345][ T17] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1105.451061][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.451082][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.451097][T30214] usb 1-1: Product: syz [ 1105.451111][T30214] usb 1-1: Manufacturer: syz [ 1105.451126][T30214] usb 1-1: SerialNumber: syz [ 1105.520292][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1105.640806][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.680136][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.840787][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.849831][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.880585][ T17] usb 6-1: Product: syz [ 1105.884773][ T17] usb 6-1: Manufacturer: syz [ 1105.889370][ T17] usb 6-1: SerialNumber: syz [ 1106.595541][ T17] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1106.602850][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1106.610308][T30214] cdc_ncm 1-1:1.0: bind() failure [ 1106.630355][T30214] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1106.646376][ T17] cdc_ncm 6-1:1.1: bind() failure [ 1106.660175][T30214] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1106.670992][T30214] usb 1-1: USB disconnect, device number 91 [ 1107.349985][T30214] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1107.629948][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1107.750069][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.769910][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.789060][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.800876][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.865996][T28417] usb 6-1: USB disconnect, device number 69 10:03:49 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) 10:03:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) statx(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x2000, 0x100, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) r5 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000004c0)={0x5b0, 0xfffffffffffffffe, 0x1, [{{0x4, 0x3, 0xfffffffffffffffe, 0x7, 0x7f, 0x8001, {0x5, 0xfffffffffffffffa, 0xb6ac, 0x6, 0x2, 0x5, 0x0, 0xe85, 0x0, 0xfffffff7, 0x5, 0x0, 0x0, 0x1, 0x1548}}, {0x1, 0x100, 0x0, 0x20}}, {{0x5, 0x3, 0x0, 0x81, 0x8, 0x4, {0x6, 0x1, 0x2, 0x5, 0x4, 0x2, 0x7, 0x401, 0x10000, 0x0, 0x8}}, {0x6, 0x8, 0x9, 0x1ff, 'hash:mac\x00'}}, {{0x4, 0x0, 0x7, 0x8, 0x4, 0xffffffff, {0x3, 0x0, 0x7ff, 0xffffffff, 0x0, 0x6, 0x5, 0x90, 0x0, 0x3, 0x4, 0x0, 0x0, 0xf285}}, {0x5, 0xae7, 0x9, 0x7, 'hash:mac\x00'}}, {{0x3, 0x1, 0x0, 0x2, 0x64, 0x3, {0x2, 0x1, 0x5, 0x1, 0x5, 0x10001, 0xff, 0x33, 0x1000, 0x4abb090a, 0x3ff, 0x0, 0x0, 0xba9, 0xfffffffa}}, {0x5, 0x6, 0x5, 0xcfe9, '&{}^&'}}, {{0x2, 0x1, 0x6, 0x1, 0x567f, 0x8, {0x6, 0x9, 0x200, 0x3, 0x0, 0xcd10, 0x80, 0x1, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x2337, 0xffffffff}}, {0x0, 0x0, 0x5, 0x8, 'syz0\x00'}}, {{0x6, 0x0, 0x80, 0xff, 0x5, 0xffff, {0x2, 0x6, 0x9, 0xfffffffffffffff9, 0x6, 0x2, 0x7ff, 0xe6, 0x8a, 0x8, 0x7, 0xee01, 0x0, 0x1, 0xfffffff9}}, {0x4, 0x31b, 0x4, 0x8, '$)$-'}}, {{0x0, 0x0, 0x672e, 0x100000000, 0x0, 0x101, {0x1, 0x1ff, 0x3, 0x6, 0x7f, 0x4ab, 0x5, 0x6c3d, 0x0, 0x9, 0x1f, 0x0, 0x0, 0x44f9, 0x2}}, {0x3, 0x8, 0x5, 0x6, 'syz0\x00'}}, {{0x4, 0x3, 0x80000001, 0x8, 0xef, 0x9, {0x2, 0x1, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}}, {0x2, 0xffffffff, 0x2, 0x0, '|.'}}, {{0x0, 0x0, 0x0, 0x7, 0x0, 0x0, {0x3, 0x2da, 0x6, 0xe3, 0x9, 0x0, 0x6, 0x3, 0xd97, 0x3ff, 0x24, r4, r5, 0xb92, 0x3}}, {0x0, 0x4, 0x0, 0x5}}]}, 0x5b0) statx(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x800, 0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, r8}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='fuseblk\x00', 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f23e223b82930303030303030020000000000000015303030302c757365f25f69643d5ed59fb8a40115f28cdb2b0116767346d5650a25bf06083901975c0eb84ae3ff721e46abf690d535bf00eda708bb0fb600922075eab13849035929634008f36f5ba25600fc570dbfd5d02b8394021fddf16b9121451ba7f4b0348fbab1ef0ea0b260177fc9ed4e2be77f6150297cb3d470df10000000", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',allow_other,max_read=0x0000000000000007,fscontext=staff_u,subj_role=/dev/uinput\x00,appraise_type=imasig,fowner=', @ANYRESDEC=r6, @ANYBLOB=',fowner=', @ANYRESDEC=r8, @ANYBLOB=',fowner>', @ANYRESDEC=r9, @ANYBLOB=',dont_measure,dont_hash,\x00']) accept4$tipc(r2, 0x0, &(0x7f00000000c0), 0x80000) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x5}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close(r1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) sendfile(r1, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) 10:03:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x80104592, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:49 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1107.980793][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1107.993807][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.005151][T30214] usb 1-1: Product: syz [ 1108.009400][T30214] usb 1-1: Manufacturer: syz [ 1108.017635][T30214] usb 1-1: SerialNumber: syz 10:03:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) connect$rxrpc(r1, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1108.100171][T30214] usb 1-1: can't set config #1, error -71 [ 1108.108525][T30214] usb 1-1: USB disconnect, device number 92 [ 1108.335405][T18201] input: syz0 as /devices/virtual/input/input380 [ 1108.389976][ T17] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1108.419864][T18207] input: syz0 as /devices/virtual/input/input381 10:03:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x80104592, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 1108.600006][T30214] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1108.617725][T18220] input: syz0 as /devices/virtual/input/input383 [ 1108.629846][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1108.703060][T18228] input: syz0 as /devices/virtual/input/input384 [ 1108.750706][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.750757][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.852045][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1108.910466][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1108.910489][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.910505][ T17] usb 6-1: Product: syz [ 1108.910520][ T17] usb 6-1: Manufacturer: syz [ 1108.910536][ T17] usb 6-1: SerialNumber: syz [ 1108.971256][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.992721][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.019508][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1109.042986][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.239875][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1109.248947][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.259809][T30214] usb 1-1: Product: syz [ 1109.263985][T30214] usb 1-1: Manufacturer: syz [ 1109.268577][T30214] usb 1-1: SerialNumber: syz [ 1109.829856][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1109.836858][ T17] cdc_ncm 6-1:1.1: bind() failure [ 1109.866199][ T17] usb 6-1: USB disconnect, device number 70 [ 1110.414443][T30214] cdc_ncm 1-1:1.0: bind() failure [ 1110.441204][T30214] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1110.460122][T30214] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1110.479926][T30214] usb 1-1: USB disconnect, device number 93 [ 1111.179702][T30214] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1111.429549][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1111.560284][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.579417][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.592205][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1111.604194][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:03:52 executing program 3: openat$ttynull(0xffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x40, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r0, 0x6) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000140)={0xfffb, 0x8, [0x1, 0xfbff, 0x0, 0x0, 0x3ff], 0x3}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x8, 0xa6, 0x2}) r2 = semget(0x2, 0x4, 0x100) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000180)=""/185) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r3, 0x5501) 10:03:52 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:52 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1111.780175][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.789242][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.818599][T30214] usb 1-1: Product: syz 10:03:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581034000b6fdbf3c30d4cdd7779836c89ba60000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000140)=0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='%#\'-^/\x00', 0x0, r3) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f00000000c0)=""/8) syz_usb_control_io(r0, 0x0, 0x0) [ 1111.883800][T30214] usb 1-1: Manufacturer: syz 10:03:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x8, 0x2, 0x319, 0x9}, 'syz1\x00', 0x57}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x129) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000400)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000200)={0x6, 'syzkaller1\x00', {0xffffffff}, 0x1d5}) flock(r2, 0x6) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8001, 0x5}, 'syz0\x00'}) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffffff40, 0x80000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @private=0xa010101}, {0x2, 0x4e22, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)='ip6_vti0\x00', 0x4c, 0x2, 0x3}) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="68010000", @ANYRES16=r6, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:53 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1111.906959][T30214] usb 1-1: SerialNumber: syz [ 1111.927584][T18274] input: syz0 as /devices/virtual/input/input385 [ 1111.930718][T30214] usb 1-1: can't set config #1, error -71 [ 1111.932031][T30214] usb 1-1: USB disconnect, device number 94 [ 1112.179603][ T17] usb 6-1: new high-speed USB device number 71 using dummy_hcd 10:03:53 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], 0x0, &(0x7f0000001200), 0x0}) 10:03:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) sendto$packet(r1, &(0x7f00000000c0)="bc2fdfbbf10a6edb1f9c65ec208af3dfc8472fe34e70dc331c24346d60b06d9dfb25fcd5a74b74903ec3eb89c50066dac8f618fcf79d02fa1ba97350698e590989383cd9237582634d9a0558e49c3d0e154b1622f66dcf6c6971959d728bdf1413028ef51bce47e020f9a92148196d27c24a719953550965e93536634755226c58ab4df5f533d9a5fc0872a50d1a45612493ea1fddf7ab1935714be547192a97486d20098e08f421fd0fd5b7b4a4c98fdd85b9aa45dbfa688bbc4a43ccc78b868064f4e752fc4cef741f3ed85ac38c", 0xcf, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x87, 0x6, @dev={[], 0x19}}, 0x14) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1112.429518][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1112.440916][T30214] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1112.478300][T18318] input: syz0 as /devices/virtual/input/input389 [ 1112.551932][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.587996][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.689476][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1112.800005][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1112.809072][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.819544][T30214] usb 1-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 1112.824163][ T17] usb 6-1: Product: syz [ 1112.834649][T30214] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1112.836232][ T17] usb 6-1: Manufacturer: syz [ 1112.851928][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 182, changing to 11 [ 1112.859410][ T17] usb 6-1: SerialNumber: syz [ 1113.029438][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1113.038498][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.048342][T30214] usb 1-1: Product: syz [ 1113.069300][T30214] usb 1-1: Manufacturer: syz [ 1113.073912][T30214] usb 1-1: SerialNumber: syz [ 1113.140766][T30214] cdc_ncm 1-1:1.0: bind() failure [ 1113.789301][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1113.796254][ T17] cdc_ncm 6-1:1.1: bind() failure [ 1113.829370][ T17] usb 6-1: USB disconnect, device number 71 10:03:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 10:03:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:56 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x3, 0x4}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:03:56 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], 0x0, &(0x7f0000001200), 0x0}) 10:03:56 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1115.523454][T28418] usb 1-1: USB disconnect, device number 95 10:03:56 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], 0x0, &(0x7f0000001200), 0x0}) 10:03:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1115.602591][T18364] input: syz0 as /devices/virtual/input/input391 [ 1115.675660][T18376] input: syz0 as /devices/virtual/input/input392 [ 1115.839201][ T17] usb 6-1: new high-speed USB device number 72 using dummy_hcd 10:03:56 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0684608, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:57 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), 0x0, 0x0}) 10:03:57 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1116.038971][T28418] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1116.079113][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1116.199630][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.239998][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.315048][T28418] usb 1-1: device descriptor read/64, error 18 [ 1116.429982][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1116.448909][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.456924][ T17] usb 6-1: Product: syz [ 1116.484334][ T17] usb 6-1: Manufacturer: syz [ 1116.498892][ T17] usb 6-1: SerialNumber: syz [ 1116.729019][T28418] usb 1-1: device descriptor read/64, error 18 [ 1116.999241][T28418] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1117.288801][T28418] usb 1-1: device descriptor read/64, error 18 [ 1117.418920][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1117.442880][ T17] cdc_ncm 6-1:1.1: bind() failure [ 1117.475518][ T17] usb 6-1: USB disconnect, device number 72 [ 1117.678930][T28418] usb 1-1: device descriptor read/64, error 18 [ 1117.808990][T28418] usb usb1-port1: attempt power cycle [ 1118.538756][T28418] usb 1-1: new high-speed USB device number 98 using dummy_hcd 10:03:59 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), 0x0, 0x0}) 10:03:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:59 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x2, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:03:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x15c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r7, 0x6) ioctl$UI_DEV_CREATE(r7, 0x5501) 10:03:59 executing program 5: sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, 0xa, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x240, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28fc}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a30d824}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9ca0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcb}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd397}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x41}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'bond_slave_1\x00', &(0x7f0000000a40)=@ethtool_sset_info={0x37, 0x3f, 0x61f, [0x5, 0x3, 0x28000, 0x9, 0x6, 0x1, 0x101, 0x67, 0x5]}}) [ 1118.724348][T28418] usb 1-1: device descriptor read/8, error -71 10:03:59 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x68800, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x90, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9c54}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xba}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5233}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x100}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_usb_control_io(r0, 0x0, 0x0) 10:03:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000600)={0x18, &(0x7f0000000440)={0x40, 0x30, 0x90, {0x90, 0x4, "12bc4e243e090cafae1042676d76210489020cab9c91fa64d0db4c6a2f46cd594e97ca14d4b0fd3591c6df4367d21537205db648616318e1d17c4db9b222933570944eaed6d900f82088216cfcaf5eaa61567248db3045ce46e7bbc7579b1b9325070de699e3ad29d3f4e25618888fb4f0381258940f33d3664fc4b78f6149fc7ba38b1599b8796032fd81e5f9b3"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000540)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x0, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x6, 0x6, 0x5, 0x20}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0xf4, 0x0, "7a2a7dc3", "77bf2554"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x0, 0xf9, 0x1, 0x0, 0x1}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000640)={0x40, 0x13, 0xeb, "72aba0dbf65fd6aa5fa3ee657625b09eb48cec4d06ab7949bb9177d1196ec8bb3e7e7dd34aa239a9af1739765d360c03ef1d740a7fe8f91dfde4feed5ff78f3fe6f8f9b3adf7d126764b6ff4bfa4a75bcbaa32645ed6fc8180ef7108f82e661e1aeabb6da9afe6851bd5ea2a7379e407852b08e6915141a22672e370bfd0faa67de193a7ee1c7b5dc1c47c70665b37790a49da275001492f160ba84915b3d4b1b6c4e53f77684452b45ff3482f1ff66edc85e65c987386d0ed2ba1e559ffe6ce378439d4d839605d2d334910a0e7de85ee69d6e906b1741c823370bac3012498c5021888f1749862c79b9a"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x8, 0x80, [0xff0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "ee2d"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "dfa1"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x16a}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fc0009003c0800240042ef42000000010902"], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r2) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0xc, &(0x7f0000000040)={0x0, 0x4, 0xda, {0xda, 0xe, "a57675c3f2528ead98240f1b0f6308b69b39092c5ff60980e49be49fad7598d500db2641f142d8468354e5cb837892cc90df81aa56985350c9829592db63ac95feb87433c0067b757eecc1b0248b45bbff5c9353c722745862a5e3d2f2c94222d2348b9011a7490eaeee6f0ba597bc862d9726919dc5b38648a752ed48857a410549c10bb541ec4ff0c9301336c2615f7c2e424e2357c2825b1b140b2a60a238437ef230a834a86176d777cde44a491197270c46973b5f60e54e89bbab894783d077a53313a5dac2ced760944def681972e3fd1e021a831e"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x10, &(0x7f00000002c0)={0x20, 0x15, 0xcb, "c87e8db2567f2310e8963b3fc0a62eb8a94dd20926c76c7d06c0da7837f4a735a9f92c0e202b622fb4ea6e020cbf78cf1d39eb6fcc9925cdd887dd44af0576251d2ae4e566be87e2a6958ed948e08bbe219b251d875b45b9ddec31a85801f6600b619bba9226788c0f67c61d7a5d129d13438b7f883c1cef6ef7f2db9d8009634edf2e34e3648cd13d674cbe2fc62eb1c3add2b8b3641656a3e654e6c7302471511c63603fdcc9619749e9e8456b6e6efdb1e080237663a03fc4adb7d102156b7f7c341d5f6f0017fc387e"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}}) [ 1118.766221][T18424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:04:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000001840)=ANY=[@ANYBLOB="0204000000000000000100000000000005160600000000000a00000020000004ff02000000000036e22873a45f131efaffffffffffffff000000000000000000000000000000000005000500000000000a00000000000000200100000000000000000000000000000000000000000000c3f3128aebe685214ad7531dd26cfaf63de51fae726d"], 0x70}}, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x47, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x7}}]}, 0x70}}, 0x0) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r5, 0x6) r6 = openat$vsock(0xffffff9c, &(0x7f0000001640)='/dev/vsock\x00', 0x400041, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) io_submit(0x0, 0x7, &(0x7f0000001800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="1e91160fa7e29428d7dcb8ac9abb11c41112637d1c0facbe78ca038f4dd6b9699675e1a5820448ecee9b1e45181e9aeb703501667406cb06b2ab6adab7a17d57619b4bb455971dbcc18797f4b5f92be5836b55d4365d061db290ced2e1c36e67c847a2aedf944e0501cca0cdb7fc8f3d25f34820dc71f6b18e6fda498dbcdf48469bee01f25ff94212fc649b5b62a3ae7b34cb5d07a077a4ee3e14b46b54e7c52f5cefab5da0b3cbafa7d631a5f10b835a8f70ddbcb3a3f2585006", 0xbb, 0x2, 0x0, 0x3, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000200)="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", 0xfb, 0x7f93, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000400)="5cb734619c552acbceba4c9fc3f7ca1ad7920811556a0bbba0b3c2672ae25671b46665960bd2698bd70c82f97949e431cfca0d5a6e3ec2197ef41059caf7cf62613cb7fbf554b84a59fe27608d7682ff03bdbaa6e5e19a96c85ed554813946e2645aba3d2281d4bf6e337451cd40e1e3fe94acc9fb6a20e813c64b3f7ca566e9d7e874a8", 0x84, 0x7, 0x0, 0x3, r1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x2, 0xfc9f, r1, &(0x7f00000004c0)="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", 0x1000, 0x1f, 0x0, 0x0, r5}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000001500)="95ee5d31ce5ae384af1aae5e787fcef3f2563fa4dec9693d56dc24de5171ca6a7b76ce6018e9679edea7626b2ae368c7d209f02f0cb0ed1b75ff16113aa7d44706216ca013cab58c833ee87b0a38fcc23428d1d7c542ece603d12f68e89b6e337673a63770b49f1d36c30a7a554b835b0c030b18395169666508a0c576a5fc845800", 0x82, 0x7}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x7ff, r1, &(0x7f0000001600)="4f9f2b513250557c7a845bf9567347ff2adb6f8b54dad67d0c9f", 0x1a, 0x7e, 0x0, 0x2, r6}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x7, r7, &(0x7f00000016c0)="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", 0xff, 0x100000000, 0x0, 0x2}]) r8 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x80f, 0x8083) ioctl$UI_DEV_CREATE(r8, 0x5501) 10:04:00 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), 0x0, 0x0}) [ 1118.839672][T18424] input: syz0 as /devices/virtual/input/input393 [ 1118.901470][T18440] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1118.927307][T18440] input: syz0 as /devices/virtual/input/input394 [ 1118.978694][T28418] usb 1-1: device descriptor read/8, error -71 10:04:00 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x3, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:00 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:00 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1119.228678][T30214] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1119.322753][T18462] FAULT_INJECTION: forcing a failure. [ 1119.322753][T18462] name failslab, interval 1, probability 0, space 0, times 0 10:04:00 executing program 1: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0x4) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000140)={0x6, 0x8001}) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x0, 0x8}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1119.348449][T18462] CPU: 0 PID: 18462 Comm: syz-executor.4 Not tainted 5.8.0-rc6-syzkaller #0 [ 1119.348460][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:04:00 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1119.348465][T18462] Call Trace: [ 1119.348486][T18462] dump_stack+0x18f/0x20d [ 1119.348507][T18462] should_fail.cold+0x5/0x14 [ 1119.348530][T18462] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1119.348545][T18462] should_failslab+0x5/0xf [ 1119.348560][T18462] __kmalloc+0x27d/0x340 [ 1119.348577][T18462] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1119.348596][T18462] tomoyo_realpath_from_path+0xc3/0x620 [ 1119.348614][T18462] ? tomoyo_profile+0x42/0x50 [ 1119.348634][T18462] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1119.348650][T18462] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1119.348667][T18462] ? tomoyo_execute_permission+0x470/0x470 [ 1119.348682][T18462] ? find_held_lock+0x2d/0x110 [ 1119.348704][T18462] ? ksys_write+0x212/0x250 [ 1119.348738][T18462] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1119.348763][T18462] ? __fget_files+0x294/0x400 [ 1119.348786][T18462] security_file_ioctl+0x50/0xb0 [ 1119.348806][T18462] __do_compat_sys_ioctl+0x50/0x230 [ 1119.348828][T18462] do_syscall_32_irqs_on+0x3f/0x60 [ 1119.348848][T18462] do_fast_syscall_32+0x7f/0x120 [ 1119.348869][T18462] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.348882][T18462] RIP: 0023:0xf7f61569 [ 1119.348888][T18462] Code: Bad RIP value. [ 1119.348897][T18462] RSP: 002b:00000000f5d5c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1119.348914][T18462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b [ 1119.348924][T18462] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.348933][T18462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1119.348943][T18462] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1119.348952][T18462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.356397][T18462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1119.485733][T28418] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1119.498655][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1119.586126][T18471] input: syz0 as /devices/virtual/input/input397 [ 1119.599384][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1119.678818][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.678869][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.689108][T18484] FAULT_INJECTION: forcing a failure. [ 1119.689108][T18484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.875954][T18484] CPU: 0 PID: 18484 Comm: syz-executor.4 Not tainted 5.8.0-rc6-syzkaller #0 [ 1119.875965][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.875970][T18484] Call Trace: [ 1119.875992][T18484] dump_stack+0x18f/0x20d [ 1119.876014][T18484] should_fail.cold+0x5/0x14 [ 1119.876038][T18484] __alloc_pages_nodemask+0x1a3/0x930 [ 1119.876060][T18484] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1119.876088][T18484] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1119.876108][T18484] cache_grow_begin+0x8c/0xb20 [ 1119.876125][T18484] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1119.876146][T18484] cache_alloc_refill+0x27b/0x340 [ 1119.876162][T18484] ? lockdep_hardirqs_off+0x66/0xa0 [ 1119.876184][T18484] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1119.876198][T18484] __kmalloc+0x319/0x340 [ 1119.876221][T18484] tomoyo_realpath_from_path+0xc3/0x620 [ 1119.876239][T18484] ? tomoyo_profile+0x42/0x50 [ 1119.876260][T18484] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1119.876276][T18484] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1119.876295][T18484] ? tomoyo_execute_permission+0x470/0x470 [ 1119.876311][T18484] ? find_held_lock+0x2d/0x110 [ 1119.876333][T18484] ? ksys_write+0x212/0x250 [ 1119.876370][T18484] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1119.876395][T18484] ? __fget_files+0x294/0x400 [ 1119.876418][T18484] security_file_ioctl+0x50/0xb0 [ 1119.876437][T18484] __do_compat_sys_ioctl+0x50/0x230 [ 1119.876459][T18484] do_syscall_32_irqs_on+0x3f/0x60 [ 1119.876476][T18484] do_fast_syscall_32+0x7f/0x120 [ 1119.876496][T18484] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1119.876508][T18484] RIP: 0023:0xf7f61569 [ 1119.876514][T18484] Code: Bad RIP value. [ 1119.876522][T18484] RSP: 002b:00000000f5d3b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1119.876536][T18484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541b [ 1119.876546][T18484] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.876554][T18484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1119.876563][T18484] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1119.876572][T18484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.930784][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.931812][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.931847][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.931869][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1120.019462][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.019484][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.019499][T30214] usb 6-1: Product: syz [ 1120.019514][T30214] usb 6-1: Manufacturer: syz [ 1120.019529][T30214] usb 6-1: SerialNumber: syz [ 1120.107758][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.107779][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.107794][T28418] usb 1-1: Product: syz [ 1120.107810][T28418] usb 1-1: Manufacturer: syz [ 1120.107824][T28418] usb 1-1: SerialNumber: syz [ 1120.783385][T18443] udc-core: couldn't find an available UDC or it's busy [ 1120.790627][T18443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1121.130141][T30214] cdc_ncm 6-1:1.0: bind() failure [ 1121.138946][T30214] usb 6-1: USB disconnect, device number 73 [ 1121.252156][T18443] udc-core: couldn't find an available UDC or it's busy [ 1121.259718][T18443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1121.894374][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1121.926138][T28418] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1121.938756][ T17] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1121.958495][T28418] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1121.967962][T28418] usb 1-1: USB disconnect, device number 99 [ 1122.178345][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1122.298332][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.308554][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:04:03 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010009000000082505a1a44000010603010906c0c1bba712f6b042d7065c0002010000000904000001020d0000052406000105240000000d240f0100000000007a48169206241a000000090581034000000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1122.518672][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.527725][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.578345][ T17] usb 6-1: can't set config #1, error -71 [ 1122.593196][ T17] usb 6-1: USB disconnect, device number 74 [ 1122.658378][T28418] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1122.908209][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1122.978206][ T17] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1123.028920][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.040159][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.075895][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1123.086901][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.218175][ T17] usb 6-1: Using ep0 maxpacket: 8 10:04:04 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000200000000000006241a000000090581546004dbcc692d1348e153e5028d00000904010102020d0000090582739e0000008000000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f00000000c0)={0x8000, 0xa, 0x6, 0x4, 0x4, 0x3f}) 10:04:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000200000000000028001200090001f976657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000002c00270e00"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000f1ff038008000100627066001800020006000400010000000c0005000600000000000000"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x28c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x1}, 0x840) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x80000) 10:04:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:04 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:04 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x4, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1123.338278][ T17] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1123.338413][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:04:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:04 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1123.397695][T18539] input: syz0 as /devices/virtual/input/input399 [ 1123.398354][ T17] usb 6-1: unable to read config index 0 descriptor/start: -71 10:04:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f00000000c0)={0x4, 0x2a, 0xffff60ea}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setfsuid(r2) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000100)) [ 1123.398375][ T17] usb 6-1: can't read configurations, error -71 [ 1123.403994][T18539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1123.410380][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.410406][T28418] usb 1-1: Product: syz [ 1123.410422][T28418] usb 1-1: Manufacturer: syz [ 1123.430149][T28418] usb 1-1: can't set config #1, error -71 10:04:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1123.431536][T28418] usb 1-1: USB disconnect, device number 100 [ 1123.597911][T18561] input: syz0 as /devices/virtual/input/input400 [ 1123.602753][T18539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1123.826778][T18575] input: syz0 as /devices/virtual/input/input401 [ 1123.888204][T28418] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1123.925684][T18575] input: syz0 as /devices/virtual/input/input402 10:04:05 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x5, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1124.138130][T28418] usb 1-1: Using ep0 maxpacket: 8 [ 1124.264341][T28418] usb 1-1: config 1 has an invalid descriptor of length 45, skipping remainder of the config [ 1124.298127][ T17] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1124.306994][T28418] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1124.338047][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 64 [ 1124.528710][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.537783][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.553030][T28418] usb 1-1: Product: syz [ 1124.557424][T28418] usb 1-1: Manufacturer: syz [ 1124.558086][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1124.563765][T28418] usb 1-1: SerialNumber: syz [ 1124.621279][T28418] cdc_ncm 1-1:1.0: bind() failure 10:04:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1124.688492][ T17] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1124.748165][ T17] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1124.755763][ T17] usb 6-1: can't read configurations, error -71 [ 1124.789791][ T17] usb usb6-port1: attempt power cycle 10:04:08 executing program 0: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r0, 0x6) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x3, {{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x4}}}, 0x84) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 10:04:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xffff, 0x81, 0x9, 0x81}, {0x3ff, 0x3f, 0x4, 0x4}, {0x7, 0x0, 0xff, 0x14000}]}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x1}, 'syz0\x00', 0x2e}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:08 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x6, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:08 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010100"/87], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1127.262610][T28048] usb 1-1: USB disconnect, device number 101 [ 1127.341670][T18624] input: syz0 as /devices/virtual/input/input403 10:04:08 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x7, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1127.627652][ T17] usb 6-1: new high-speed USB device number 78 using dummy_hcd 10:04:08 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1127.807723][T28048] usb 1-1: new high-speed USB device number 102 using dummy_hcd 10:04:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1127.867680][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1127.908395][ T17] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1128.028296][ T17] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1128.028321][ T17] usb 6-1: can't read configurations, error -61 [ 1128.047801][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1128.168434][T28048] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.168485][T28048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.168517][T28048] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.168540][T28048] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1128.178077][ T17] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1128.338509][T28048] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1128.338538][T28048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.338553][T28048] usb 1-1: Product: syz [ 1128.338567][T28048] usb 1-1: Manufacturer: syz [ 1128.338581][T28048] usb 1-1: SerialNumber: syz [ 1128.417705][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1128.457793][ T17] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1128.577874][ T17] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1128.577898][ T17] usb 6-1: can't read configurations, error -61 [ 1128.580481][ T17] usb usb6-port1: attempt power cycle [ 1129.290424][ T17] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1129.403529][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1129.447667][ T17] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1129.477537][T28048] cdc_ncm 1-1:1.0: bind() failure [ 1129.517692][T28048] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1129.537791][T28048] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1129.563194][T28048] usb 1-1: USB disconnect, device number 102 [ 1129.570181][ T17] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1129.578850][ T17] usb 6-1: can't read configurations, error -61 [ 1129.757467][ T17] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1129.848178][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1129.888185][ T17] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1130.008157][ T17] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1130.015975][ T17] usb 6-1: can't read configurations, error -61 [ 1130.030666][ T17] usb usb6-port1: unable to enumerate USB device [ 1130.237439][T28420] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1130.477481][T28420] usb 1-1: Using ep0 maxpacket: 8 10:04:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) personality(0x8) syz_usb_control_io(r0, 0x0, 0x0) 10:04:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:11 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x8, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x1f, {0x0, 0x3, 0x0, 0x0, 0x5}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x1e, 0xffffffffffffffff}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r1, 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:11 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/308], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1130.642598][T28420] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1130.654468][T28420] usb 1-1: can't read configurations, error -71 10:04:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1130.726275][T18699] input: syz0 as /devices/virtual/input/input405 [ 1130.809894][T18709] input: syz0 as /devices/virtual/input/input406 10:04:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) 10:04:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:12 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:12 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x10, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1130.947578][T30214] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1131.066176][T18720] input: syz0 as /devices/virtual/input/input407 10:04:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1131.147608][T28420] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1131.197957][T18734] input: syz0 as /devices/virtual/input/input408 [ 1131.217640][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1131.347974][T30214] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1131.368610][T30214] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1131.388595][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1131.389774][T30214] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1131.510877][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.538791][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.574843][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1131.599691][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.638265][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.677482][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.685481][T30214] usb 6-1: Product: syz [ 1131.690561][T30214] usb 6-1: Manufacturer: syz [ 1131.695178][T30214] usb 6-1: SerialNumber: syz [ 1131.777337][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.786476][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.817185][T28420] usb 1-1: Product: syz [ 1131.821378][T28420] usb 1-1: Manufacturer: syz [ 1131.825959][T28420] usb 1-1: SerialNumber: syz [ 1132.099806][T30214] usb 6-1: USB disconnect, device number 82 [ 1132.857061][T30214] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1132.973095][T28420] cdc_ncm 1-1:1.0: bind() failure [ 1132.997370][T28420] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1133.027222][T28420] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1133.052579][T28420] usb 1-1: USB disconnect, device number 104 [ 1133.117038][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1133.237756][T30214] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1133.252846][T30214] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1133.264380][T30214] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1133.447152][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1133.456201][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.492581][T30214] usb 6-1: Product: syz [ 1133.496779][T30214] usb 6-1: Manufacturer: syz [ 1133.512919][T30214] usb 6-1: SerialNumber: syz [ 1133.689024][T30214] usb 6-1: USB disconnect, device number 83 [ 1133.737161][ T17] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1133.977090][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1134.097107][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.112365][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.126064][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1134.142239][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1134.307645][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1134.316713][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.333146][ T17] usb 1-1: Product: syz [ 1134.338396][ T17] usb 1-1: Manufacturer: syz [ 1134.343800][ T17] usb 1-1: SerialNumber: syz 10:04:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:15 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x300, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000000c0)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:15 executing program 5: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r0, 0x6) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x800c4151, &(0x7f0000000080)={0x0, &(0x7f0000000040)="a4aa610552ee9c5a7464ef46f419552777a3cd4f843d15b3bc", 0x19}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000007fffffff40000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904000000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) [ 1134.417015][ T17] usb 1-1: can't set config #1, error -71 [ 1134.463784][ T17] usb 1-1: USB disconnect, device number 105 10:04:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4606, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000000c0)={0x400000100002f, {0x0, 0x0, 0x0, 0x2, 0xffffff27}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10010, r3, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4600, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1134.553669][T18797] input: syz0 as /devices/virtual/input/input409 10:04:15 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x500, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x460f, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1134.776998][T28048] usb 6-1: new high-speed USB device number 84 using dummy_hcd 10:04:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1134.799558][T18815] input: syz0 as /devices/virtual/input/input411 10:04:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4610, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1135.056885][T28048] usb 6-1: device descriptor read/64, error 18 10:04:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, 0x0) [ 1135.075105][T18833] input: syz0 as /devices/virtual/input/input413 10:04:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:16 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x600, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1135.369237][T18844] input: syz0 as /devices/virtual/input/input415 [ 1135.446909][T28048] usb 6-1: device descriptor read/64, error 18 [ 1135.726860][T28048] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1136.006862][T28048] usb 6-1: device descriptor read/64, error 18 [ 1136.396808][T28048] usb 6-1: device descriptor read/64, error 18 [ 1136.517565][T28048] usb usb6-port1: attempt power cycle [ 1137.226758][T28048] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1137.326681][T28048] usb 6-1: Invalid ep0 maxpacket: 0 10:04:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x3c, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/60}, &(0x7f00000001c0)=0x50) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x700, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, 0x0) 10:04:18 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmdt(r1) shmdt(r1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:18 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4004ae52, &(0x7f0000000100)=0x100) flock(r1, 0x6) recvfrom$phonet(r1, &(0x7f0000000040)=""/105, 0x69, 0x10060, &(0x7f00000000c0)={0x23, 0x3, 0x2, 0x8d}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000140)={0x1, 0xffffffff, 0x1f, 0x7ff, 0x1, 0x6}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1137.476613][T28048] usb 6-1: new high-speed USB device number 87 using dummy_hcd 10:04:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0xc, 0x1f, 0x55d}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ptrace$cont(0x11, r1, 0x0, 0x0) fcntl$setown(r0, 0x8, r1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) ioctl$RTC_IRQP_READ(r4, 0x8004700b, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x407e, 0x0, 0x1000}, 'syz1\x00', 0xfffffffe}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1137.537351][T18870] input: syz0 as /devices/virtual/input/input417 10:04:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x3f00, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, 0x0) 10:04:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0xff, 0x8001, 0x8, 0x5}, 'syz0\x00', 0x4a}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f00000000c0)={0xd, 0x4}) [ 1137.826612][T28418] usb 1-1: new high-speed USB device number 106 using dummy_hcd 10:04:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = open(&(0x7f0000000200)='./bus\x00', 0x80010400c2, 0x160) flock(r2, 0x6) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r5, 0x6) openat(r5, &(0x7f00000000c0)='./bus\x00', 0x20000, 0xd0) openat$full(0xffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x8c00, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020400040e000000000000000000000005000600000000000a00000000000000ff02000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a000000000000002001000000000000000000000000000000000000000000005c9246e75fdd7142c7a1fe7ce857bbe91b852045e0d66b94157bb43f896acbb63a94866f72f75ad01eae59b284e2d761fcd0164352"], 0x70}}, 0x0) r7 = fcntl$dupfd(r6, 0x406, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(r7, 0x5501) 10:04:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1137.956825][T28048] usb 6-1: device not accepting address 87, error -71 [ 1137.957051][T28048] usb usb6-port1: unable to enumerate USB device [ 1138.076515][T28418] usb 1-1: Using ep0 maxpacket: 8 10:04:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0xff00, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ptrace$cont(0x11, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) utimensat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0xea60}}, 0x0) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e28, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={r6, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={r6, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0xff, 0x6, 0x10203, 0x80000001, 0x7, 0x1, 0x9, 0x0, r7}, &(0x7f00000001c0)=0x20) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1138.207074][T28418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.207118][T28418] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.207147][T28418] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1138.207171][T28418] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.316477][T28048] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1138.385712][T28418] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1138.385733][T28418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.385749][T28418] usb 1-1: Product: syz [ 1138.385764][T28418] usb 1-1: Manufacturer: syz [ 1138.385779][T28418] usb 1-1: SerialNumber: syz [ 1138.556427][T28048] usb 6-1: Using ep0 maxpacket: 8 [ 1138.677171][T28048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.700185][T28048] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.896600][T28048] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1138.905671][T28048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.915347][T28048] usb 6-1: Product: syz [ 1138.920127][T28048] usb 6-1: Manufacturer: syz [ 1138.924734][T28048] usb 6-1: SerialNumber: syz [ 1139.486612][T28418] cdc_ncm 1-1:1.0: bind() failure [ 1139.506607][T28418] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1139.528293][T28418] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1139.546574][T28418] usb 1-1: USB disconnect, device number 106 [ 1140.072354][T28048] cdc_ncm 6-1:1.0: bind() failure [ 1140.096489][T28048] usb 6-1: USB disconnect, device number 88 [ 1140.246287][ T17] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1140.486310][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1140.609945][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.636628][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.648659][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1140.666368][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1140.837000][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.846383][T30214] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1140.850168][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.864027][ T17] usb 1-1: Product: syz [ 1140.875203][ T17] usb 1-1: Manufacturer: syz [ 1140.880633][ T17] usb 1-1: SerialNumber: syz 10:04:21 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 1140.936421][ T17] usb 1-1: can't set config #1, error -71 [ 1140.944647][ T17] usb 1-1: USB disconnect, device number 107 [ 1141.116360][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1141.246241][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.276292][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:04:22 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x22, {0x0, 0x10, 0x0, 0x3}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x1000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1141.371913][ T17] usb 1-1: new high-speed USB device number 108 using dummy_hcd 10:04:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x2000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1141.435453][T18974] input: syz0 as /devices/virtual/input/input425 [ 1141.499279][T18988] input: syz0 as /devices/virtual/input/input426 10:04:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1141.506411][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.506432][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.526547][T30214] usb 6-1: can't set config #1, error -71 [ 1141.538285][T30214] usb 6-1: USB disconnect, device number 89 [ 1141.646254][ T17] usb 1-1: Using ep0 maxpacket: 8 10:04:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:22 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0}) 10:04:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x20) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020400040e00006518cd80c0be9500000000000000000005000600000000000a00000000000000ff02000000000000000000000000010000000000000000000200010000000000000000000000000005000500000000000a000000000000002001e6a68ebe54f95419af5f4a1400"/119], 0x70}}, 0x0) r3 = dup3(r2, r1, 0x0) fstat(r1, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0cc5604, &(0x7f0000000100)={0x2, @sdr={0x6175ab6d5a67ef6f, 0x5150395b}}) flock(r1, 0x6) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000000c0), 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r5 = openat$mice(0xffffff9c, &(0x7f0000000300)='/dev/input/mice\x00', 0x321000) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000380)={0x7, 0x40, 0x6, 0x1ff, 0x4c4, 0x9}) flock(r4, 0x6) pipe(&(0x7f0000000280)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) openat$nullb(0xffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x101000, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1141.767486][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.767526][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.767552][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1141.767570][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.926310][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.926332][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.926347][ T17] usb 1-1: Product: syz [ 1141.926363][ T17] usb 1-1: Manufacturer: syz [ 1141.926378][ T17] usb 1-1: SerialNumber: syz [ 1141.928681][T30214] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1141.972246][T19014] input: syz0 as /devices/virtual/input/input429 [ 1142.199684][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1142.346963][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.365964][T30214] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1142.375613][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.566770][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1142.576156][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.584274][T30214] usb 6-1: Product: syz [ 1142.594903][T30214] usb 6-1: Manufacturer: syz [ 1142.599940][T30214] usb 6-1: SerialNumber: syz [ 1142.667278][T30214] cdc_ncm 6-1:1.0: bind() failure [ 1143.066139][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1143.086152][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1143.106131][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1143.122856][ T17] usb 1-1: USB disconnect, device number 108 [ 1143.815902][T28420] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1144.055896][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1144.175904][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.195918][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.215968][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1144.227015][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:04:25 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x40, 0x5, 0x0, 0x7, 0x939}) 10:04:25 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102d70d00000000000000000009040000015b8e2788a959ec88d5af13e8020d0000052406000105240000000d24060100000000000000000006241a0000000905810340000000020d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000040)=0x80000001) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0}) 10:04:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x0, 0x3}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:25 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:25 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x3000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1144.451656][ T3791] usb 6-1: USB disconnect, device number 90 [ 1144.455962][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1144.513061][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.543934][T28420] usb 1-1: Product: syz [ 1144.565162][T19069] input: syz0 as /devices/virtual/input/input431 [ 1144.575897][T28420] usb 1-1: can't set config #1, error -71 [ 1144.577198][T28420] usb 1-1: USB disconnect, device number 109 10:04:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x2) ptrace$cont(0x11, r1, 0x0, 0x0) sched_getscheduler(r1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$rfkill(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x9, 0x3, 0x0, 0x1}, 0x8) [ 1144.636125][T19085] input: syz0 as /devices/virtual/input/input432 10:04:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x100, 0x0, 0x0, 0x0, 0xdc3, &(0x7f00000000c0)='team_slave_0\x00', 0x4, 0x3, 0xad1d}) 10:04:25 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:26 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0}) 10:04:26 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x4000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1144.927972][T28420] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1144.947215][T19094] input: syz0 as /devices/virtual/input/input434 10:04:26 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x8946, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1145.065785][ T3791] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1145.185930][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1145.316407][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.341823][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.373412][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1145.375868][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1145.411800][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1145.456777][ T3791] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1145.585848][ T3791] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1145.593449][ T3791] usb 6-1: can't read configurations, error -61 [ 1145.606510][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.625988][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.633983][T28420] usb 1-1: Product: syz [ 1145.645668][T28420] usb 1-1: Manufacturer: syz [ 1145.650284][T28420] usb 1-1: SerialNumber: syz [ 1145.745767][ T3791] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1145.985680][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1146.032615][ T3791] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1146.186662][ T3791] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1146.194251][ T3791] usb 6-1: can't read configurations, error -61 [ 1146.216503][ T3791] usb usb6-port1: attempt power cycle [ 1146.795613][T28420] cdc_ncm 1-1:1.0: bind() failure [ 1146.845849][T28420] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1146.865786][T28420] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1146.881013][T28420] usb 1-1: USB disconnect, device number 110 [ 1146.930693][ T3791] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1147.026255][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1147.073542][ T3791] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1147.227124][ T3791] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1147.234707][ T3791] usb 6-1: can't read configurations, error -61 [ 1147.405508][ T3791] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1147.505563][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1147.545740][ T3791] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 1147.565708][T30214] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1147.655524][ T3791] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1147.663211][ T3791] usb 6-1: can't read configurations, error -71 [ 1147.675780][ T3791] usb usb6-port1: unable to enumerate USB device [ 1147.815508][T30214] usb 1-1: Using ep0 maxpacket: 8 [ 1147.936203][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.952024][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.964660][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.981509][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.146154][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1148.155215][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.170060][T30214] usb 1-1: Product: syz [ 1148.174380][T30214] usb 1-1: Manufacturer: syz [ 1148.180539][T30214] usb 1-1: SerialNumber: syz 10:04:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400040c00000000000000000089859d9d06000000000002004e24ac1414aa00000000000000000200010000000000000000000000040005000500000000000a00000000000000ff00"/96], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 10:04:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x5000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:29 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)={0x2, 0x4, 0x4, 0x4, 0x1f, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sec_ctx={0x15, 0x18, 0x9, 0x81, 0x9a, "b3eb5773e61e0c71ee086aa13a7547043ebe582c12a0a854a30b4762c14a1f92a98ad072d653dc71443f37e05bfe43ee60a9778454500d713c96135333a7964c6941be49b591a0a4880306c160d8e7065b4e9b797e8225c4b2566d17c081d80dd321b1e5fd1378703b366d6a19d66720680f86541926d0a9fad3e68fc2fc1fb977058528755144b088c0ddc7dfd25b97c9b7f5ab27cb4d5159ac"}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xf8}}, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/191, 0xbf}], 0x2, &(0x7f0000000180)=""/97, 0x61}, 0x40000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1148.235485][T30214] usb 1-1: can't set config #1, error -71 10:04:29 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12050000020000082505a1a4400001020301fcffffffffffffff000904000001020d000005240600000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e00"/97], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80242, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r5, 0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={r8, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x2, 0x2}, 0x8) syz_usb_control_io(r0, 0x0, 0x0) [ 1148.276941][T30214] usb 1-1: USB disconnect, device number 111 [ 1148.309628][T19144] input: syz0 as /devices/virtual/input/input436 [ 1148.433710][T19169] input: syz0 as /devices/virtual/input/input437 10:04:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x6, 0x5}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1148.595439][ T17] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1148.598980][T19177] input: syz0 as /devices/virtual/input/input438 [ 1148.676810][T19183] input: syz0 as /devices/virtual/input/input439 10:04:29 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x6000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1148.785436][T30214] usb 1-1: new high-speed USB device number 112 using dummy_hcd 10:04:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x100, 0x0, 0xffffffff, 0x0, 0x12}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$nvram(0xffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x381000, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000100)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x6e147efc49c0dbe1, 0x4) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x4, @broadcast, 'macsec0\x00'}}, 0x1e) [ 1148.835427][ T17] usb 6-1: Using ep0 maxpacket: 8 10:04:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) fcntl$getown(r1, 0x9) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:30 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1148.928366][T19197] input: syz0 as /devices/virtual/input/input440 [ 1148.956525][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.956574][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.958630][T19206] input: syz0 as /devices/virtual/input/input441 [ 1149.089120][T30214] usb 1-1: device descriptor read/64, error 18 [ 1149.118047][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:04:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x280002, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x98, 0x0, 0xcc, 0x81, 0x9, 0x1, 0x2, 0x2, 0x3, 0x2, 0x4, 0xfb, 0x6}, 0xe) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8, 0x404000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1149.118075][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.118091][ T17] usb 6-1: Product: syz [ 1149.118106][ T17] usb 6-1: Manufacturer: syz [ 1149.118121][ T17] usb 6-1: SerialNumber: syz [ 1149.148376][T19212] input: syz0 as /devices/virtual/input/input442 10:04:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1149.412885][T19226] input: syz0 as /devices/virtual/input/input444 [ 1149.481585][T19231] input: syz0 as /devices/virtual/input/input445 [ 1149.495359][T30214] usb 1-1: device descriptor read/64, error 18 10:04:30 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1149.655486][T19239] input: syz0 as /devices/virtual/input/input446 [ 1149.713899][T19244] input: syz0 as /devices/virtual/input/input447 [ 1149.785258][T30214] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1150.105270][T30214] usb 1-1: device descriptor read/64, error 18 [ 1150.261077][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1150.287039][ T17] usb 6-1: USB disconnect, device number 95 [ 1150.515141][T30214] usb 1-1: device descriptor read/64, error 18 [ 1150.635372][T30214] usb usb1-port1: attempt power cycle [ 1151.035086][T28420] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1151.275169][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1151.355079][T30214] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1151.395832][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.425166][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:04:32 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105030000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0xff, 0x5}, {0xfd, 0x9b}, 0x100, 0x4, 0xe8}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0}) 10:04:32 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x7000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:32 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x402c5828, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x1009}}) r2 = openat$bsg(0xffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x4000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1b4, 0xffffffff, 0xffffffff, 0x1b4, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x10, 0x40, 0x5}}}, {{@uncond, 0x0, 0x90, 0xfc, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x5c, 0x3f, 0x0, 0x0, "db30799d2f3268fb68f04009b3765f6182452dd61874e8fa72f8e9fd0257fd1ac332cd3e2d184c907c48006cef7a3ac15e51a7675aee8ccfe3fabda55a16086e"}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000100)=""/208) 10:04:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000040)=0x80) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004801) syz_usb_control_io(r0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) [ 1151.635112][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1151.657968][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:04:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101840, 0x0) sendto$inet(r1, &(0x7f0000000140)="dd74e5883eb84114a823e6427404a13289373f5d39e2f19a0e6146fc2ac6e768a3ace92db761a30ad273b0d8d8ac823618160287096d5b0db809d775e280a2293c61759fc1978c9f835cc0f693777f28227e6edd86e0b0ee9bccf3da26a014b10daa25a1d7b2745a586c", 0x6a, 0x40000, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x24040, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000380)=""/4096) [ 1151.702287][T28420] usb 6-1: Product: syz [ 1151.702306][T28420] usb 6-1: Manufacturer: syz [ 1151.734874][T19280] input: syz0 as /devices/virtual/input/input448 [ 1151.736818][T28420] usb 6-1: can't set config #1, error -71 [ 1151.738298][T28420] usb 6-1: USB disconnect, device number 96 10:04:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x402c5829, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1151.811844][T19280] input: syz0 as /devices/virtual/input/input449 [ 1151.856844][T30214] usb 1-1: device not accepting address 114, error -71 10:04:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x1009}}) r2 = openat$bsg(0xffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x4000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1b4, 0xffffffff, 0xffffffff, 0x1b4, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x10, 0x40, 0x5}}}, {{@uncond, 0x0, 0x90, 0xfc, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x5, 0x5c, 0x3f, 0x0, 0x0, "db30799d2f3268fb68f04009b3765f6182452dd61874e8fa72f8e9fd0257fd1ac332cd3e2d184c907c48006cef7a3ac15e51a7675aee8ccfe3fabda55a16086e"}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000100)=""/208) [ 1152.073470][T19306] input: syz0 as /devices/virtual/input/input450 10:04:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x402c582a, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1152.144996][T28420] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1152.146861][T19314] input: syz0 as /devices/virtual/input/input451 [ 1152.235060][T30214] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1152.325791][T30214] usb 1-1: Using ep0 maxpacket: 8 10:04:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x3, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1152.363391][T19322] input: syz0 as /devices/virtual/input/input452 [ 1152.386151][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1152.456736][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.456786][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.456819][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1152.456841][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1152.506200][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.506252][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.638097][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.638118][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.638132][T30214] usb 1-1: Product: syz [ 1152.638147][T30214] usb 1-1: Manufacturer: syz [ 1152.638160][T30214] usb 1-1: SerialNumber: syz [ 1152.665637][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:04:33 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x8000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1152.815195][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.815210][T28420] usb 6-1: Product: syz [ 1152.815223][T28420] usb 6-1: Manufacturer: syz [ 1152.815235][T28420] usb 6-1: SerialNumber: syz [ 1152.855942][T28420] cdc_ncm 6-1:1.0: skipping garbage [ 1153.774860][T30214] cdc_ncm 1-1:1.0: bind() failure [ 1153.814988][T30214] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1153.834971][T30214] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1153.855140][T30214] usb 1-1: USB disconnect, device number 115 [ 1153.954912][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1153.983504][T28420] usb 6-1: USB disconnect, device number 97 [ 1154.544831][T28420] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1154.704757][T30214] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1154.784733][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1154.905209][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.924904][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.944692][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1154.956889][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1154.964757][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1155.104872][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.124631][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.125366][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1155.155134][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.163262][T28420] usb 1-1: Product: syz [ 1155.186081][T28420] usb 1-1: Manufacturer: syz [ 1155.198401][T28420] usb 1-1: SerialNumber: syz 10:04:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x10000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x402c582b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:36 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = syz_io_uring_complete(0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/72) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x3}, 0x16, 0x2) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x1) sendmsg$AUDIT_USER(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="bf000000ed03200040000000fcdbdf25f81158cc8c525932f174c703048c20a1ce40c4ad11f6b0c3cd90426390b0307207000000000000004466ca14e8b8a431fe8c832df7b50664412d4891c00bbe7b1590ba1b9dd256a8fdd04fe216b5dadc48d39b362fbb4ed626f81cf7cad9922f162dee7877d2f3ed60625ed9ecde50f628ec4e3e4419501e77bf9bd056ee121e6d5f08a96fb17827c897737993b1217e677f0419c1f27cc75a8044bae9c51fbdbcd997e364671a06a2d2"], 0xbc}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xfffffcaa) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x80000001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRESOCT=r0, @ANYBLOB="8279df3085b3738ca1eac1c6bc9deefa822452461caa87123222bae8af18dfa7b844cd70448e70bf35319fe7c0c0b46dd054598b3332eacc98e29757d6cb0578a0abc2d59bd2a7ada941b2b82a4ae634315462959e22cec4cfaa1884f72f912813e1452fd38bd7bb3c278cfb13dfe7281a1767d63b552831c6a22d5b726c29ee73c581c610231980adef9d2831b48f5df12356581fb798fc1a5b60e34d5574c488d4140c9430d7665691ff5160", @ANYRESDEC=r2, @ANYRES32=r3], 0x0) 10:04:36 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000400)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x401}]}, 0x20}, 0x1, 0x0, 0x0, 0x48081}, 0x40000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0204000414000000000000000000000005000600000000000a00000000000040ff0200000000000000000000000000010000000000000000020001000000000000000000000000000b0018007f034b0023464af7214e65011a335c5eda06313f8c3042524a7af62f3f115d4901e3ec376651645e550fe7fe4b839252118257e255fdc974730614788a744bf0e3a795884044e4c1f31354ac2dd9760000000000"], 0xa0}}, 0x0) r4 = pidfd_getfd(r1, r3, 0x0) write$midi(r4, &(0x7f0000000040)="80888836aa31687bd4680ee4678868912c5a57c5710d88a34706c2c0b3f11359da0c1cfea1ea86ba5e349922758c703a88ff21047fece1fa", 0x38) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1155.235777][T28420] usb 1-1: can't set config #1, error -71 [ 1155.261933][T28420] usb 1-1: USB disconnect, device number 116 10:04:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1155.377424][T19387] input: syz0 as /devices/virtual/input/input453 10:04:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x402c5839, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1155.402527][T19394] FAULT_INJECTION: forcing a failure. [ 1155.402527][T19394] name failslab, interval 1, probability 0, space 0, times 0 10:04:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x3f000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1155.402546][T19394] CPU: 1 PID: 19394 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 1155.402555][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.402561][T19394] Call Trace: 10:04:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3, 0x0, 0xc, @private2={0xfc, 0x2, [], 0x1}, @private1, 0x78a8, 0x40, 0x3, 0xdb}}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x52000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000000012da27431f7f360f0052a05e796fd5a90ae873bdbe9e189811d408cda4ebd73ef135725d08ced88fa363b1fdb7ae0c928b0135c299323981890387029db18e3002a9df00021580982669901a083dd400ab432b9863835e75af97213dec9a337cfb644e0ea2f41dd3ddc497a7524d9390ac473900452427ad81aea0950c102051df8519b3c05d7d262c44e3bc51efa6a23ac536979726b176a560c7e12247ee20309b2192d2c1c7a28bb3b6dff24ac0f244d823ab4b653ae79b5268f77b13a2fbe3b2f867a4c0e472b7229ca911abf4ed2f4fa9ba11d46b8c7bb3094baa00"/241, @ANYRES16=r3, @ANYBLOB="29200000000000fedbdf25010000002c0001801400020068737230001e88624300000000000000140002aa4d16e65701b329192ab70073797a6b616c6c6572300000001d0000053ab8be989f8c56c5d7edf76c5cfb8cd0a747cd1056115fe9d5d9c311"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020400040e000000000000000000000005000600000000000a00000000000000ff02000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a00000000000002000000000000000000000000000000000000000000000000dfc58bb1dc922871951ecd6a7780015aa60f6817c8edf62daaba6f1c0e17f34ba828ddfc3c0be5c95e718305b6082908126e18ce8b2ed709b222f24be165125668caebb3f752ea656bb6"], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000280)={0x90, r3, 0x204, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82c36d7812fd5a89}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x2004c0c1) [ 1155.402583][T19394] dump_stack+0x18f/0x20d [ 1155.402604][T19394] should_fail.cold+0x5/0x14 [ 1155.402627][T19394] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1155.402651][T19394] should_failslab+0x5/0xf [ 1155.402669][T19394] __kmalloc+0x27d/0x340 [ 1155.402688][T19394] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1155.402707][T19394] tomoyo_realpath_from_path+0xc3/0x620 [ 1155.402725][T19394] ? tomoyo_profile+0x42/0x50 [ 1155.402748][T19394] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1155.402763][T19394] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1155.402783][T19394] ? tomoyo_execute_permission+0x470/0x470 [ 1155.402799][T19394] ? find_held_lock+0x2d/0x110 [ 1155.402821][T19394] ? ksys_write+0x212/0x250 [ 1155.402857][T19394] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1155.402882][T19394] ? __fget_files+0x294/0x400 [ 1155.402906][T19394] security_file_ioctl+0x50/0xb0 [ 1155.402925][T19394] __do_compat_sys_ioctl+0x50/0x230 [ 1155.402946][T19394] do_syscall_32_irqs_on+0x3f/0x60 [ 1155.402964][T19394] do_fast_syscall_32+0x7f/0x120 [ 1155.402983][T19394] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1155.402995][T19394] RIP: 0023:0xf7f47569 [ 1155.403000][T19394] Code: Bad RIP value. [ 1155.403009][T19394] RSP: 002b:00000000f5d210cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1155.403024][T19394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004600 [ 1155.403033][T19394] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.403043][T19394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.403052][T19394] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 10:04:37 executing program 1 (fault-call:2 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1155.403061][T19394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.403329][T19394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1155.405089][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1155.405109][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.424840][T30214] usb 6-1: can't set config #1, error -71 [ 1155.426440][T30214] usb 6-1: USB disconnect, device number 98 [ 1155.622126][T19406] input: syz0 as /devices/virtual/input/input455 [ 1155.869149][T30214] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1155.920036][T19420] input: syz0 as /devices/virtual/input/input457 [ 1155.964542][T28417] usb 1-1: new high-speed USB device number 117 using dummy_hcd 10:04:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r2}, 0xffffffffffffffff, 0x8}) 10:04:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1156.152453][T19431] FAULT_INJECTION: forcing a failure. [ 1156.152453][T19431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1156.152473][T19431] CPU: 0 PID: 19431 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 1156.152483][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.152488][T19431] Call Trace: [ 1156.152510][T19431] dump_stack+0x18f/0x20d [ 1156.152531][T19431] should_fail.cold+0x5/0x14 [ 1156.152555][T19431] __alloc_pages_nodemask+0x1a3/0x930 [ 1156.152579][T19431] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1156.152605][T19431] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1156.152626][T19431] cache_grow_begin+0x8c/0xb20 [ 1156.152642][T19431] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1156.152662][T19431] cache_alloc_refill+0x27b/0x340 [ 1156.152678][T19431] ? lockdep_hardirqs_off+0x66/0xa0 [ 1156.152698][T19431] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1156.152712][T19431] __kmalloc+0x319/0x340 [ 1156.152736][T19431] tomoyo_realpath_from_path+0xc3/0x620 10:04:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1156.152754][T19431] ? tomoyo_profile+0x42/0x50 [ 1156.152772][T19431] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1156.152787][T19431] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1156.152806][T19431] ? tomoyo_execute_permission+0x470/0x470 [ 1156.152822][T19431] ? find_held_lock+0x2d/0x110 [ 1156.152843][T19431] ? ksys_write+0x212/0x250 [ 1156.152878][T19431] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1156.152902][T19431] ? __fget_files+0x294/0x400 [ 1156.152925][T19431] security_file_ioctl+0x50/0xb0 [ 1156.152946][T19431] __do_compat_sys_ioctl+0x50/0x230 [ 1156.152969][T19431] do_syscall_32_irqs_on+0x3f/0x60 [ 1156.152986][T19431] do_fast_syscall_32+0x7f/0x120 [ 1156.153006][T19431] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1156.153019][T19431] RIP: 0023:0xf7f47569 [ 1156.153024][T19431] Code: Bad RIP value. [ 1156.153033][T19431] RSP: 002b:00000000f5d210cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1156.153048][T19431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004600 [ 1156.153057][T19431] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.153066][T19431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1156.153074][T19431] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1156.153083][T19431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1156.213541][T19425] input: syz0 as /devices/virtual/input/input458 [ 1156.244631][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1156.384737][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.384786][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.407900][T19442] input: syz0 as /devices/virtual/input/input459 [ 1156.542835][T19452] input: syz0 as /devices/virtual/input/input460 [ 1156.555397][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.555419][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.555435][T30214] usb 6-1: Product: syz [ 1156.555450][T30214] usb 6-1: Manufacturer: syz [ 1156.555465][T30214] usb 6-1: SerialNumber: syz [ 1156.873992][T19463] input: syz0 as /devices/virtual/input/input461 10:04:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x2, [@multicast, @multicast]}) [ 1157.085146][T28417] usb 1-1: device descriptor read/64, error 18 10:04:38 executing program 1 (fault-call:2 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1157.191776][T19473] input: syz0 as /devices/virtual/input/input463 [ 1157.276647][T19478] input: syz0 as /devices/virtual/input/input464 [ 1157.437566][T19486] FAULT_INJECTION: forcing a failure. [ 1157.437566][T19486] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.437587][T19486] CPU: 1 PID: 19486 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 1157.437596][T19486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.437602][T19486] Call Trace: [ 1157.437625][T19486] dump_stack+0x18f/0x20d [ 1157.437648][T19486] should_fail.cold+0x5/0x14 [ 1157.437670][T19486] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1157.437685][T19486] should_failslab+0x5/0xf [ 1157.437700][T19486] __kmalloc+0x27d/0x340 [ 1157.437719][T19486] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1157.437738][T19486] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1157.437756][T19486] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1157.437775][T19486] tomoyo_encode+0x28/0x50 [ 1157.437794][T19486] tomoyo_realpath_from_path+0x186/0x620 [ 1157.437818][T19486] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1157.437834][T19486] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1157.437854][T19486] ? tomoyo_execute_permission+0x470/0x470 [ 1157.437871][T19486] ? find_held_lock+0x2d/0x110 [ 1157.437892][T19486] ? ksys_write+0x212/0x250 [ 1157.437929][T19486] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1157.437954][T19486] ? __fget_files+0x294/0x400 [ 1157.437978][T19486] security_file_ioctl+0x50/0xb0 [ 1157.437997][T19486] __do_compat_sys_ioctl+0x50/0x230 [ 1157.438019][T19486] do_syscall_32_irqs_on+0x3f/0x60 [ 1157.438037][T19486] do_fast_syscall_32+0x7f/0x120 [ 1157.438056][T19486] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1157.438068][T19486] RIP: 0023:0xf7f47569 [ 1157.438073][T19486] Code: Bad RIP value. [ 1157.438082][T19486] RSP: 002b:00000000f5d210cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1157.438097][T19486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004600 [ 1157.438106][T19486] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1157.438121][T19486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1157.438131][T19486] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1157.438140][T19486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1157.439869][T19486] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1157.614723][T28417] usb 1-1: device descriptor read/64, error 18 [ 1157.721396][T30214] cdc_ncm 6-1:1.0: bind() failure [ 1157.731695][T30214] usb 6-1: USB disconnect, device number 99 [ 1157.910145][T28417] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1158.314318][T28417] usb 1-1: device descriptor read/64, error 18 [ 1158.535157][T30884] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1158.785178][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1158.905119][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.926205][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:04:40 executing program 1 (fault-call:2 fault-nth:3): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:40 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:40 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0xfdfdffff, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1159.044447][T30884] usb 6-1: string descriptor 0 read error: -71 [ 1159.054364][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:04:40 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0xa, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, [], 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '-$$!\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7f}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x440c8}, 0x20004000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1159.085436][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:04:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:40 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0xff000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1159.115466][T30884] usb 6-1: can't set config #1, error -71 [ 1159.116708][T30884] usb 6-1: USB disconnect, device number 100 10:04:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1159.514309][T30884] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1159.564257][T28417] usb 1-1: device descriptor read/64, error -71 [ 1159.694783][T28417] usb usb1-port1: attempt power cycle [ 1159.754272][T30884] usb 6-1: Using ep0 maxpacket: 8 10:04:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1159.874328][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 10:04:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0xfffffdfd, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1159.874372][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:04:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1160.034870][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1160.043953][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:04:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0xc0684608, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1160.104274][T30884] usb 6-1: Product: syz [ 1160.104292][T30884] usb 6-1: Manufacturer: syz [ 1160.104307][T30884] usb 6-1: SerialNumber: syz [ 1160.434407][T28417] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1160.551005][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1160.700878][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.716845][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.752143][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1160.775702][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.964871][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1160.978599][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.995828][T28417] usb 1-1: Product: syz [ 1161.005841][T28417] usb 1-1: Manufacturer: syz [ 1161.016142][T28417] usb 1-1: SerialNumber: syz [ 1161.244264][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1161.266785][T30884] usb 6-1: USB disconnect, device number 101 [ 1161.994111][T30884] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1162.148072][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1162.174145][T28417] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1162.204128][T28417] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1162.213395][T28417] usb 1-1: USB disconnect, device number 119 [ 1162.245082][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1162.364652][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.379544][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x2, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1162.594120][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1162.603192][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.663745][T30884] usb 6-1: Product: syz [ 1162.680240][T30884] usb 6-1: Manufacturer: syz [ 1162.703947][T30884] usb 6-1: can't set config #1, error -71 [ 1162.705326][T30884] usb 6-1: USB disconnect, device number 102 [ 1162.910936][T28417] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1163.143881][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1163.264574][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.275931][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.303852][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1163.333869][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1163.523920][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.532978][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.552904][T28417] usb 1-1: Product: syz [ 1163.566126][T28417] usb 1-1: Manufacturer: syz 10:04:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x408000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="ff00050000108000050003000700c939f340a4d41199b8d3c56ee567"], 0x12) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x4, 0x1ff, 0x9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r3}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:44 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 10:04:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x2, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1163.570740][T28417] usb 1-1: SerialNumber: syz 10:04:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = openat$full(0xffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x218441, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)={0xfc7, "abc0e77dd869bbf39d7f7400dd415fd3600617637e019b031ec9485d4fdd4c1a4c192b08498bd229fa60ef82abfb84a1367bb5bbb9f62b3e14c29bdae3cd0658558d480f3bf08c8deb5e7ef0a410fbbd8602b02e3eca2665075ad94c34530e905f6af06225147c9a1cd635f641c68191d68c0204e063486782425add201f8b6f847cec3231ea688cddd8db6ad63d89c7dbf6a55635a7ea255482ebdbb05d5d1b804202a0cb85dd3cb8ca0be126a04d4ce2eade2be33d4c45458bfae14715c41fb019e4e877669473649b693c071cb16830c2d1594afb952058f4321baaa76d1a12f0062e8dc175d0bfc83ba41e2fd9749138cfb4e3e733111cebf1d4e16590a19d5ac6b45822abd0238be68eee28d1af9f476a25659aefe82a176eb571344b38cbb33b0fe06f46f34a5a1fec407db2c8302ea7d9bc4d87916b7f14b6738fd2e602542879daa87f20a042657c8f162cf8821ba642355ee2da65f1caf445ade8506471c8ea2953e470c34f59074c8a9ed72703d2da97445e66ba07d3eb8ea60d61a21ec6c83bffa2b226784091706bc7b32b08d428a64e6353cf9382e8519e5e991a81659aa2a6dfe6545eabdc917928362a32a80e43066ba8a74a634fb50147f52b5579d8c25d87d27c988fb365d5a08c5f5eebbeb83b9cb8697d3b7641a45447add4baca2c4c6c1e19f6a3340dfb695b87a0cbab95eb38d218462e410f1e947a3799a808330f444967d4cbbf8eb0e376146d69fb3c7a6e39dbd6a94c70e94488b3852b293b1ad07bb10f2ed370c6ef40de117493059528ca5872559dcb4c24dbc1a0ae7baccee6278aa8c24e0173f098328a6f5dfc44337c116b3311b05d82d7b869997facf051805ad9f1a736a58048577bd447ebc556023a0baca8e498a5eaf0530b1c65696d59c7aa897ee6124744dc58d980bf673db675c252245f76c31d407418101932db4eb24d8326f84c5ce49bcbafa364c90be7402eabdf2f9f0987a01b95cd23c0a0887edd40a51537931d822d5a593b0ac50a14d675afd2f04524094c911ca921c8799045e811b3cb6c303d532aef711672c1a105d254926a17ea9e8a4196317228f09d242754e25c6b776516c48b457f5489d561b613d452d09390f956e062d1edd3d44512b1682251744a85de7624d13b296fe32bd97adee10230e53f01547a65e892941673cda4c0b61491559162dfe003127b7da3b492148df2f93ec780a7155607f7f92139810c211e238ffe1a9bd87c97c88f63db81dd4cfc928ab4b732b8a05d59f7ed269661d519982dc869edfbd9d8db60fc0eb9f94a9905d2b4283f87ddf9db3ee13a8b6e4539e7b64d6efb0d40407c42c9d4e09cc05564b5d8f64839ce369935f76acd76308b73f52c1181275b8f51c8cf4b2398363c48f69659ddbdeb825468e51b9aa4702ddd74376b0c74970d122d39b0116487b1a2edcd9550fcc61f4ce163cdbaa1421d4699849d9c1acf3a0173dd56295296cddeee86e9cc52d02264151be975df2ff17bb70e1cfe8957500fbb5456bc69ff48044f0ac291f0551f121838d4e33a68a3fc91d5ed8d4d7e2fc0d62592611ff84fbc9988a1a72847d7de3a0b54970929fb5bf57b41efe1f12cb1436a0b7e0ac0a64a4cca19ea17898bc69bff29cbc1bc5d70268f4adffc1112b2f7c33a4a722276c814d996501485829b2a6270fe522cd50863cef95cbb99482cecee3ebc6327afd266623ec07b671a3123786e5529f43b2aaca09e4d4b74dae34219900fb86784978f5b967fdbef0519cfafe19367758e16c9b6fd969432add479c75cdfb8e4e445ee8d69475a27e5903926860cf6005260455296a1383cf4cb2c1003d642425db214bc443e2599ac7ba68914ea47d4c427382991afd766a79714e70c2e99e87b8398602fe478199d38216f1fc2eca65373f4c0203553915af267aba3ebced8f3e493c247157deaa35615b882fdd9850e1348df08f631fda88df20f5e242b9922523c574c2fc2b5373f62ac8c5df3554585c0719c5413866db69f16de0bcef2a19d727b0ab0c88fa62926c468fb0086b4cb5a76b877532601ff3fdff5858b452513d0e4750eb3c390424d26704bde824b3ed180fe163c122fa995fffa4ca12687c6df63d357eea9ced2d168b0f1e5d1ffb15ff9489158b3cb6615dd68dadd017b61cbf1f685748d0debb5b353ca25f1cc9b935d8876879aa3285a0d0722cc4b6507393c9acf706ed62ac296de7a07ceb553de253e6c99b4ea744af1acac20831dbbbd91074e9a59bb107d2f82b09fc7c6f0ba036ca47c862ccb72d18084499d4840408a111dfb73dd3b553465442eeb1f8c69305f62e4b8ec17336ce2d493a663fc9a31ac5ac75362bda9db843d541d15d9605956d68613c5f393b969f65c3c5a948f83038ca9339986ef73f9187472ee33725f08572ff7507d4eb82687f34f424d54fb1ee1be2a053c0a9477ffae86a11a8f11d35700e074d4ad59a57a0b84cc9709ea6b15a0c7d9cba9becbbc08fe96ad552943d068015cc5950bb322145b9a138af6495c17db4ff5c986dcba06b20ade2fc44eb11ebdb9fadaf46fb6f1d4c432fdd11d04dda2ccc7a1c8623017087611a8d78ae5434a52194352a696e18b6545ae74a5195b9fcdba232b841422af9ae671bb279b80482e34d8d90f3a95840cb47d234bc7cc611765f1f8dd76859bfe8e92d62b495af03e0a4c590ba8878b9e3349ae6e84fb913392a0485629a958ce9b262be183c06feb77a5b50a1e25cfa0ad3a903ecfef234ce762b37b569cb0af4e54b0b8561e04250131925fc8f1675781f5ba758642d24e6636d1b5ff0c02638b2c5cf250df66b7f74c68b9a299d0d8dd72dc40960c371fd68039b698cf500a8c09a63e7e9c0e7e78e187ca99aeaa9b082960da0b5f0f2a8289fd06b4a8c827f48a436d9c8318da8ed5bf0b67ff2cc6dac2a5d30174aeff07204a3f4d383c1395b3fce759170d4b61c79b1503569ece55757b2e788f111c2382f3448b68e13dc43ef606fecd2606e3988c0662169d1065d767409c298e34e3e72ba4342c611f9f12069ad2626f897173f81baac2eaa338cb2da69bb8301a00a02bd312763cdf7d59871a0839e6057e844df577adc6138c2d2e797cdc7b7f69a72866aae5ebc05ab1a735ba551ceebeb8e238c5f3e5f0f0d865ceb4c9fc407b3596d78db410f4c0b2551c5a3e2eea82d218a649a670fffebdd9b6b9a4412460d3d1a60dbfaeaa3937c8b2c7aad22ab38fe93013d429e499100c33e8b236946decdb9f3e0b9ddd0e6832b70903b08c793bb085fa04eb167befa9242bc68855e5234cbeb9eea04756ec96fcd4e1e982ac60c5c44ad205d41d7f1e118821f0d9f42092571d02ed4b247fb84b9779ebd7b22f351658e702f5c8ba87521ed91c1cd06a74470d15207c402a26195f59e2880fd857e29609f0941c702f0b78752e372a39d52932b339fc4b0f5513eae60a4a5e5347c2b59edb828df2ffa076a807a029a90961172747ac854755cafac40ab05843b663fb2ef2a03e7efc6e011c6c82e0b79659bd61f27483c704af28a507068cd4413f5e1952443d6e20d918eb72c18aca29424fa2740c25299e5c772890b9ca16deefcbdd5f5ce4ca7698a2ebf6b98d670b3fccc38477394ac86351ecd837c5ff4ba390a5631fd3c8deb8fadb5116c24af1af92fc677643d8e2f904927e80a14edcee578ac77eb9322c2d090b01bf03e6175e949bdd92dec4be9dae969f68ba7bea2c06c89df675855ac4aba6a36d61af36e9bf210ff7800c2823d537b3abf18f75db473adcfa3fe6fd278e0d58eaa95918a51bd21c85471858892286c090fec64ed880d0828e71c63ecda2fc032ecc5298d22a96dc9fc084f8fd6e9cafeb39b5b06b77b537ac84ed88f1f389f9ee9784e7ea8f5d4d92b24418cfd171a6ddf5d8d2411ca7042a40b16ea06759c008a7b8a853b59bf8cf9ec4892913fff1f045d8bfa0ef16b5013954a31a39f3a8f960f37c88d5b79dba0d8b0031edbedab572709fd133b2b474509f187c2c4d2c536d5cd6d957a19923d129e538f629c6d3e8dbf13b5603fb65331c8f9b9e45b7df5372f4e9ad053400b682e4f4d7dc36b44fec162a32bd8077a2ebf7a74fe52a0d54961b2838a3a6ac5fa73d63c75b331ca9113530eeaa378ae7293053ea5e8c99ce3d4d2fcae88132e6d5e3d1097790054b6f1e637821a73a04652ae1ab125fb4b0901d6cdb6e1ca70e2a12d5478dd3b55d0168f1ba2d8ca45a48d617d68bb87f55adfcbe81983178d6aa06e74ad61208c7ef667df37ff16a03e250914400a8d017ca0204f455a3503a95c4588671a31e5cee7a5df2901d86c19d65ffd11b9f1a9a4e39d6c737c23a498e1f9edf44a3003d175678b6c757db380afa024d5941ba6c08c95c332627383c544e41213453b928ae9b35f3aae6d792f103fe2368ea509d111d40ddcb0f218fd27806c42eff81f63261bfc60d6118cb2d1a87dfce96c31c5b2ce3eeb635bac16a4e4893281cf00ca03aabce9bc27a743d5f373f1871f6679ac1c72d56217b62c92335e568de2de7aa2ca4b991663a651303ecdd0b3793eb62cdb3fe55b386fec303d9774b7b1a309abd24357964912c68efbe7cebfb356593eb2812c9250cb0826cac4e8a37aa0ecb8944f85d92705ed4d295f5a3c1bb62df948250100439825c6b72170590a79666a383d576e415177863665589a06f70f4c0a5f4ce30de0aba9bd39c8106d8d04abab18cffe44727d1801227d8333b852401e5d5045a0a2051dacc73f33736933e4ae604375067e9aaf5b69ae13cfa72d10250d0ec79849b1c1b16fd145930285cb20d5793cc497633ecb1f96c285f7472ba377664c76fa4cb5e0745b9830934bb2c6096a22b8659dae77a95c07c8a4de37a924d68be94a35a75566105ec5ad158d518cb29bb5597f164c17a9c48329fdb94daaaed921dbc4907dbc914bf8680028d00707ecc5671f56a53bea258d0b04bc3f5c7db25c43869ccb619af07a5469ac4dad24a530c36e1d6560bda2306e75cfa532c7990794641a6db0c85a80c2b81420ca3f84b099ead3d178476b94037b4d27ef1f11df33f294eabf4293ffd71d9e67bd380738b26e1d1715f55005c86cd093b49bd77bbf12eb9cae939e1fa2aeca2f564c76e5dec70e21fcc1cc44e0195433e3ba8888bfdad037b273d0099e9ec2ef5e1ed723a22011bed319c2ff37e62337a4419ce15d895d1cbf69d6d6576caeb71fece3f007a9fcdab618673ef11fe175f86bdda68dba81b09afe97aa539e9186e3c333f5186a65898bf4b56896cee99b3e3da4a4b2710f828f07a1e3e64009b5be70c065d4ad7d0e7a95fd7dce2ace67bb6a6398dc0bf3efe7bdb936470ebf792908a56990198a00bcf8ba56f3f0862f130f4c5b6d55916bbbfea070ab11300b4e593b4f58d4a2e83e64419946ff9344162577e49cca286b462ff90eadbf5d807f756824a5c2ee8ca96f05ea4915d01f844f88d240e928e1ffc96ff0f270f110199dc2ed68fc3c4ae6dabf544dabe6ef3066900f0b958e2f9245cc35bb4a41818b520bd9f0361145805c7ad718daa9123c412cb7df4bdd5b86e3875ff3e3914bf792860f6e758a8f9a429d8f38a78b0c17558d85f51546b419f98bd072e5ce41b97d625c313d05eb5eaebe4ec763c3ae95ab5b7db6da1bc55ad187c7fe61efbf046af24c17e14c2f29518"}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1163.654323][T28417] usb 1-1: can't set config #1, error -71 [ 1163.655629][T28417] usb 1-1: USB disconnect, device number 120 10:04:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x5, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x3, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1163.686460][T19614] input: syz0 as /devices/virtual/input/input465 [ 1163.756914][T19634] input: syz0 as /devices/virtual/input/input466 10:04:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x140a, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x82) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x6, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1163.924041][T28418] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1163.931604][T19643] input: syz0 as /devices/virtual/input/input467 [ 1164.000374][T19651] input: syz0 as /devices/virtual/input/input468 10:04:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x4, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1164.053914][T28417] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1164.173707][T28418] usb 6-1: Using ep0 maxpacket: 8 [ 1164.199037][T19660] input: syz0 as /devices/virtual/input/input469 [ 1164.305308][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.305357][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.313870][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1164.464997][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.484498][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1164.493558][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.494197][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.523952][T28418] usb 6-1: Product: syz [ 1164.528143][T28418] usb 6-1: Manufacturer: syz [ 1164.532740][T28418] usb 6-1: SerialNumber: syz [ 1164.558988][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1164.573554][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.763828][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1164.772884][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.793920][T28417] usb 1-1: Product: syz [ 1164.798104][T28417] usb 1-1: Manufacturer: syz [ 1164.802673][T28417] usb 1-1: SerialNumber: syz [ 1165.439607][T19615] udc-core: couldn't find an available UDC or it's busy [ 1165.451205][T19615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1165.470059][T19615] udc-core: couldn't find an available UDC or it's busy [ 1165.479381][T19615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1165.497662][T19615] udc-core: couldn't find an available UDC or it's busy [ 1165.508882][T19615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1165.523715][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1165.530696][T28418] cdc_ncm 6-1:1.1: bind() failure [ 1165.573727][T28418] usb 6-1: USB disconnect, device number 103 [ 1165.973722][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1166.003666][T28417] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1166.043671][T28417] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1166.056545][T28417] usb 1-1: USB disconnect, device number 121 [ 1166.303550][T30884] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1166.553573][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1166.673548][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.703421][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.753490][T28048] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1166.933600][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1166.942748][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.973540][T30884] usb 6-1: Product: syz [ 1166.997019][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1167.015004][T30884] usb 6-1: can't set config #1, error -71 [ 1167.022630][T30884] usb 6-1: USB disconnect, device number 104 [ 1167.114363][T28048] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.125053][T28048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.137625][T28048] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.149789][T28048] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1167.343461][T28048] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1167.352508][T28048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.361748][T28048] usb 1-1: Product: syz [ 1167.366687][T28048] usb 1-1: Manufacturer: syz [ 1167.383584][T28048] usb 1-1: SerialNumber: syz 10:04:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$KDDELIO(r1, 0x4b35, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) umount2(&(0x7f00000000c0)='./file0\x00', 0x5) 10:04:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:48 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x5, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:48 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x8, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:48 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000e92505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810a4000000000090401eb26f92897b4fb878601108b9acd250000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1167.403293][ C1] raw-gadget gadget: ignoring, device is not running [ 1167.410267][T28048] usb 1-1: can't set config #1, error -32 [ 1167.424065][T28048] usb 1-1: USB disconnect, device number 122 [ 1167.498036][T19727] input: syz0 as /devices/virtual/input/input471 10:04:48 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x10, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$CHAR_RAW_SECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1167.566079][T19739] input: syz0 as /devices/virtual/input/input472 10:04:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4603, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:48 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x6, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1167.793515][ T3791] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1167.816548][T19751] input: syz0 as /devices/virtual/input/input473 10:04:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000280)={0xffffffff, 0x7ff, 0x0, 0x1}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) getsockopt$sock_buf(r1, 0x1, 0x6e, &(0x7f0000000180)=""/176, &(0x7f0000000240)=0xb0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x6, 0xfffe}, 'syz0\x00', 0x3c}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000140)) [ 1167.953615][T28048] usb 1-1: new high-speed USB device number 123 using dummy_hcd 10:04:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1168.072453][T19768] input: syz0 as /devices/virtual/input/input475 [ 1168.123595][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1168.168342][T19775] input: syz0 as /devices/virtual/input/input476 [ 1168.193447][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1168.313481][T28048] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.338173][T28048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.390354][T28048] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1168.425774][T28048] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.573955][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1168.613358][T28048] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.623009][T28048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.653364][T28048] usb 1-1: Product: syz [ 1168.657563][T28048] usb 1-1: Manufacturer: syz [ 1168.662149][T28048] usb 1-1: SerialNumber: syz [ 1168.843258][ T3791] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1169.133216][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1169.573156][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1169.703331][ T3791] usb usb6-port1: attempt power cycle [ 1169.823321][T28048] cdc_ncm 1-1:1.0: bind() failure [ 1169.856339][T28048] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1169.873692][T28048] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1169.888426][T28048] usb 1-1: USB disconnect, device number 123 [ 1170.424831][ T3791] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1170.553197][ T3791] usb 6-1: device descriptor read/8, error -71 [ 1170.583084][T28417] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1170.773135][ T3791] usb 6-1: device descriptor read/8, error -71 [ 1170.843112][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1170.963766][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.977420][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.997823][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1171.016267][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1171.193781][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1171.202838][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:04:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x300, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:52 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x7, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x4bc) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r3, r5) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r6, 0x6) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) inotify_rm_watch(r2, r5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:52 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01a91e058c7a0000000006241a0000000905810340000000000904010000020d00000904010168685fe10949abdc5d3c4c6246188b160fd1d7e8e1a4620b1d29bbcb3dcfd09dd5e39653401d69d6503477a76d9112ca909057857ee625251d5c09dd8dfe1f56f7756c77511c44e12e9566d719555af06e4c3268c75d40c54adaf05cfeda5da9de288e7f9e86d594"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1171.243254][T28417] usb 1-1: Product: syz [ 1171.247438][T28417] usb 1-1: Manufacturer: syz [ 1171.281325][T28417] usb 1-1: SerialNumber: syz 10:04:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082502000000000102030109025c0002010000000904000001020d00000524060001052400d7000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0x8) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0xc, &(0x7f0000000100)={0x40, 0xf, 0x9b, {0x9b, 0x11, "d979de47cc7d16ce0a56008475cae8e2322665da31a49544f80ade1bf2cb6bbaa829cb248e214b17f8ebd585cdbe5c5ab32d30daf4aa9fc116c854a94a96f6b06b016b13ddb4634e46648abcb4e533372cdb3a60067cc89c6fa6f1086347ff2134b819c7b7d149fd9a012c525adcd6bef7ab99f8cbd4ce639b593bcd1c30edc8dfbde7513e82d79f948ba6d881777e59efe64ba81f4f9f787a"}}, &(0x7f00000002c0)={0x0, 0x3, 0xb2, @string={0xb2, 0x3, "bc8634c74c88136f4323e744c8192c79533ed47975f6f002044574c7be21911a1938aabe68025ca139ea6f1b801d66c4bf9e35398cb942687667733cc6c1f695c066813c30470a51b3dd13077d38c73b5842005ea47084eb907f4803421cce158d5ab172b1304dcac60531240c705a03a3e354e797f18a1ad5bd9ac6189af1fc5f7fecd3b422eb7f3c99f2cd92f1dc3795067ba0ebb5817eb1d7c74a0bbf0876a8511b622853e5f081841239cc0faf8d"}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000380)={0x20, 0x11, 0x7e, "a2d02d02edac9d4c13ac2491b9175f19ffbcbf3a283267e37fa90fef753de81139973ac8d6ecf24f323b5556ba5039af131d0312006967db574cf99d8e07e354e108b52ae9d249fc8e91337142b2378355944234ae8f7636da0bfb950433a714d3fc5c6fc488e5ad9f1514c75bbfdbf6611b9bbef50ffda43d7d09251197"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000480)={0x20, 0x0, 0x7b, {0x79, "d8bd59ebcd3283aa7620539795c5b0f47dc0e9b069080cd7f802550388c901b00664bb803f7f6008ea0589be53b68cf6df54ef9f00b93bbe01d4bd091dfd5d22820d9a1418c61a70b6ba495e2cd48d59a22474ff037891e4b4e90456d29b92a762b4b9f7805c04681e55ca1e4ce3ca798bf5a45f54e0eae0b2"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x3f}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1171.343198][T28417] usb 1-1: can't set config #1, error -71 10:04:52 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x8, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1171.344560][T28417] usb 1-1: USB disconnect, device number 124 [ 1171.379069][T19815] input: syz0 as /devices/virtual/input/input477 [ 1171.470483][T19832] input: syz0 as /devices/virtual/input/input478 10:04:52 executing program 3: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x184, 0x0, 0x320, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x41}]}, 0x184}, 0x1, 0x0, 0x0, 0x24000020}, 0x24000800) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) 10:04:52 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4606, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1171.672300][T19842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:04:52 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x300, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1171.762408][T19848] input: syz0 as /devices/virtual/input/input479 [ 1171.793026][ T3791] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1171.806448][T19842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1171.823135][T28417] usb 1-1: new high-speed USB device number 125 using dummy_hcd 10:04:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0xff00, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = openat$fuse(0xffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x7, 0xf877, 0x5, 0x5, 0x8, 0x80, 0xc, 0x6, 0xfe, 0xe0, 0x6, 0x3, 0xa7c3}, {0x5, 0x3, 0x2, 0x1, 0x2, 0x9, 0x6, 0x2, 0x1, 0x9, 0x50, 0x20, 0x5}, {0x5, 0x2, 0x1a, 0xfc, 0x74, 0x40, 0xc4, 0x78, 0x1, 0x6, 0x1, 0x0, 0xffffffffffff519c}], 0x7}) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) [ 1171.893783][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1172.033812][ T3791] usb 6-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config 10:04:53 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x500, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1172.033860][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.033884][ T3791] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 104, using maximum allowed: 30 [ 1172.033913][ T3791] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 1172.088532][T19866] input: syz0 as /devices/virtual/input/input481 [ 1172.153061][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1172.226317][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1172.226335][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.226348][ T3791] usb 6-1: Product: syz [ 1172.226361][ T3791] usb 6-1: Manufacturer: syz [ 1172.226373][ T3791] usb 6-1: SerialNumber: syz [ 1172.283675][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 10:04:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0xffffff1f, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1172.383284][T19881] input: syz0 as /devices/virtual/input/input482 [ 1172.384344][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:04:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1172.384377][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1172.384400][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1172.564400][T19890] input: syz0 as /devices/virtual/input/input483 [ 1172.584407][T28417] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 10:04:53 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x68a383, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x5, 0x1, 0xb, @local, @mcast1, 0x8000, 0x8000, 0xffff, 0x8}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x4}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$audio(0xffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x401, 0x0) [ 1172.584428][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.584443][T28417] usb 1-1: Product: syz [ 1172.584457][T28417] usb 1-1: Manufacturer: syz [ 1172.584471][T28417] usb 1-1: SerialNumber: syz [ 1172.755742][T19902] input: syz0 as /devices/virtual/input/input485 [ 1172.801958][T19902] input: syz0 as /devices/virtual/input/input486 [ 1173.047199][T19833] udc-core: couldn't find an available UDC or it's busy [ 1173.062063][T19833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1173.096496][T19833] udc-core: couldn't find an available UDC or it's busy [ 1173.122794][T19833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1173.368791][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1173.390409][T28417] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1173.397034][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1173.423987][ T3791] usb 6-1: USB disconnect, device number 108 [ 1173.433915][T28417] cdc_ncm 1-1:1.1: bind() failure [ 1173.467395][T28417] usb 1-1: USB disconnect, device number 125 [ 1174.112704][ T3791] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1174.152703][T28048] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1174.372743][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1174.392687][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1174.510639][ T3791] usb 6-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 1174.513274][T28048] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.532758][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.537011][T28048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.552120][ T3791] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 104, using maximum allowed: 30 [ 1174.560123][T28048] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1174.582698][ T3791] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 1174.586633][T28048] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1174.763311][T28048] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1174.772375][T28048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:04:55 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4607, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x1000, {0x0, 0x2, 0xfffffffe, 0x0, 0xff, 0x1}}) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"d2c536be5cf1dd4594e08784023eadd7dae5652ec6aec3e165967607076ce87c37b39008bfe972d9000b6ab6997d4b126279db79c65a54f26e2ec1dfd561107ba15ec027598f94f2274ebcfbae36032e5b5ea2b19c89e7bcd401cfac9734d85c7785b4bd51b4108044600980f15f844088b4348ab885fc1618820681eb79c73622f65c49849c9c9e454cf439cdb118733270df4331799d44f2d790d4e2932ed81e565ee899c53f99c17f0d1a17511a7ab817613e1506ed0b0c1a94a9a761bbc8f214374edcfef72d3e9b858b6a6209847aaeadcb6b3689dee40aea4616625d1c94fb93594081669959e0cc08774d3376862aeb1bd00fb57b34f2a7864f0b0afd6c8146441a28641307dbb677b015d78ffcf3cb88dacf7cf726f24799770193fe729ee072c7b5ce863fcf21ef9da109b00b81adaab67d4a574f853246e8df5ad03f527bbd3e4ecfcd072ee8d8cd25dd4c0e5a7d975b4232b38cbb1ff1185029eab68cbf54302198b0a9f516f7be184ae6bc36712492326f31af9caec82e440c500838ed20a031f7b1d30baa6309b311b9ff423d74013374104480b2a3267ad08f75bbaaf68ec6ae98ecb4195c7d4a4de84210cd71d88dbd35947829d43fe70197bb852db28bb7c9788fb8ad2acd99b0737ddf6e624680eb00fd4d803709874d1e00606b9b84fb4db1ef33afbb1ec40e149fb3425258153d97c1b14330122e060bdd749e20a3ce89f11ce689d44505d8246ef41c9f7f781bb6bfc0913eda937c267890fe7d72c8630a7ab9beeca2c2cc031242e0a438bdc422693ff254a0a0cd414f15db046a25892f13430940775c6bc7cbce77a4ae99c360a68fa8245aaee0b0114519da893987c693133f212fc52703d01bbb8603f302fd4620fc1e64a79482994d3f300d050c6f3c1a5248457a566ecae3b2b37af42466e095ea80c5192eb318c06a970396269c5f007c61d92aa92bee176d467f75838299bb61b19155a7c56df6cd1f26e80d01959ef91a34c328894bf010e53787cee2fb953999a494d0d369da28f3fee31e304df1864ee921fb808fe0a39c1421403f887f07924e4c9d2c6afd9cdb1898aefe16cecb5b812da9bf233fb2b42690d9950bb08f303601cdcb39a643f89d76a65a51444cfca0e318f7d5255c6ab4fca6481464ffd44effde61fea59c20259f561e02354769a1d316546b3b30ac131fa0bd22baca584c825ad849121291cc13accb3c5c06583a313ddca3ddcef3a90530aeb9dbadb723c2c499a1b08e823cd17941cc680f9abf6d58a00347f7f5ad585c5cf56f613b27a04b96c146a1f00249c22b94c96db7a6a2663d0d9657c6d93649b2577ef194b203145fb8ae6c9d6817262c78b0b21fc9db3c64fcde1b6052951abd9e4366285e401430c23910b0172f39a2eda5f9434cb54ecf16a64e2a2772f463b10095adc9b9b1703b39d73262c3ba2cf4a2dc85dc9b35e03c386f7468d5cd43773fa30b4282c4654450f13e6bef09684eb9db5ccae7744baaa80889798877a4a7d27c5584ed02195740c0e06501ad957bc3201e985c147d1441f8f535623717cf46655998a7dff4c90a5bd37a9c10bda3ac8f105d24a7c9cc65b1920ae8c96c8bcd9ae1ecb758b66da25b40bc0c10ab6777c74f79f0c6d6dc8154c74000f3e280bebdb03a8dafa8b5df4b621b378870a0feb0d8989268166439ea5089c6aa68ba3dedc766865278822670e1ff61fdddc697a0215ada06e47b73356f916b156d4c75cf17c75e5dd5b23b0f28655f0557d8f18caba2b5afde1474ec8aa43b951937d825be5d7a68668f813e52c04d0f53642e616fd772e5a087a98057a8e54654e755536ddb8460a2d60a57955d76d762e1705ad7cf6a0c0f55543629c53ad104fe88527ff19bbbdd25d39b076d98b9c4962e2065777f6d91fafbddd502a640361582556e6b36897f7bb01c108ee4614de69ba1e787426703337cbe816453321c6d32ddc6112af0e06f0f5e4e09b1421ab1d7ca3bc405ae2edbc90c0f3d62552410674c164f5751c47c79a17a66961ef618c8285e8451e11ae3e58b5f81bbf4ab2b6a57fc5af36ab12877cbb7633691e6c5c19527f9a362f655501a19e73010b6b9734ec4e31e74a79509f671400aade1d55c0f8e8520fe611caa31bd81c2bbfac6392cb34ced4c7125b665efd466662ae2a590cb61c3b876fde74718890aff66d256c21472ecd19e4ef446e96fce12be059a751c4917e85d81f16aaa2a773475a64898b918e39bcf4865054e58ffdcbfa9f7cc9f343f6bd18474fec27a61fb6ac42bdcea1f29f0a9cbd12d3f98bcd335d8f2083209a016c6b7ea2585e65b27d88d89a6e36a4ba7ab5325ba2a716dbc81d6488fa8ae85759b887799d7d78055eaec2d2d4f28c71e056e9caa7211eaf8d0e73085e57363d56506756ed7dc9eaded3c7d21c1066346aa243fb906fb91789857bb7ab42101bc3717d909d59f2da21db460a282de5259d098b191d626f7db772e81c3c7b4a9f55029e9d1367234ed2ea0920c4a1c34c8b341670c4cf409335bf97611c546b404b0aa0f06eeb57fcf2067cf6cf652b33c3a9d6dc9477987e7c6fd72771dee79d14c128463d754843b5e33d4b23c7ba6ec9a98901ad00930ce0c6733f33b6fc7c2b04435f0a989ee181397cfb5291a9da6fb52c3c7be0f89b56098269bb45c04c978524c28d525de11ba8a2c5fe3b66a42edd10f8082fcbebe0948e860754e765afc008a4e80644272bb0928c7804369639b6f247e066f9145eb180d93a4ce965919004b72ac1851200e523d9ef11bfce350162286fcbb3dec9489de64a8036d667a26e3c01e5a2eaee6ca34818cdf11e22b4675281286e14753f57f9c67888c80359aa4c1ce397b1becdf7a97121f056e71cacb6338cd902a05f6c8f1909cfd4fac99cdc68d08e9b45ec550726cb8b1652d2875c76a24466695e1fdf76699b5aa918bb787b077893da0394c365b3c6221665608f6a4e2016611ba4363375c79080845ca4e9b93c42a954593e64028bb38e766a924c410f018fab8279b16edd213a3e29adb50c90fef87b65b3b0da02da3186c983598a4379c1755ff49a8fa9fc8c3de3cbaabfa30346551e1a17959ea46a36105d8a77f40021bb2d5c8fcbfae3be80f6de6f8686bfc0a16f5f7b2cdbf3f24ea2e8b0a69eb87f9005b6fa89131c39a3b3ba86c58e315791d2fc2cef4aa19ba9fe10d328c16af842f5adc301155ac6ba3e04d0093dccc348122cec42ea691eed24417d2b9324c031c65600a76f46a75e638a240d67b7e67831889f7f4e2a874eb53d3c21f80810b194005936e74e87c06324b6697c7631bf68480d5b8f38542431d8eaea753016c21fc14ea0531b34a50273f68d9d02f06a4c78e7f6c252d4a70511642a4c620240b57592df42d6ce3f76d97da44e01180ca251dedca290db010abe154d7b0d5edfa2e782986717ab59cd0708a1cdf96d0eb073cc44fe73a6054f90cc3dbc93d9b98451c11401b9a8ad951af6295975499eb68ffe29965a98dabd62cf5811dcb9431b2a954b7973791711303b1e97ba61125603e2613d41e94aabcbea42b17ed5e627ea510454ea61a44ed617175fed2b9acf6da209975f01c8f21e6bd92d8c7e54214c79d5b88c0923a44f12f24da419e40bb567b07594580976c355e7dc20f0745e8c18c655a5cce57ac712df1cd674c409bcde4a551a02ff22f45d248df1b589a92eb086238281fe704ebc829c23fe1e7b90f33f074a37d16b45f0df804d525cf95572a7dbbd1c71737df1e2b5924e6757ec411de5a5a9459bed8bc20aa76f37ec18cb7a274bb9868985c59de15510f39308ab58ca7d7d0be9274538b82f050144f3f993d57f07f2ba2959f88065e832f7f8545cc79020134fe16c052ae920dc0867eedb4ad098c288626f50471a482f06cbf49825aafa32aa6aba7e88692fc116f0839c5db98fdd16467b8d5607c3e4004f7fefa8cf2081f1c94e0b2771a848f75f39acfd55dff89761a4f298ee2deda3ac6955c9bacaac0c54f5a1babd341fab063e7adcbf380bc40d98e42933c2d3707b6b5377e15fcb064defd44a05196a61dcbde3952bd430f4030d8ae14139c7b69571aaff427fb64fed6a4fa75c65c4647c385285ae98ab6b9f43588776b593e598d4b0d2530bc1aebf9fe9fad653e277a113286c7d761c6a4246f8484c66c77fe9744aa27b7feb5f74603ade082730c4d1b90e63ff228f8fefa4e23bb899417a2ceabbe6ba260d041e53a66a82a6adb88ac7a72395cfa6fcbd85ba1632e5d33de734916c15e1a3809dbfea6da5e9fb1699646bbfc104b739b30c8877f567d044e335720ff3cecf7de28438213fc14845c15381a9516cb5acf7e2a78061005ec8f578dff786208d5b66b9c6cf5231390838e7e2c932d1dbec47638d5c2bcf9a138d677bccb609e3c7ae505a52ff29eabdd18fc04dd9859e911d653fb165afe8d803e65542a6e4d65f6fec2b175f956b14206b2a26f866140552efa7e3b1406179dc2cbde6edb81f6ec1772f7977fb141ffe5f2a669f488698b18eacb06f9a5daf45eb78426f6c9910b766d4e9fdd60fe6307fa7dd3479e03a1bf6fc6edc1692d1b810b0589bc08dc570bf352f9e158296fcc4c668f32b997af6011938a8fa0e89f9a8bd4cccdb5b84788f8061757ad1ebf9515bed15ac7b29463ba14f8e998d03b1e22ee93cdcedee8eebc4b77d06acc43e771af117e678f8c7eb049e1962b930aa1e2b21d964ac97090d1d80b14d18b6b7c0b3a09058b8ffcab700d1178138050cc10d8db3757c4696c5fbe67bfce68aa729c5254c93103a433bb65216e32a2a3dc1388f6e6b8767ef288ca159bea73801a0d3ab129f8c37f4527519453d39078d7634d4f1a47278fb04aa5527d0fb67b856f96d2ee97c2d07a5a0633c4b6b9f8b41c71bb65a4ec48885d8b1d9c9fc3a6d29809416a060ac1e42481623c58c9567db6eea4cfab9dd946b9e58c4908b0f0a0aa66ef1472c1d18d936abe521fb1b7bad971974c4ca491aeffbef8c9b61afad22152ab2e945addb70c7dcc83ceacb603403d75d00fbef898109a966bf5e5ebcc0561e1bbc5ccd9361177d40ce80c9beea5dc51714fa974c6e459744b71b43f84141b0e170616a1cc3135076847afffb592cd99233e946afb524a6cb0297d1696880ce827abf3f532f3df15e5c31c9c02929b8f41c00f2be7b5ce6136f38fb8dcf6a89fc24088f5a86b8fdb1b8779ca0d1a869dbaffae2f1cb21d74a8e4561ef603f77a6dd80b9ec8850c624c1f478df3413bf6702b12a7d52089f8d27094d1f4b8fa0a144fb6c39c8473e61c2920010b27c3778fcffd088495997ab9ed9ad008202675060f01cbd4c5f5fa9261a573bc7e1842700a5ed943852bea6f931e97a96043661fb6d8bd7b7a06b89ea3aa79b156484975bfa0d04a06ab5a2d8232b3b181138414d3b17d685efe5cff981067f7d18f1ee9981dd7cc890a582d3657d9e755350f0b09ff09865a6fe81534114ecb58e1e9c4d04d9f9ad2488cb48706441473642760d5d3f824104a340480659c38851bdab70693e1b17d6aaf80b206030db1a31af7d04d8ddb3197658dc9fd319a8e133fea8cb118c78176a3aca7f3f5d648238b2849fc5a9f29c495882834232fcedf2ed2314278fd87edcc30b4c9b9294695052873d045623b42f82b751471e57dafe0c28bcea84b679a0ed08faa3a0e46d8ed6f524f4230d529ed4e49657233566f40bd2d9fb1157a17720949dd2be2525007da33dbd9334ab9efa0288bd2b41b1ca90b0c", 0x1000}}, 0x1006) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:55 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x600, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:55 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:55 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000201000000090400000102080000052406000105240000200d240f0100000000000000000006241a00000009050904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:55 executing program 0: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x42500, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) flock(r0, 0x6) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) ptrace$cont(0x11, r2, 0x0, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000240)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xade8, 0x9, 0x6, 0xffff, 0x2, "c86a07908573c933557bfb5c53f57f03457f69", 0x3d6f, 0x5c4}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe27a}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000280)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1174.821654][T28048] usb 1-1: Product: syz [ 1174.832903][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1174.837962][T28048] usb 1-1: Manufacturer: syz [ 1174.841943][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.889830][T28048] usb 1-1: SerialNumber: syz 10:04:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x42002) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) uname(&(0x7f0000000140)=""/221) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:56 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x8, 0x202c00) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x52000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000012da27431f7f360f0052a05e796fd5a90ae873bdbe9e189811d408cda4ebd73ef135725d08ced88fa363b1fdb7ae0c928b0135c299323981890387029db18e3002a9df00021580982669901a083dd400ab432b9863835e75af97213dec9a337cfb644e0ea2f41dd3ddc497a7524d9390ac473900452427ad81aea0950c102051df8519b3c05d7d262c44e3bc51efa6a23ac536979726b176a560c7e12247ee20309b2192d2c1c7a28bb3b6dff24ac0f244d823ab4b653ae79b5268f77b13a2fbe3b2f867a4c0e472b7229ca911abf4ed2f4fa9ba11d46b8c7bb3094baa00"/241, @ANYRES16=r2, @ANYBLOB="200000000000fedbdf25010000002c00018014000200687372300000000000000000000000001400020073797a6b616c6c657230000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x410800, 0x0) flock(r3, 0x6) recvfrom$inet6(r3, &(0x7f00000002c0)=""/104, 0x68, 0xe0012002, &(0x7f0000000340)={0xa, 0x4e22, 0x3, @private0, 0x8}, 0x1c) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xa, &(0x7f0000001ac0)={&(0x7f0000000440)={0x5c, r2, 0x204, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x34}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000001180)={0x4e0, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x248, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "c4e26814a3b7b77689cbb593037a1005601249d8cd8890320c0d25b99ba2fd18690d0c33e6a1ef3df238800296ceeaf94d166c736a21e64079807ceb7ed7108f64162bb7b49ed0bc5b7c804022a6dad3bc89709b3f1d04e6bf5d56d4ad9be8d776f088d36d075794b7ff8e1fb3b4e28def0cdd8c836de6e459e5c87be0f032bcaacead14eefbd3552f58bf2c9f91c2d905932b19689411"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "a97c026ea8af0b68f3b45e1c3561c7327758d0497e3c255754921fd19bff02cfb1809421aeb19cb6fa573737c987d1e7fc00a94e075c56b3a590c1740b8d49de0f33fd1af69467b18088c11314200fb7d814"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/\',@[{\xed\'+/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4d}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffc0}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-F\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{*'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-/]/\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{*\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x182}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "4f571457d94342b8562e794c966c6463a0f67f4a7e94627e7f94761a49bc81a30a04eba95cb8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xac2c}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "64fe9f944ba20847f848afb427ce2984aea0981f36346ea17681d71d5fde3f624472b247f33ae9ab84dc93b7e6011dce729691be1b18b8030e0e3c723a25df226201de365650b5b025c00824d35e386b0dfd27f800ca080ffd699b91e62f92d2c0f282a280b3686a3354ddac04ebd4e63c52083b3019b8b69e90971636636cf0a16509b1ed161887fe154238832ef4f0ab76722b29967e4bf7c853da0ee5c49aa230986890d90d93ba7d77a463d5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "42cafd682673f3b8df182445093d0257e67efee1ff75cd0ff65760e0ba152c6685a69a780f73f687c3419fa26db553a241f9bd4c411a59e240c21f5036ab327da039796eec391facc76caf5b8d894638cdf5cc7cf350ce496969cdfa9e73f9364f1e42959db9fa2c9579cdfc53cf5e3fd583affa154267263a98e2b37888c0235807beebf98c596d0b5fda88d4fdecf6fe5ec863c3459c34c39b575b5ab3b764f5868bdda43e92ea967f03a9428f95218592"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '{%+$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff2f}]}]}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "e88d6a96689e708a48a97b5a58e69f5e988c51bcdfeff75f4a5b851c9343518d329ce6d4d4e9b210f64116959956581c8b45d2474771edaeb29bca79a52addc0ee780e63a821a7a863b6a901c840b7b368f08980dc0d8c578d00b29c53185f8fd9479a7f40f329b23dffffd76684058e25dcc7af0eb16b3366e7ede13b9578029affd8324670c91dfa08231f04b05689ff9ac35024689a538008e328d399546743aace44d848ab70dae70bc574e6c40b58200fdcf073cac7cf16bf231f95b91b9d6306657fe28678ed7e8af566d2df11543578bf4f6c64e8c74b9dd9e648062ff6fc928945ab940245ba0490a7a7923a733358"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x77, 0x5, "ec8cb099edefd70b653ba3f29a25b8fdd713c3a991a4677f80816d5fe066869ab399746c87944688ca60216a561774963896df18eaba9a0bda4862902d6f51bca0b52301e3ee89b966aaf9de85512318a04fb0bfaa084bfd1b3d9d1982a1ceb2cbfb83f57d5e2e6d933c8788eb7261f227cd00"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7d5a}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x40801}, 0x80) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r5, 0x6) write$P9_RRENAMEAT(r5, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1174.941241][T19948] input: syz0 as /devices/virtual/input/input487 10:04:56 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x2], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:56 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x700, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1174.943762][T28048] usb 1-1: can't set config #1, error -71 [ 1174.945610][T28048] usb 1-1: USB disconnect, device number 126 [ 1174.956557][ T3791] usb 6-1: Product: syz [ 1174.956574][ T3791] usb 6-1: Manufacturer: syz [ 1174.982929][ T3791] usb 6-1: can't set config #1, error -71 [ 1174.984704][ T3791] usb 6-1: USB disconnect, device number 109 [ 1175.264994][T19979] input: syz0 as /devices/virtual/input/input489 10:04:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {0x1, 0x7, 0x9fb2, 0x6}, 0xc, [0xb433, 0x8, 0x6, 0x46, 0x0, 0x2, 0x3f, 0x8, 0x0, 0x100, 0x0, 0x80, 0x6, 0x7, 0xde6, 0x0, 0xfba9, 0xc00, 0x7, 0x1000, 0xffff7fff, 0x401, 0x9, 0x7d91, 0x2, 0x0, 0x0, 0x1b41, 0x0, 0x0, 0x2, 0x7fff, 0x1, 0x7, 0x7, 0x1, 0xd31d, 0x6, 0xffffffff, 0x8, 0x3f, 0x7f, 0x2, 0x200, 0x5, 0x9, 0x1000, 0xfffffffa, 0x2831015a, 0x0, 0x400, 0x2, 0x9, 0x10000, 0x1f, 0x1, 0x0, 0x10001, 0x80000001, 0x83f5, 0xfffffff7, 0x4, 0xc13, 0xfff], [0x67c, 0x8000, 0x100, 0x7, 0x32e, 0x5, 0x7fffffff, 0x7ff, 0x1, 0xffff8000, 0x81, 0x1, 0x3, 0xfffffc00, 0x1e83e3a2, 0x2, 0x8000, 0x2d0, 0x7, 0x1000, 0x8, 0x3f, 0x8, 0x1f, 0x9, 0x40, 0x20, 0x9, 0x40, 0x6, 0x6, 0x0, 0x2, 0x5, 0xfffffff8, 0x8, 0x7, 0x3, 0x8001, 0x80000000, 0xffffffff, 0x0, 0x3, 0x2, 0xd74, 0x3ec2fa40, 0xa7e, 0x5, 0xc4d5, 0x7fff, 0xf7eb, 0x7f, 0x0, 0x8, 0x62, 0x6, 0x136, 0x8, 0xe75, 0x8, 0x7ff, 0x0, 0xff, 0x7], [0x2, 0x80000001, 0xa414, 0x6, 0x62f, 0x2, 0x1, 0x81, 0xffffffff, 0xffff, 0xbf19, 0xddf6, 0x10000, 0x80000001, 0x7, 0x9, 0x1f, 0x7, 0xa4, 0x4, 0x3, 0x8, 0x0, 0x7fffffff, 0x2, 0x0, 0x1010, 0x7, 0xffffff81, 0x800000, 0x1f, 0x2, 0x6, 0x3, 0xf4a0, 0x0, 0x1, 0x0, 0x98e, 0x2, 0x5, 0x10001, 0x3, 0x42, 0x3edebdde, 0x7, 0x9, 0x7, 0x0, 0xc2d, 0x8, 0x40000000, 0x6, 0xa0000000, 0xac, 0xb4, 0x400, 0x4ce, 0x3, 0x5, 0x4, 0x1f, 0xffff7fff, 0x6], [0x3, 0xa503, 0xffffe312, 0xfffffffa, 0x1, 0x7, 0x6, 0xffffffe0, 0x1, 0x7, 0x80000000, 0x7f, 0x1, 0xfffffffa, 0x400, 0x2, 0x5e85bbb9, 0x3, 0x1, 0x8, 0xb5e, 0x8, 0x5e1, 0x6, 0x719, 0x5, 0x6, 0x8000, 0x3, 0x6, 0x3f, 0x3, 0x1, 0x3, 0x1, 0x0, 0xfc000, 0x7fffffff, 0x3, 0x5, 0x800, 0xfffffffe, 0x21, 0x3, 0x9, 0x3ff, 0x4, 0xe14, 0x4, 0x401, 0x7f, 0x5, 0x7, 0x4, 0xffff7fff, 0x7fff, 0x7fffffff, 0x0, 0x3, 0x100, 0x2, 0x1, 0x2, 0x2]}, 0x45c) flock(r1, 0x6) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x21000, 0x4) [ 1175.402625][ T3791] usb 6-1: new high-speed USB device number 110 using dummy_hcd 10:04:56 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x3f00, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4608, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x116) flock(r1, 0x6) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x9a5, 0x7}, 'syz0\x00', 0x13}) [ 1175.447726][T19993] input: syz0 as /devices/virtual/input/input491 [ 1175.502581][T30884] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1175.511189][T19998] input: syz0 as /devices/virtual/input/input492 [ 1175.662959][T20012] input: syz0 as /devices/virtual/input/input493 [ 1175.672821][ T3791] usb 6-1: Using ep0 maxpacket: 8 10:04:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/199) 10:04:57 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x3], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1175.739747][T20019] input: syz0 as /devices/virtual/input/input494 [ 1175.743282][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1175.823786][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.823806][ T3791] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1175.863282][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.863330][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.863362][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1175.863383][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1175.899729][T20026] input: syz0 as /devices/virtual/input/input495 [ 1175.949178][T20032] input: syz0 as /devices/virtual/input/input496 [ 1175.993716][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1176.027665][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1176.129381][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.132157][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.168185][T30884] usb 1-1: Product: syz [ 1176.182544][T30884] usb 1-1: Manufacturer: syz [ 1176.182932][ T3791] usb 6-1: Product: syz [ 1176.187191][T30884] usb 1-1: SerialNumber: syz [ 1176.201413][ T3791] usb 6-1: Manufacturer: syz [ 1176.215248][ T3791] usb 6-1: SerialNumber: syz [ 1177.353096][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1177.372699][T30884] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1177.393717][T30884] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1177.412463][T30884] usb 1-1: USB disconnect, device number 127 10:04:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x460f, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:04:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x6, 0x0, 0x7f, 0x1}, 'syz0\x00', 0x3b}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0xfff, 0x8, 0x3ff, 0x1}, 0x3, [0x7ff, 0x884, 0x6, 0x8001, 0x81, 0x6, 0x8001, 0x1, 0x3, 0x200, 0x0, 0x0, 0x9, 0x1000000, 0x1, 0x1, 0xffffff98, 0x6, 0x9, 0xff, 0x4, 0x1, 0x7ff, 0x7000000, 0x7, 0x6, 0x9, 0xa0000000, 0x5, 0x0, 0x98f, 0x7, 0xdf8, 0x9, 0x4, 0xffffffff, 0x100, 0x2, 0x80000001, 0x4, 0x2, 0x3, 0x9, 0x0, 0xffffffe1, 0x8, 0x2, 0x5, 0x100, 0x1000, 0xcf, 0x7ff, 0xc1ee, 0x2b, 0xe233, 0x5, 0x6, 0x45, 0x1, 0x8, 0x0, 0xe4e, 0x3f, 0xc5], [0x9, 0x20, 0x9, 0x4, 0x0, 0x1, 0x4, 0x3b23, 0x9, 0x1, 0x1, 0xc18c, 0x7, 0x14, 0x80000001, 0x3, 0x9, 0x80000000, 0x8, 0x4, 0x10001, 0x80, 0x7aab, 0x4, 0x80000000, 0x9, 0x4, 0x3, 0x6b, 0x706, 0x0, 0x1, 0xac43, 0xfffffff9, 0x80, 0x7ff, 0x744, 0xffff, 0x8a5, 0x1, 0xbafa, 0xffffffff, 0x7, 0x3f, 0x10000, 0x2, 0x6, 0x4, 0x7, 0x6, 0x1, 0x145, 0x5, 0x2, 0x0, 0x157c, 0xffff36ee, 0xff, 0x6, 0x10000, 0xfffffffe, 0x9, 0x1, 0x51b], [0xfffff72a, 0xfffffe00, 0x3, 0x6, 0x2, 0xfff, 0x2, 0x3f, 0x81, 0x4, 0xffff, 0x2, 0x0, 0x7, 0xaf0, 0x5, 0x1, 0x8, 0x0, 0x3, 0x0, 0x6, 0x7f, 0x1f, 0x1, 0x0, 0xba31, 0x8, 0x9, 0x9, 0x6, 0x3, 0x9, 0x7, 0x7ff, 0x7, 0x66, 0xffff, 0x7, 0x8, 0x4, 0x2, 0x7, 0x80000001, 0x4, 0x2, 0x4, 0x44b9, 0xffff4342, 0x74, 0x1, 0x1000, 0x1000, 0x3f, 0x3, 0x8001, 0x3f, 0x4, 0x67, 0x2, 0x3, 0x9, 0x6, 0x1000], [0xde, 0x0, 0x0, 0x1, 0x8b7, 0x9, 0x6, 0x2, 0x9, 0x6, 0x8ba, 0x3f, 0x3, 0x7, 0x7f, 0x5, 0x5, 0x2, 0xb85, 0xe72, 0xe, 0x8, 0x7, 0x8001, 0x5, 0x8, 0x7fffffff, 0x5, 0x7, 0x1, 0x20, 0x9, 0x9, 0x1, 0x12, 0x0, 0x8, 0xffff, 0x10001, 0x9, 0x7d618e6a, 0x3cad, 0x7ff, 0x3ff, 0x400, 0x9, 0x101, 0x7, 0x23d, 0x5, 0xc0a4, 0x8, 0x80000000, 0x4a50, 0x5, 0x5, 0x9e, 0x2, 0x7fff, 0x45f2ae05, 0x9, 0x2000, 0x3, 0xfffffff7]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:04:59 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0xff00, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1177.960132][ T3791] usb 6-1: USB disconnect, device number 110 [ 1178.053620][T20074] input: syz0 as /devices/virtual/input/input497 [ 1178.106186][T30884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1178.109082][T20082] input: syz0 as /devices/virtual/input/input498 [ 1178.342392][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1178.462493][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.477220][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.516286][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1178.531019][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:04:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000040)={0x20, 0x22, 0xb3, {0xb3, 0x23, "55e87670e8d087a72b3744b2857a80d6455a639afb2a0bc9022798042db1bc702dce2e00074dd9433bf694dc20d86f8e922ba2a37d53b253cc7d464fc586a7baebb831878d34f2578609bd966e66dad58d824206d7bb7497e8124d6f0b9b3ae93ee50d8fffdc4244792b86c988c28906cbd67f03f63f0ff34714d25e02556b2d34b90f58f2047aabaf25d8651f668f2876b922e024f39c6affba356cb4cfa4f77343e9601be0d30f9b83438409c4b1dc2b"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x24, &(0x7f00000002c0)={0x20, 0x3, 0x9a, "f567dfbc7a8d05b54a17960eab3664041cf669729522c235a082cb8c7fcdfd16f472d82c225fe630db17b4b74366ec02131059c840cec65bf95063c8e712bd8c91d8c14a2fccdc78cc68d444c41d727ad5d1b5cc8c52d15d94460681c887be45c1757bc971441bfcc0c1f7808918c50276a89343a5a8c0f1fdf1e104fb33771e04044a5f464347ab2e713b581df6cda3134adcb0d896cf7d32ae"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x6, 0xdc71, 0xffff, 0x1ff, 0x7fff, 0x8, 0x1f, 0x3ff, 0x8, 0xffff, 0x5, 0x40}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0xcd1c}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:04:59 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x4], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:59 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x3, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "afeec7a4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0xfff7, 0x0, 0x80}, {0x6, 0x24, 0x1a, 0x5, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x61, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb4, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x1, 0x3f}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x8, 0x1f, 0x20, 0x9}, 0x108, &(0x7f0000000280)={0x5, 0xf, 0x108, 0x4, [@generic={0x5d, 0x10, 0xa, "913415363b4d2f9db02114342e7fb7b49dfc4ed4d4c69666fe2f83ec2b7742eb124100c472b7ca8202992077bc47cf276e80478b2ca79e6477849a16fa6658dbac064d8a97eedd0af48ffeb94a22573f40efdb4f1beb0a33d836"}, @generic={0x95, 0x10, 0x4, "dffc2d7d62f14c9dc70dc979ab2b24cad91054c91f7e06e5d1411644b2b21a826ac84d22c47da563296131cc5664e391c88fef31e93daa875a302f895a348e649f953bb87404a40866d9db4ea82a293564aa32d471a63b5b06301df2f0b26b8a0182a04137350471adf6a3c3f752dd40dcb25b6943accd6171f48560f70d60534dc760f7f3e0199f1d70e658df158594d28c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x3, 0x4}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x426}}]}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001880)='cpuacct.stat\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={r6, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000018c0)=@assoc_value={r6, 0x6}, 0x8) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1178.712365][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1178.721428][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.748151][T30884] usb 1-1: Product: syz [ 1178.753376][T30884] usb 1-1: Manufacturer: syz [ 1178.758011][T30884] usb 1-1: SerialNumber: syz 10:04:59 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x1000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:04:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x1a, 0x23, 0x10, 0x9, 0x1, 0xfffffffe, 0x2, 0x14d}) 10:04:59 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4610, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1178.802360][T30884] usb 1-1: can't set config #1, error -71 [ 1178.836292][T30884] usb 1-1: USB disconnect, device number 2 10:05:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x1}, 0x16, 0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:05:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x2000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:00 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x5], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1178.869469][T20102] input: syz0 as /devices/virtual/input/input499 [ 1179.071201][T20123] input: syz0 as /devices/virtual/input/input501 10:05:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') sendfile(r2, r3, 0x0, 0x29a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}}, 0x10080) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x1c, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1179.132192][ T3791] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1179.235742][T20135] input: syz0 as /devices/virtual/input/input503 10:05:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000100)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x305480) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz1\x00', {0x0, 0x8, 0x8, 0x7}, 0x34, [0x3, 0x8, 0x1, 0x2, 0x3, 0xfffffffc, 0x2, 0x80000001, 0x200, 0x401, 0x4, 0x101, 0x40, 0x800, 0x50b, 0x8d8, 0xa7e8, 0xd5f, 0x1b6, 0xa8, 0x7, 0x6, 0x400, 0x633, 0x7, 0xffffff00, 0x3, 0x400, 0x1, 0x8d2f, 0x80000001, 0x8, 0x7, 0x70, 0x1ff, 0x1, 0x80000001, 0x3, 0x1, 0x10000, 0x7fff, 0x9, 0x0, 0x2, 0x8, 0x9, 0x3, 0x2, 0xed, 0x2, 0x81, 0x4, 0x9, 0x1, 0x435, 0x20, 0x81, 0x80000001, 0x8, 0x7, 0x20, 0x6, 0x1, 0x6], [0x7, 0x83c, 0x3, 0x0, 0x401, 0x3, 0x1, 0x8, 0x3ff, 0x0, 0x0, 0x3, 0x200, 0x6153, 0xc7, 0x1c000, 0xc47f, 0x10000, 0xc1, 0xbc6d, 0x8, 0x8, 0x400, 0x5, 0x6, 0x7fffffff, 0x1f, 0x4, 0x8001, 0x401, 0x5, 0x55, 0x3ff, 0x3f, 0x101, 0x5, 0x98, 0x9, 0x8, 0x6, 0x0, 0x53d, 0x3, 0x3, 0x1, 0x400, 0x7ff, 0x1000, 0xf2a0, 0x3f, 0x7, 0xfff, 0xa18, 0x1, 0x2a9, 0x1f, 0x80, 0x4, 0x400, 0x1, 0xffff8000, 0x401, 0x7fffffff, 0x9], [0x0, 0x8, 0x4, 0x1ff, 0x4, 0x5, 0x5, 0x4, 0x7, 0xfffffe00, 0x5, 0x5, 0x401, 0xfffffffe, 0x0, 0x2, 0x48e, 0x200, 0x1, 0x2, 0x1, 0x1000, 0xffffffff, 0x2, 0x5, 0x1, 0x80000001, 0xfffffff9, 0x1, 0x361d, 0x1d5, 0x0, 0x101, 0x26bd, 0x0, 0x3, 0x9, 0x3, 0x28f, 0x5, 0x6fde8166, 0x3, 0x3, 0x4, 0xc3e, 0xe9b9, 0xc74a, 0x3, 0x9, 0x8001, 0x6, 0xa23, 0x6, 0x81, 0x800, 0x8, 0x3, 0x700000, 0x6, 0x4, 0x3, 0xa6, 0x29b5, 0x200], [0x3, 0x80, 0x1f, 0x2, 0x5, 0x99, 0x4, 0x7, 0x1, 0x2, 0x7f0, 0xbc3, 0x400000, 0xc7800000, 0x1, 0x8001, 0x1, 0x3, 0x9d, 0x7, 0x80000000, 0x0, 0x6, 0x800, 0x5, 0x80, 0x5, 0xca37, 0x6, 0x0, 0x10000, 0x100, 0x0, 0x7fff, 0x80000001, 0x20, 0xf851, 0x5, 0x90b8, 0x35c, 0x6, 0x101, 0x0, 0xff, 0x8001, 0xad, 0x0, 0x5, 0x7ff, 0x7fffffff, 0x1, 0x10000, 0xfffffff8, 0x2, 0x67da, 0x7b7, 0x6, 0x4, 0x7f, 0x6, 0xe2, 0xffffff81, 0x7f, 0x7f]}, 0x45c) [ 1179.282231][T30884] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1179.301298][T20143] input: syz0 as /devices/virtual/input/input504 10:05:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x3000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1179.422195][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1179.457037][T20150] input: syz0 as /devices/virtual/input/input505 [ 1179.503994][T20150] input: syz0 as /devices/virtual/input/input506 [ 1179.523146][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1179.642905][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.642954][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.642985][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.643009][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.802815][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1179.833907][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.841914][T30884] usb 1-1: Product: syz [ 1179.862131][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1179.867780][T30884] usb 1-1: Manufacturer: syz [ 1179.879920][T30884] usb 1-1: SerialNumber: syz [ 1180.142039][ T3791] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1180.422125][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1180.602133][T30884] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1180.609422][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1180.643494][T30884] cdc_ncm 1-1:1.1: bind() failure [ 1180.832188][ T3791] usb 6-1: device descriptor read/64, error 18 [ 1180.953360][ T3791] usb usb6-port1: attempt power cycle [ 1181.661934][ T3791] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1181.848121][ T3791] usb 6-1: device descriptor read/8, error -71 10:05:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) 10:05:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x6], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:02 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x4000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:02 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x109000, 0x0) write(r1, &(0x7f0000000080)="17ec04f1f0866fd4813522f481eb84e1cbd9918bc8ddce4e5650ae9eeb946834d47e943617adda4798edf554f6ba1e000157c65f54a4dd46bac81be6e73136ff6a81d79f3f4046", 0x47) 10:05:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xffffffff, 0x0, 0x0, 0x4, 0x80000000, 0x400}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000001c0)={0x7, 0x5, 0x7c00, 0x3ff, 0x5, 0x5}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = socket(0xb, 0x800, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000020c0)=ANY=[@ANYRES16=r3, @ANYBLOB="30012cbd700055"], 0x18}}, 0x8001) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000020c0)=ANY=[@ANYRES16=r5, @ANYBLOB="30012cbd700055"], 0x18}}, 0x8001) r6 = openat$cachefiles(0xffffff9c, &(0x7f0000001900)='/dev/cachefiles\x00', 0x20400, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000001b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4844}, 0x80) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x85) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x414, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER={0x150, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9ba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @local, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2c85}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35c29373}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x223}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb96}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "63785533e4604f13032589990b12345baaef0eaa9cd1"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "a84a97753fce6a5c8f6704df8af665a0154c0697d42b1c74"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a3814165ae299f7e5dc36525dc01dad4441a10bfc7272eca07b08d9c2afd39be5d4f33"}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) [ 1181.909183][T28417] usb 1-1: USB disconnect, device number 3 10:05:03 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x5000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1182.058197][T20195] input: syz0 as /devices/virtual/input/input507 [ 1182.092042][ T3791] usb 6-1: device descriptor read/8, error -71 [ 1182.133321][T20205] input: syz0 as /devices/virtual/input/input508 10:05:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r6, 0x3, {0x2, 0xff, 0x1}}, 0x18) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x7, 0x0, 0xfffe}, 'syz0\x00', 0x2d}) r7 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r7, 0x6) ioctl$ASHMEM_GET_NAME(r7, 0x81007702, &(0x7f00000000c0)=""/35) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:05:03 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x6000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1182.347519][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:05:03 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x7], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1182.415519][T20216] input: syz0 as /devices/virtual/input/input509 10:05:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x3, {0x0, 0x8, 0x1, 0x2, 0x0, 0x9}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1182.488609][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1182.610457][ T3791] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1182.712042][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1182.765600][T20239] input: syz0 as /devices/virtual/input/input511 [ 1182.839985][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.862998][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:05:04 executing program 0: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r0, 0x6) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000240)=""/253) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/263], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000bc0)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f00000008c0)={{0x9, 0x6, 0x81, 0x0, '\x00', 0x7}, 0x1, [0x8, 0x56, 0x5659, 0x9, 0x5, 0x7f, 0x8, 0x84e4, 0x3, 0x92, 0x4e16, 0x5, 0x6, 0xffffffff, 0xfff, 0x0, 0x5, 0x7, 0x6, 0x81, 0x3, 0x9, 0x80000000, 0x74f, 0x3, 0x6, 0x789, 0x0, 0x92e00000, 0x8, 0x0, 0x80, 0x2a6, 0xc0000, 0xe9f6, 0x1ff, 0x401, 0x0, 0x1, 0x0, 0x0, 0xdc9a, 0x2, 0x7, 0x7f, 0x77a6bf6, 0xfffff85c, 0x5, 0x1, 0x2, 0x3, 0x4, 0x6, 0x2da, 0xfffffffa, 0xfffffff9, 0x400, 0x1000, 0x2, 0x7fffffff, 0xffff, 0x8, 0x0, 0x1ff, 0x8000, 0x5, 0x4, 0x0, 0x4, 0x3, 0xc1, 0x3, 0x6, 0x7, 0x20, 0x80, 0x7, 0x5, 0x8000, 0x401, 0x2, 0x4, 0x6, 0x6, 0x2, 0x6, 0x80000000, 0x3, 0x8001, 0x5, 0x4a90, 0x6, 0xfff, 0x1e275c, 0x6, 0x1, 0x1, 0x7f, 0x6, 0x395, 0x3f, 0x7fffffff, 0x0, 0x40, 0xd4, 0x1c0, 0x4, 0x6c70, 0x75, 0x0, 0x3, 0x1000, 0x80000000, 0x8000, 0x8001, 0xc55, 0x1ff2, 0x7fff, 0x2226, 0x7, 0x7, 0xb696, 0x7f, 0x81, 0x80000001, 0xffffff79, 0xd4d4, 0x100]}) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x135) flock(r4, 0x6) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]}) r5 = syz_usb_connect(0x6, 0x2ba, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xd1, 0xe1, 0x10, 0x8, 0x1e2d, 0x4a, 0x31ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a8, 0x1, 0x72, 0x0, 0x68, 0x0, [{{0x9, 0x4, 0xf9, 0x9, 0xe, 0x18, 0xff, 0xdd, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0xfc}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x80, '7'}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x2, 0x6, 0x7, 0x7], 0x81}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x9, 0x3}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x1f, "f5d7"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x2, 0x3, 0xf3}]}, @hid_hid={0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xbd2}}], [{{0x9, 0x5, 0x7, 0x10, 0x400, 0x2, 0xb0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7ff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0xcb, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x93, 0x165}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x8000}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x7, 0x8, 0x80, [@generic={0x3c, 0x24, "ce2c07f6e3251387fc156f3e4b1217080d92053aacc317bb3e85b63deacd342b2eb2398d5a997b9ac968f0e03e695ed250f8a6230ec149d04492"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0xfa, 0x3f, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x4, 0x5, 0x80, [@generic={0x6c, 0x23, "2dbe0344cfafeee1b32114c691deb032c593af50b264005ce743625964325ff520dcef1250f1e8244416df1fa4a644c3ec8814d9e0d5ba6d8fe67192bd8e677aaed0108e8f2265d0698598a9441679a6cee6f30c53bef87011b01ebc49dcecb06a97fa2537b1414ccb6d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xe6, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1f}, @generic={0x70, 0x22, "ec65527f25f91bb7ed1fbc78c76e8d8647255015a3667ba9b725e99ff9bf42bb70399b97148e348a16cf254df5f058323735a4aa313962dda5fcc7915c1b0a5366dc414f4bd91615eaddc998610e0e8f247b7d46341f1d8a1b3a1be8943d4e525d4ceb3b8438e5640972b64c5911"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x6, 0x72, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1000}, @generic={0x17, 0x30, "1058cd0a3998eefb8e3394a7b33e4fdad64e5c1958"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x6, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xae}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x4, 0x1f, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x1, 0x8, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xeb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x3, 0x1f, 0x7f, [@generic={0x63, 0x9, "adec696d4d81143e1c65853b78af18a290de88422e06a238e183f7ff272810b5d57175047910f2ee1a0e067c55ec06a1314d00bdf2e8bfbdc811daf98fe83d1bd90d6316d8bb59331f6013d3e2ec422e546fad2ade3e32bf7bbba98094130a4866"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x20, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x2}]}}, {{0x9, 0x5, 0xd, 0xc1b49098cb222c03, 0x10, 0x8, 0x20, 0x49}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0xc4, 0x81, 0xb0, 0x40, 0x80}, 0x32, &(0x7f00000006c0)={0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x6, 0x2, 0x2, 0x94}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "1e7dc2383acb517aaabc1ddbdf25cc4a"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9a, 0x80, 0x3, 0x3f, 0x9}, @ptm_cap={0x3}]}, 0x3, [{0xf3, &(0x7f0000000700)=@string={0xf3, 0x3, "22daad7bbb6edab2e8ad17b1856e2036c6fd354b80fea5bf12c17f28d8a1f4ca304beaacc03f51cdf850b5fe122e50493dba629e3ae47b3c4a40c0c5c627faadf0f4dc7273b60d5777419f4c9aa4c6200409fc2c671c89f60d319699bed07c5c82c1ab8a74580b2087af26148edf78e5c27624a0ec7c9de5ef9aa732233d6c9803707eda3bbf8eba0ab5525690361de0798f6be329230f15501b1b63cdf3e0c9e47795fd316b7eb92070f186cd9a8d7bfc06b5ed76aedc643e7e075b8308f8a0f06e2c354e295d00826afd5f4abc25d142d3b3ba74f8fc32d476e9661d30df4aa2d1c510f8a2289bc00b50366ab215a80f"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 10:05:04 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x7000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:04 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x8], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1182.897421][T20246] input: syz0 as /devices/virtual/input/input512 10:05:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$userio(0xffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0xc000, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) pidfd_send_signal(r2, 0x37, &(0x7f0000000140)={0x4, 0x8, 0xdb}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40246608, &(0x7f0000000100)={0x7, 0x2, 0x5, 0x6, 0x7, 0x5}) [ 1183.072721][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.072742][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.072757][ T3791] usb 6-1: Product: syz [ 1183.072771][ T3791] usb 6-1: Manufacturer: syz [ 1183.072786][ T3791] usb 6-1: SerialNumber: syz [ 1183.159060][T20266] input: syz1 as /devices/virtual/input/input513 [ 1183.230681][T20272] input: syz1 as /devices/virtual/input/input514 [ 1183.361871][T30884] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1183.601786][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1183.721864][T30884] usb 1-1: config 1 has an invalid interface number: 4 but max is 1 [ 1183.729875][T30884] usb 1-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 1183.747949][T30884] usb 1-1: config 1 has no interface number 1 [ 1183.756023][T30884] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 1183.931851][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.940905][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.975305][T30884] usb 1-1: Product: syz [ 1183.979488][T30884] usb 1-1: Manufacturer: syz [ 1183.986487][T30884] usb 1-1: SerialNumber: syz [ 1184.042749][T30884] cdc_ncm 1-1:1.0: skipping garbage [ 1184.048013][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1184.211833][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1184.230332][ T3791] usb 6-1: USB disconnect, device number 114 [ 1184.352401][T30884] cdc_ncm 1-1:1.4: skipping garbage [ 1184.357662][T30884] cdc_ncm 1-1:1.4: bind() failure [ 1184.391962][T30884] usb 1-1: USB disconnect, device number 4 [ 1184.971706][T30884] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1185.211599][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1185.332228][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.343319][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:05:06 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) fcntl$setsig(r1, 0xa, 0x16) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffe}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$autofs(0xffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x101000, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {0x9, 0x800, 0x3, 0x6}, 0x18, [0x7, 0x1000, 0x4, 0x7fff, 0x9, 0x7f, 0x6, 0x8, 0x8, 0x401, 0x0, 0x401, 0x20, 0x20, 0x1, 0xffffffff, 0x0, 0x7, 0x100, 0x16650d01, 0x0, 0x8, 0x2, 0x7, 0x2eaf, 0x4, 0x9, 0x8, 0x1, 0xff, 0xffffff92, 0x5, 0x7fffffff, 0x8, 0x7, 0xc473, 0x80, 0x6, 0x4, 0x0, 0x20, 0x2, 0x7, 0x7, 0x7, 0x8000, 0x80000000, 0x3f, 0x7, 0xfff, 0x5, 0x8001, 0x4, 0x5a71, 0x8, 0x6, 0x88, 0x29a, 0x40, 0x0, 0x80000000, 0x9, 0x69ae, 0x4], [0x557, 0x80000000, 0x4, 0xbb6, 0x1, 0x9, 0x400, 0x80000000, 0x6, 0xffff, 0x3, 0x4, 0x545ca152, 0x2, 0xca0, 0x8, 0x9, 0x39e3, 0x200, 0x100, 0x8c, 0x5, 0x1, 0x3, 0x2, 0x4, 0x0, 0x60, 0x1, 0x0, 0xfff, 0x5, 0x5, 0x5, 0x3, 0x7, 0x8001, 0x400, 0x10000, 0xfff, 0x4, 0x0, 0x7fff, 0x9, 0xd68f, 0x6, 0x6bb, 0x8, 0x1, 0x0, 0x0, 0xfa8, 0x6, 0x8, 0x2, 0x3, 0x1b3584da, 0x2, 0x2, 0x7, 0x9ea9, 0x10000, 0x1000], [0x9, 0x100, 0x1, 0x100, 0x7fffffff, 0x9, 0x5, 0x1, 0x6, 0x6, 0x1ff, 0x3bd, 0x7, 0x0, 0x3f, 0xffffffff, 0x2, 0xcedf, 0x3, 0x5, 0x7, 0x3, 0x5, 0x80000001, 0xff, 0x3, 0x1f, 0x2, 0x9, 0x20, 0xfffffff8, 0x7, 0x7, 0x7, 0x4c4c, 0xffffffff, 0x101, 0x9, 0x34f, 0x1, 0x6302, 0x2, 0x1, 0x0, 0x882, 0x66a7, 0x0, 0x1f, 0xfffffffa, 0x9, 0x7fffffff, 0x11, 0x0, 0x3, 0x5, 0x6, 0x2, 0x10001, 0x1d7, 0x5, 0x8, 0x6, 0x7f, 0x7f], [0x1, 0xff, 0x0, 0x3, 0x4c0, 0x200, 0x9, 0x6f, 0x9, 0x0, 0x3000000, 0x2, 0xffffffae, 0x0, 0x2, 0xa05e, 0x687, 0xa5a, 0x80000000, 0x10001, 0xfffff800, 0x6, 0x20, 0xe5, 0xf0, 0x2, 0x0, 0x1, 0x52, 0x5, 0x5, 0x9, 0x7ff, 0xfffffc01, 0x80000001, 0x3, 0xffffff7f, 0x7, 0x800, 0xfffffffb, 0x3, 0x9, 0x1, 0x2, 0x100, 0x8, 0x3, 0x6c9f, 0x7, 0x5, 0x8000, 0x9, 0x3, 0x9, 0x1, 0x1, 0x200, 0x7353159, 0x0, 0xfffffeff, 0x5, 0x4, 0x4000000, 0x7]}, 0x45c) 10:05:06 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x8000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:06 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:06 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x10], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000300)={0x0, 0x0, {0x6, 0x9, 0x8, 0x4}}) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101140, 0x0) flock(r4, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x1000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xfffffff9}}, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x8001551002, 0x0) flock(r5, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r7, 0x301}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0x20}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1185.551726][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.583933][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:05:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1185.619394][T20320] input: syz0 as /devices/virtual/input/input515 10:05:06 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x3f000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1185.628333][T30884] usb 6-1: Product: syz [ 1185.628350][T30884] usb 6-1: Manufacturer: syz [ 1185.663911][T30884] usb 6-1: can't set config #1, error -71 [ 1185.665620][T30884] usb 6-1: USB disconnect, device number 115 [ 1185.684174][T20320] input: syz0 as /devices/virtual/input/input516 10:05:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0xf617, 0x10001}) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x8010, 0xffffffffffffffff, 0x8) tkill(r4, 0x1d) ptrace$cont(0x11, r4, 0x0, 0x0) prlimit64(r4, 0xd, &(0x7f00000001c0)={0x3f}, &(0x7f0000000200)) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{0x0, 0xfffd}, 'syz0\x00', 0x1f}) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r5, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0f0866ba4100ecb9260a00000f32650fc79800800000410f01446650f30f093e360f01c4440f019800000000660fc7b4d045d4000064400f2023", 0x3a}], 0x1, 0x44, &(0x7f0000000180)=[@cstype0={0x4, 0x9}], 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1185.901657][ T3791] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1185.930823][T20353] input: syz0 as /devices/virtual/input/input517 10:05:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0xff000000, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1186.061528][T30884] usb 6-1: new high-speed USB device number 116 using dummy_hcd 10:05:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x80000, 0x3, 0x3}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:05:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x2, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1186.157537][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1186.282587][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.301472][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1186.321222][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.357941][T20370] input: syz0 as /devices/virtual/input/input520 [ 1186.391852][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1186.415222][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1186.419093][T20375] input: syz0 as /devices/virtual/input/input521 [ 1186.436605][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.454081][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.631556][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1186.632554][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1186.640617][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.655611][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.666548][T30884] usb 6-1: Product: syz [ 1186.670828][T30884] usb 6-1: Manufacturer: syz [ 1186.676202][T30884] usb 6-1: SerialNumber: syz [ 1186.707316][ T3791] usb 1-1: Product: syz [ 1186.714238][ T3791] usb 1-1: Manufacturer: syz [ 1186.718846][ T3791] usb 1-1: SerialNumber: syz [ 1187.811342][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1187.824730][T30884] usb 6-1: USB disconnect, device number 116 [ 1187.873029][ T3791] cdc_ncm 1-1:1.0: bind() failure [ 1187.901477][ T3791] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1187.931432][ T3791] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1187.940481][ T3791] usb 1-1: USB disconnect, device number 5 [ 1188.621329][T30884] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1188.731190][ T3791] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1188.861188][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1188.981168][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1188.981982][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.011277][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.123490][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.141381][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.154888][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:05:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x300], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) getegid() ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1189.167097][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.230722][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1189.257701][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:05:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x81, 0x200, 0x7, 0x100, 0x20, 0x101, 0x8, r5}, &(0x7f0000000100)=0x20) 10:05:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x5, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:10 executing program 3: mkdir(&(0x7f0000000240)='./bus\x00', 0x45) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x101, 0x202000) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x77, 0x3, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x4080) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000140)={{0x7, 0x0, @identifier="c2ebd1734174e41b3d9bf082b437d078"}, 0x58, 0x0, [], "a444a6dcff9738600e1b7ae2b8a4f8e9411c2ea68609c9e2e937faab7ea4c2504254eea109fa80d3ab8a5bae49c767d473f4d2ebc66a332b6a5428158cc3c54e272f8b61a92d55600428fe3da1d4fbe73a53bb782fd4f393"}) syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x7, 0x40000) keyctl$get_keyring_id(0x0, r3, 0xf7) flock(r1, 0x6) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000000c0)={0x49df, "e383590ba84bda425802a9cb3f9d9fc8d7ecdc2f5dd53dda7cff11fb248c6ba2", 0x8, 0x101, 0x8000, 0x4, 0x5}) 10:05:10 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000200000825050ce055325339a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) ptrace$cont(0x11, r2, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x2, &(0x7f0000000040)='$\x00'}, 0x30) r5 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) r7 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000004c0)={0x5b0, 0xfffffffffffffffe, 0x1, [{{0x4, 0x3, 0xfffffffffffffffe, 0x7, 0x7f, 0x8001, {0x5, 0xfffffffffffffffa, 0xb6ac, 0x6, 0x2, 0x5, 0x0, 0xe85, 0x0, 0xfffffff7, 0x5, 0x0, 0x0, 0x1, 0x1548}}, {0x1, 0x100, 0x0, 0x20}}, {{0x5, 0x3, 0x0, 0x81, 0x8, 0x4, {0x6, 0x1, 0x2, 0x5, 0x4, 0x2, 0x7, 0x401, 0x10000, 0x0, 0x8}}, {0x6, 0x8, 0x9, 0x1ff, 'hash:mac\x00'}}, {{0x4, 0x0, 0x7, 0x8, 0x4, 0xffffffff, {0x3, 0x0, 0x7ff, 0xffffffff, 0x0, 0x6, 0x5, 0x90, 0x0, 0x3, 0x4, 0x0, 0x0, 0xf285}}, {0x5, 0xae7, 0x9, 0x7, 'hash:mac\x00'}}, {{0x3, 0x1, 0x0, 0x2, 0x64, 0x3, {0x2, 0x1, 0x5, 0x1, 0x5, 0x10001, 0xff, 0x33, 0x1000, 0x4abb090a, 0x3ff, 0x0, 0x0, 0xba9, 0xfffffffa}}, {0x5, 0x6, 0x5, 0xcfe9, '&{}^&'}}, {{0x2, 0x1, 0x6, 0x1, 0x567f, 0x8, {0x6, 0x9, 0x200, 0x3, 0x200000000, 0xcd10, 0x80, 0x1, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x2337, 0xffffffff}}, {0x0, 0x0, 0x5, 0x8, 'syz0\x00'}}, {{0x6, 0x0, 0x80, 0xff, 0x5, 0xffff, {0x2, 0x6, 0x9, 0xfffffffffffffff9, 0x6, 0x2, 0x7ff, 0xe6, 0x8a, 0x8, 0x7, 0xee01, 0x0, 0x1, 0xfffffff9}}, {0x4, 0x31b, 0x4, 0x8, '$)$-'}}, {{0x0, 0x0, 0x672e, 0x100000000, 0x0, 0x101, {0x1, 0x1ff, 0x3, 0x6, 0x7f, 0x4ab, 0x5, 0x6c3d, 0x0, 0x9, 0x1f, 0x0, 0x0, 0x44f9, 0x2}}, {0x3, 0x8, 0x5, 0x6, 'syz0\x00'}}, {{0x4, 0x3, 0x80000001, 0x8, 0xef, 0x9, {0x2, 0x1, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}}, {0x2, 0xffffffff, 0x2, 0x0, '|.'}}, {{0x0, 0x0, 0x0, 0x7, 0x0, 0x0, {0x3, 0x2da, 0x6, 0xe3, 0x9, 0x0, 0x6, 0x3, 0xd97, 0x3ff, 0x24, r6, r7, 0xb92, 0x3}}, {0x0, 0x4, 0x0, 0x5}}]}, 0x5b0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={r4, r5, r7}, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1189.295738][T20422] input: syz0 as /devices/virtual/input/input522 [ 1189.305855][T30884] usb 6-1: Product: syz [ 1189.305873][T30884] usb 6-1: Manufacturer: syz 10:05:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1189.331552][T30884] usb 6-1: can't set config #1, error -71 [ 1189.333228][T30884] usb 6-1: USB disconnect, device number 117 [ 1189.441235][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1189.441257][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.463162][ T3791] usb 1-1: can't set config #1, error -71 [ 1189.464441][ T3791] usb 1-1: USB disconnect, device number 6 [ 1189.641902][T20456] input: syz0 as /devices/virtual/input/input524 [ 1189.724795][T20456] input: syz0 as /devices/virtual/input/input525 10:05:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x4, 0x3f, 0x2, 0x4}, 0x33, [0x7, 0x4, 0x3f, 0x4, 0x0, 0xfffffff8, 0x8001, 0x26c, 0x9, 0x7, 0x40, 0x7, 0x3, 0x8, 0x0, 0x4, 0x4, 0x4, 0x7, 0x20, 0x1, 0xffff, 0x0, 0x5, 0x7, 0x2, 0x1, 0x4, 0x7, 0x10000, 0x8, 0x6, 0xffffffff, 0x6, 0x4, 0x5, 0xf65f, 0x101, 0x81, 0x400, 0x0, 0xe96, 0xfffffffc, 0x800, 0x0, 0x4, 0x5, 0x7, 0xfffffffc, 0x8000, 0x81, 0x0, 0x4, 0x80000001, 0x4, 0x1000, 0xffffffff, 0x2, 0x4, 0x1f, 0x40, 0x0, 0x7, 0x7], [0x7, 0x81, 0x3, 0x10001, 0x1ee2, 0x2, 0x2, 0x100, 0x1076a53d, 0xffffffff, 0x7ff, 0x3, 0x0, 0x2, 0x54619ee3, 0x4, 0x81, 0xd0, 0xd2d, 0x3, 0x8, 0x8001, 0x0, 0xed3, 0xff, 0x6, 0x80000001, 0x1ff, 0x6ad0, 0x12c0, 0x1, 0x40, 0x400, 0x4, 0x4, 0x1ff, 0xcf, 0x7, 0x1338, 0x1, 0x7e, 0x7, 0x6, 0x718, 0xb85, 0xff, 0x2a5, 0x0, 0x1, 0x0, 0xc4de, 0xfffffff8, 0x9, 0x2, 0x5, 0x3d5, 0x6b2, 0x4, 0x8, 0x10001, 0x5, 0x2, 0xffffffff, 0x800], [0x80000001, 0x80000000, 0x2, 0x1000, 0x7, 0x400, 0x4, 0x1, 0xfffff972, 0xfffffffb, 0x8, 0x1, 0x7a9, 0x0, 0x4, 0x1f, 0x8, 0x1, 0x7, 0x3, 0xa2, 0x6, 0xdbb, 0x5, 0x2, 0x6, 0x1000, 0x40, 0x5f, 0x7, 0x5, 0x1, 0x1, 0x6, 0x53, 0xcef, 0x2, 0x7, 0x1, 0x2ecd, 0x2, 0xa1, 0xfffffff9, 0x7, 0x8, 0x8e35, 0x3, 0xa7, 0xd70, 0x2, 0x20, 0x7f, 0x10001, 0x7b, 0x1, 0x80, 0x100, 0x2, 0x4, 0x1, 0x7, 0x2, 0x2, 0xd9dc], [0x1, 0x431, 0x5, 0x0, 0x7, 0x1, 0x9, 0x8000, 0x8, 0x8, 0xff, 0x3, 0x1f, 0x400, 0x4, 0x7, 0x5a, 0x7f, 0x4, 0x3, 0x3, 0x10000, 0xf10b, 0x200, 0x2, 0x1, 0xa0, 0x5, 0xffff, 0x1, 0x5ea, 0x8, 0x0, 0x6, 0x3, 0x7ff, 0x3, 0xde, 0x9, 0x4, 0x10000, 0x2, 0x4, 0x3f, 0x7725bb81, 0x3, 0x3, 0x20, 0x9, 0xff, 0x1, 0x9, 0x10001, 0x6, 0x92c, 0x0, 0x9, 0x7fffffff, 0x7, 0xd5, 0xb0, 0xffff0000, 0x5, 0xff]}, 0x45c) r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x12f080, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x20}, 0x4) r2 = socket$inet(0x2, 0x100000000805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@prinfo={0x14, 0x84, 0x5, {0x214}}], 0x14}], 0x1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0084320, &(0x7f0000000100)={0x599, &(0x7f00000000c0)="db71b89b3a4e4cd86772"}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)=0x2) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={r7, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) 10:05:11 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x500], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x6, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1189.851104][T28417] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1189.931087][ T3791] usb 1-1: new high-speed USB device number 7 using dummy_hcd 10:05:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1190.072483][T20473] input: syz0 as /devices/virtual/input/input526 [ 1190.091117][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1190.131776][T28417] usb 6-1: too many configurations: 164, using maximum allowed: 8 10:05:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x8, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1190.171908][ T3791] usb 1-1: Using ep0 maxpacket: 8 10:05:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x2}, 'syz0\x00', 0x41}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001266a02, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200) flock(r3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r3, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0x1, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) [ 1190.262082][T20486] input: syz0 as /devices/virtual/input/input527 [ 1190.268391][T28417] usb 6-1: unable to read config index 0 descriptor/start: -61 10:05:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5459, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1190.268415][T28417] usb 6-1: can't read configurations, error -61 [ 1190.301789][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.301840][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.301872][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1190.301893][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1190.411019][T28417] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1190.461796][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1190.461818][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.461834][ T3791] usb 1-1: Product: syz [ 1190.461850][ T3791] usb 1-1: Manufacturer: syz [ 1190.461864][ T3791] usb 1-1: SerialNumber: syz [ 1190.606402][T20504] input: syz0 as /devices/virtual/input/input528 [ 1190.681084][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1190.700928][T20509] input: syz0 as /devices/virtual/input/input529 [ 1190.773817][T28417] usb 6-1: too many configurations: 164, using maximum allowed: 8 [ 1190.891160][T28417] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1190.891181][T28417] usb 6-1: can't read configurations, error -61 [ 1190.891446][T28417] usb usb6-port1: attempt power cycle [ 1191.620927][T28417] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1191.682661][ T3791] cdc_ncm 1-1:1.0: bind() failure [ 1191.701184][ T3791] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1191.721035][ T3791] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1191.727646][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1191.745199][ T3791] usb 1-1: USB disconnect, device number 7 [ 1191.772381][T28417] usb 6-1: too many configurations: 164, using maximum allowed: 8 [ 1191.901782][T28417] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1191.909379][T28417] usb 6-1: can't read configurations, error -61 [ 1192.060902][T28417] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1192.171583][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1192.221520][T28417] usb 6-1: too many configurations: 164, using maximum allowed: 8 [ 1192.341185][T28417] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1192.348771][T28417] usb 6-1: can't read configurations, error -61 [ 1192.366939][T28417] usb usb6-port1: unable to enumerate USB device [ 1192.471001][T30884] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1192.710830][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1192.831543][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.841837][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.853175][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.864507][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:05:14 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x1f0, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5b92cd91bb72da2ce49c161ef647eb41683ec57e39e7"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "662ea12cdb869963ecbbbad0e514ac49d9d71d465405cdba8f31038096ffcad98d83dc"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e51d8837e86616422f2dac1a36f7ed8f645a9fdaa88ccdde4055ad782eb25dc69cf46c8d"}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa5be}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1c0000}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4010}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x80000000, 0x4, 0x401, 0x30f, 0x1a, "dc5a8f92d1768f2dc6394d6c7f8425f920b2e3"}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:14 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x600], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x10, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 10:05:14 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xfe}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') [ 1193.060993][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:05:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0xffffffff, 0x4}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1193.095473][T20543] input: syz0 as /devices/virtual/input/input530 10:05:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x300, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1193.103901][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.103919][T30884] usb 1-1: Product: syz [ 1193.103934][T30884] usb 1-1: Manufacturer: syz [ 1193.131000][T30884] usb 1-1: can't set config #1, error -71 [ 1193.132232][T30884] usb 1-1: USB disconnect, device number 8 [ 1193.381863][T28048] usb 6-1: new high-speed USB device number 122 using dummy_hcd 10:05:14 executing program 3: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r0, 0x6) write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0x0, 0x8}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r5, 0x6) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0x7, 0x4, 0x8, 0x878c}, 'syz0\x00', 0x4}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r6, 0x108, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000001) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1193.441212][T20568] input: syz0 as /devices/virtual/input/input532 [ 1193.506833][T20577] input: syz0 as /devices/virtual/input/input533 10:05:14 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x700], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1193.622106][T28048] usb 6-1: Using ep0 maxpacket: 8 [ 1193.631901][T30884] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1193.689165][T20589] input: syz0 as /devices/virtual/input/input534 [ 1193.741498][T28048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.741547][T28048] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:05:14 executing program 3: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r0, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x314, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x200, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x418}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x5, 0x0, 0x0, {0xd, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28ac828}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ffb6603}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64a5a346}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2aa56142}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2605c0d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64922c60}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14}}, 0x490}, 0x1, 0x0, 0x0, 0x20004840}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) [ 1193.881630][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1193.901595][T28048] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1193.901617][T28048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.901632][T28048] usb 6-1: Product: syz [ 1193.901648][T28048] usb 6-1: Manufacturer: syz [ 1193.901663][T28048] usb 6-1: SerialNumber: syz [ 1193.983523][T20602] input: syz0 as /devices/virtual/input/input536 [ 1194.019399][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.019447][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.019478][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.019499][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1194.146997][T20546] udc-core: couldn't find an available UDC or it's busy [ 1194.147021][T20546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1194.165956][T20602] input: syz0 as /devices/virtual/input/input537 [ 1194.179047][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1194.179544][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.179559][T30884] usb 1-1: Product: syz [ 1194.179572][T30884] usb 1-1: Manufacturer: syz [ 1194.179586][T30884] usb 1-1: SerialNumber: syz [ 1194.574777][T20546] udc-core: couldn't find an available UDC or it's busy [ 1194.581898][T20546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1194.610717][T28048] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1194.616783][T28048] cdc_ncm 6-1:1.0: bind() failure [ 1194.657221][T28048] cdc_ncm 6-1:1.1: bind() failure [ 1194.669638][T28048] usb 6-1: USB disconnect, device number 122 [ 1195.320741][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1195.370662][T30884] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1195.377252][T28048] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1195.390629][T30884] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1195.399857][T30884] usb 1-1: USB disconnect, device number 9 [ 1195.630504][T28048] usb 6-1: Using ep0 maxpacket: 8 [ 1195.750656][T28048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.770506][T28048] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.950676][T28048] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1195.970474][T28048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.978476][T28048] usb 6-1: Product: syz [ 1195.990453][T28048] usb 6-1: Manufacturer: syz [ 1195.995072][T28048] usb 6-1: SerialNumber: syz [ 1196.096704][ T3791] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1196.100702][T28048] usb 6-1: can't set config #1, error -71 [ 1196.118642][T28048] usb 6-1: USB disconnect, device number 123 [ 1196.362096][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1196.481108][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.494802][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.512086][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1196.529335][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:05:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) write$apparmor_exec(r3, &(0x7f0000000100)={'stack ', '/dev/uinput\x00'}, 0x12) 10:05:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x8912, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0xff00, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:17 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x3f00], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1196.702196][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1196.720547][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.728558][ T3791] usb 1-1: Product: syz 10:05:17 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00ee042406000105240000000d240fab750b1f9e02b0ea0100000000000000000006241a0000000905810340000000000904010000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r7 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r7, 0x6) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x7, 0x1f, 0x1, 0x7, 0x644, r1, 0x8, [], r6, r8, 0x5, 0x4, 0x5}, 0x40) syz_usb_control_io(r0, 0x0, 0x0) 10:05:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d0000090c010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x33fb}}}, &(0x7f0000000240)=0xbb) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={r6, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x1000}}, 0x2, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000240)=0x9c) r7 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r7, 0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x4}, 0x8) syz_usb_control_io(r0, 0x0, 0x0) [ 1196.754991][ T3791] usb 1-1: Manufacturer: syz [ 1196.767293][ T3791] usb 1-1: SerialNumber: syz [ 1196.812248][ T3791] usb 1-1: can't set config #1, error -71 [ 1196.838395][ T3791] usb 1-1: USB disconnect, device number 10 [ 1196.884710][T20667] input: syz0 as /devices/virtual/input/input538 [ 1196.988611][T20685] input: syz0 as /devices/virtual/input/input539 10:05:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:18 executing program 3: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r0, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@timestamp], 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) prlimit64(0x0, 0x4, &(0x7f0000000240)={0xffffffe1, 0x1000}, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x131440, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000300)={0x1, 0x2, 0x7}) flock(r2, 0x6) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xa5da}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000200)=0x4) 10:05:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0xff00], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1197.101070][T30884] usb 6-1: new high-speed USB device number 124 using dummy_hcd 10:05:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x8914, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1197.225430][T20694] input: syz0 as /devices/virtual/input/input540 10:05:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) write$apparmor_exec(r3, &(0x7f0000000100)={'stack ', '/dev/uinput\x00'}, 0x12) 10:05:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1197.289433][T20701] input: syz0 as /devices/virtual/input/input541 [ 1197.334503][ T3791] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1197.340468][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1197.463539][T30884] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1197.463560][T30884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1197.463600][T30884] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1197.580560][ T3791] usb 1-1: Using ep0 maxpacket: 8 10:05:18 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x10], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1197.590452][T20718] input: syz0 as /devices/virtual/input/input542 [ 1197.621107][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1197.621128][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.621142][T30884] usb 6-1: Product: syz [ 1197.621157][T30884] usb 6-1: Manufacturer: syz [ 1197.621170][T30884] usb 6-1: SerialNumber: syz [ 1197.715997][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.716049][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.716073][ T3791] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1197.917994][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1197.918014][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.918054][ T3791] usb 1-1: Product: syz [ 1197.918076][ T3791] usb 1-1: Manufacturer: syz 10:05:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x2], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1197.918091][ T3791] usb 1-1: SerialNumber: syz [ 1197.947156][T20661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1197.951539][ T3791] usb 1-1: selecting invalid altsetting 1 [ 1198.181319][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1198.183422][T30884] usb 6-1: USB disconnect, device number 124 10:05:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xff00, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1198.396298][ T3791] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1198.396347][ T3791] cdc_ncm 1-1:1.0: bind() failure [ 1198.398341][ T3791] cdc_ncm 1-1:1.1: skipping garbage [ 1198.398366][ T3791] cdc_ncm 1-1:1.1: bind() failure 10:05:19 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1198.940168][ T3791] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1199.210279][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1199.330937][ T3791] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1199.341455][ T3791] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1199.352063][ T3791] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1199.559564][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1199.574939][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.584667][ T3791] usb 6-1: Product: syz [ 1199.588871][ T3791] usb 6-1: Manufacturer: syz [ 1199.610139][ T3791] usb 6-1: SerialNumber: syz 10:05:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020400040e000000000000000000000005000600000000000a00000000000000ff02000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000200100000000000000000000000000000000000000000000ae881b93e4a8d8b0cd07045a"], 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) dup3(r0, r1, 0x80000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) [ 1199.851010][ T3791] cdc_ncm 6-1:1.0: bind() failure 10:05:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:20 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:20 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x3], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:21 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x7593}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) flock(r1, 0x6) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x5a776de0) 10:05:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1199.886984][ T3791] usb 6-1: USB disconnect, device number 125 [ 1199.926583][T28417] usb 1-1: USB disconnect, device number 11 10:05:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x4], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:21 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x800, 0x20, 0x0, 0x4, 0x0, 0x4}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = dup(r1) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x1, 0xa01, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2406}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000005) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x1) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0xff, 0x6, 0x2dff7759}, 0x10) 10:05:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x5], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1200.330355][ T3791] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1200.480309][T28417] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1200.580104][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1200.720918][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.720969][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.731781][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1200.870141][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.870193][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.870225][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1200.870248][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1200.927436][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1200.927458][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.927474][ T3791] usb 6-1: Product: syz [ 1200.927490][ T3791] usb 6-1: Manufacturer: syz [ 1200.927504][ T3791] usb 6-1: SerialNumber: syz [ 1201.060967][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1201.070458][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.078624][T28417] usb 1-1: Product: syz [ 1201.110104][T28417] usb 1-1: Manufacturer: syz [ 1201.114718][T28417] usb 1-1: SerialNumber: syz [ 1202.100360][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1202.116310][ T3791] usb 6-1: USB disconnect, device number 126 [ 1202.286002][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1202.310023][T28417] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1202.333206][T28417] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1202.346271][T28417] usb 1-1: USB disconnect, device number 12 [ 1202.909869][T28417] usb 6-1: new high-speed USB device number 127 using dummy_hcd 10:05:24 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) ptrace$cont(0x11, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x7f, &(0x7f0000000840)="825bd6c292a2d8e727a9c387565154b3ab47bcd0ba0f0d4ea3766f98d761ae53c0ca142ed033cf4d54b1a2a9cbe91aad63dedcccd0a8760f65e1cd8ffe6ae78cbf1af057652ff4411daea403fb1960ce293d5bc12677a7465083404a37e358872a47927414edc791c05947f1829ababde37656609069346f22c784d565a53202cfb339dc3f341784fa72ab193bbef3da7404b4bef4048237c376c80e9dcc48c6d2510e") syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x18, &(0x7f0000000040)={0x0, 0x21, 0x9c, {0x9c, 0xc, "c724676aad1a7d378c47e1757286eea89e64df5a61c6dbe9ef5a96932a0802aef58177ac5cb54cb86042105c81ed16b914370e79c31c6229db5af76e34f12dce88bac7bd647969cd948d8fdf41c4884b187f02dea87c30a4ecc7d0142290f71c5a160ce772e6796d98174db941feeb7843101d6a286cea69854af32d76b02d4c6c514dbb41317ba881bd6fc6616574bd9697bbc97230cc1538ab"}}, &(0x7f0000000100)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "961041239d76c0fc0ff85e0ebef9198b3975991033ede04aac7c576ec4f20f010da8b7642de146d70ffa5cfb0f"}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x4, 0x20, "d45531bf", "32705c90"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x81, 0x9c, 0x81, 0x73cc, 0xa9}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000300)={0x40, 0xc, 0xf0, "82784811c8e09831d39f30b7a6739fbe1c16bba0a505bb7752def8976c80b8e7a3a32916d9e8a0a079e45b49f73eb989227ad17ecece7a1945e06c30716c51bd9b1775ef63f0bba53f9cf9f1a1de60cd29f936c3ccd82b982045925c97ca9e4283f757d9c78373058f4090ac9ae1aa453cad845510b44a3fac7efd889dfedf72e961257b4d6e1e47ba3098f69e41005d4cb8c595027cc21acfd08e4d1b4d2bb2292a02671b71bd51f60767c0e0b0885dd5eded037bc2e2706d69a77589541486079f3e28a64b57d41e9dac060ac0f1bdd2ab57a1106342841cba77cbbafdaa26a79c7752c60a5afea3098ef03da95e96"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xa2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xc6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x20, [0xf]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7ff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000580)={0x40, 0xb, 0x2, "f61c"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x19, 0x2, "c95c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io(r0, 0x0, 0x0) [ 1203.049799][ T3791] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1203.309696][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1203.449856][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.460196][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1203.465465][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.496983][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1203.508723][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1203.609876][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.629691][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:05:24 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80804120, &(0x7f0000000040)) 10:05:24 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:24 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:24 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x6], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:24 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = semget(0x2, 0x1, 0x100) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000000)=""/175) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1203.731361][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1203.751992][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:05:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:25 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x7], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:25 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1203.777990][ T3791] usb 1-1: Product: syz [ 1203.778007][ T3791] usb 1-1: Manufacturer: syz [ 1203.820783][ T3791] usb 1-1: can't set config #1, error -71 [ 1203.822461][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:05:25 executing program 3: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1203.822482][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.822497][T28417] usb 6-1: Product: syz [ 1203.822513][T28417] usb 6-1: Manufacturer: syz [ 1203.822529][T28417] usb 6-1: SerialNumber: syz [ 1203.827934][ T3791] usb 1-1: USB disconnect, device number 13 10:05:25 executing program 3: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:25 executing program 3: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1204.209951][ T3791] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1204.459754][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1204.590642][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.616290][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.653351][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1204.689776][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.712842][T20866] udc-core: couldn't find an available UDC or it's busy [ 1204.730600][T20866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:05:25 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_CAPBSET_DROP(0x18, 0x13) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffff8, 0x4040) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x80800) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000040)={{0x1, 0x1, 0xffff, 0x3, 0x7}, 0x747c8000, 0xffffffff, 0x2}) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x20000, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x7f}}, 0x18) [ 1204.807377][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1204.814871][T28417] cdc_ncm 6-1:1.1: bind() failure [ 1204.848773][T28417] usb 6-1: USB disconnect, device number 127 [ 1204.910263][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1204.919326][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.950087][ T3791] usb 1-1: Product: syz [ 1204.954268][ T3791] usb 1-1: Manufacturer: syz [ 1204.958853][ T3791] usb 1-1: SerialNumber: syz [ 1205.259550][T28417] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1205.529545][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1205.649758][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.669733][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.839625][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1205.848685][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.858492][T28417] usb 6-1: Product: syz [ 1205.863802][T28417] usb 6-1: Manufacturer: syz [ 1205.868406][T28417] usb 6-1: SerialNumber: syz [ 1206.085670][ T3791] cdc_ncm 1-1:1.0: bind() failure [ 1206.109892][ T3791] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1206.139636][ T3791] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1206.159633][ T3791] usb 1-1: USB disconnect, device number 14 [ 1206.839465][T28420] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1206.999554][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1207.023807][T28417] usb 6-1: USB disconnect, device number 2 [ 1207.083196][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1207.200080][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.219675][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.239450][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.269334][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:05:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') sendfile(r2, r3, 0x0, 0x29a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}}, 0x10080) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x101, 0x7}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) preadv2(r3, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/136, 0x88}], 0xa, 0x2, 0x3, 0x2) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000140)={0x3f}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x8], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x9, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4e0000, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x1}}, 0x18) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x6, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f00000000c0)=[0x6, 0x8], 0x0}) 10:05:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5828, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1207.479406][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1207.479428][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.479443][T28420] usb 1-1: Product: syz [ 1207.499462][T28420] usb 1-1: can't set config #1, error -71 [ 1207.503835][T28420] usb 1-1: USB disconnect, device number 15 10:05:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x300], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:28 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:28 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5829, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1207.765651][ T3791] usb 6-1: new high-speed USB device number 3 using dummy_hcd 10:05:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1207.949461][T28420] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1207.999257][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1208.129935][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.129982][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.189398][T28420] usb 1-1: Using ep0 maxpacket: 8 10:05:29 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ptrace$cont(0x11, r1, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000004c0)=0x7f) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="000ee6000000e60af5f3e37ec79ecfed686ba056323b07d783e11e57f7a11881e8de7d465fc6ddcf230d7c81bf613f048d953a7cb444760cb8b35851d76a27aedc677bc3715234f2a0e6d3ea93704df34f337b650e1781697771c9a7f7ab8f5cb38bf66725d880c8085e16d9ebdb4a27a06e07f7d9e71602a26dd4080ea2973209380834cadc1da3c9c082320309d7bbdea1f697f6a6ab425bbcce3c29bf586a42437777e3adff5f71a09735861be27230e470b8cefde8ac104132d7c3d61cab5f71269ca8da30045f1e2cbc2d8acbef80ed28574099ff5ad16ffe88eafaaa6d8aff7a5f555952b515624d72"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x40, 0x13, 0x37, "61f30e51cb17ffafd0f77c93ed584d43ada80dfcdff41a0495c634d204f725aff96d4ecbf22abf47846f3e2606d54084a6fe975af2ff10"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x81, 0x5, 0x1, 0x5b3f, 0x0, 0xdf2c, 0x3f, 0x13b, 0x4, 0x1, 0x1, 0x8}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x847}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) [ 1208.313129][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.373362][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1208.388181][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.390780][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.430697][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1208.432150][ T3791] usb 6-1: Product: syz [ 1208.452838][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1208.489310][ T3791] usb 6-1: Manufacturer: syz [ 1208.548169][ T3791] usb 6-1: can't set config #1, error -71 [ 1208.577910][ T3791] usb 6-1: USB disconnect, device number 3 [ 1208.640140][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1208.654037][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.680635][T28420] usb 1-1: Product: syz [ 1208.694602][T28420] usb 1-1: Manufacturer: syz [ 1208.707256][T28420] usb 1-1: SerialNumber: syz [ 1208.989278][ T3791] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1209.239167][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1209.359151][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.379545][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.580099][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1209.596086][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.620452][ T3791] usb 6-1: Product: syz [ 1209.630092][ T3791] usb 6-1: Manufacturer: syz [ 1209.640001][ T3791] usb 6-1: SerialNumber: syz [ 1209.869189][T28420] cdc_ncm 1-1:1.0: bind() failure [ 1209.899255][T28420] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1209.929233][T28420] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1209.955416][T28420] usb 1-1: USB disconnect, device number 16 [ 1210.629289][T28420] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1210.819038][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1210.849113][ T3791] usb 6-1: USB disconnect, device number 4 [ 1210.881974][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1210.999676][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.014525][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.037872][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1211.061293][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:05:32 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x500], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c582a, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:32 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:32 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xb4, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x1, 0x10, 0x90, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x40}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, "9e75"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0x1, "82eab919"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x20, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x50, 0x89, "06"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x0, "51d603e46b2edb7800"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x30, 0x1, 0x7f, 0xfd, 'U'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x80, 0xf0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x25}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0x3a, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xfa, 0x3, 0x7, {0x7, 0x25, 0x1, 0x2, 0x2, 0xdfee}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x150, 0x6, 0x7f, 0x2, 0x8, 0x1}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x409}}, {0x2f, &(0x7f00000002c0)=@string={0x2f, 0x3, "1190bd048cb25830c1c41e7de1d3ae99f7dc62078421d0f262887c0fb23219b53108605c6153f959dcc37b3460"}}]}) r1 = semget$private(0x0, 0x2, 0x0) semctl$GETNCNT(r1, 0x2, 0x10, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000040)=""/20) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) r3 = openat$vimc2(0xffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000002c0)={0x2, 0x1, [0x5, 0x2, 0xf2cb, 0x7, 0x2fb1, 0xffff, 0xfffffff7, 0x8]}) ioctl$CHAR_RAW_PG(r2, 0x1269, &(0x7f0000000180)={0x85, 0x80000000, 0x1000, &(0x7f0000000400)="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"}) flock(r1, 0x6) r4 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r5, 0x6) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) 10:05:32 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x356, 0x0, 0x80, 0x384, 0x0, 0xe0000000, 0x4, 0x1, {0x0, 0x400, 0x1}, {0x0, 0x2, 0xfffffffc}, {0x200, 0x5}, {0xfffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000000, 0x1, 0x0, 0x8, 0x3, 0x22, 0x0, 0x3, 0xc}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/18) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000080)={0x0, 0x800000000000028f, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r3 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x20800, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0xffff}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40086439, &(0x7f0000000140)={0x6, r4}) flock(r2, 0x6) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000040)=0x101) [ 1211.239138][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1211.248202][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.263447][T28420] usb 1-1: Product: syz [ 1211.267629][T28420] usb 1-1: Manufacturer: syz [ 1211.274433][T28420] usb 1-1: SerialNumber: syz [ 1211.327946][T28420] usb 1-1: can't set config #1, error -71 [ 1211.347978][T28420] usb 1-1: USB disconnect, device number 17 10:05:32 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x600], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:32 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socket$pppoe(0x18, 0x1, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c582b, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:32 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:32 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0) [ 1211.649043][T28418] usb 6-1: new high-speed USB device number 5 using dummy_hcd 10:05:32 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5839, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:33 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0) [ 1211.789100][T28420] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1211.898897][T28418] usb 6-1: Using ep0 maxpacket: 8 10:05:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x700], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:33 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@alg={0x118, 0x10, 0x20, 0x70bd2c, 0x25dfdbfe, {{'seqiv(authenc(crc32-pclmul,ctr-des3_ede-asm))\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x925}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc008641d, &(0x7f0000000400)={r3, &(0x7f0000000340)=""/80}) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000003, 0x4000010, r1, 0xd0000) [ 1212.030177][T28418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.030227][T28418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.040311][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1212.161927][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.161978][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.162010][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.162031][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1212.245408][T28418] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.245431][T28418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.245446][T28418] usb 6-1: Product: syz [ 1212.245460][T28418] usb 6-1: Manufacturer: syz [ 1212.245475][T28418] usb 6-1: SerialNumber: syz [ 1212.318962][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.442309][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.442326][T28420] usb 1-1: Product: syz [ 1212.442339][T28420] usb 1-1: Manufacturer: syz [ 1212.442354][T28420] usb 1-1: SerialNumber: syz [ 1212.921999][T21052] udc-core: couldn't find an available UDC or it's busy [ 1212.933910][T21052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1213.408800][T28418] cdc_ncm 6-1:1.0: bind() failure [ 1213.438478][T28418] usb 6-1: USB disconnect, device number 5 [ 1213.578828][T28420] cdc_ncm 1-1:1.0: bind() failure [ 1213.609014][T28420] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1213.628838][T28420] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1213.647699][T28420] usb 1-1: USB disconnect, device number 18 [ 1214.178859][T28420] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1214.338644][ T3791] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1214.418780][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1214.538762][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.552353][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.608688][ T3791] usb 1-1: Using ep0 maxpacket: 8 10:05:35 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1214.734569][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.758839][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.759935][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.767889][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.767911][T28420] usb 6-1: Product: syz [ 1214.787287][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1214.809250][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.834669][T28420] usb 6-1: Manufacturer: syz [ 1214.858709][T28420] usb 6-1: can't set config #1, error -71 [ 1214.868008][T28420] usb 6-1: USB disconnect, device number 6 10:05:36 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/252) 10:05:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:05:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x3f00], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0) 10:05:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1215.078646][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.078665][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.078679][ T3791] usb 1-1: Product: syz [ 1215.108812][ T3791] usb 1-1: can't set config #1, error -71 [ 1215.110464][ T3791] usb 1-1: USB disconnect, device number 19 10:05:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1215.250525][T28420] usb 6-1: new high-speed USB device number 7 using dummy_hcd 10:05:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0xff00], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020400040e000000000000000000000005000600000000000a000000002bf3e7c6619cd697000000ff0200000000000000000000000000010000000000000000020001000000000000000000000000000500000000000a00000000000000200100"/118], 0x70}}, 0x0) sendfile64(0xffffffffffffffff, r1, &(0x7f0000000000)=0x187, 0x7) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1215.488527][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1215.498534][ T3791] usb 1-1: new high-speed USB device number 20 using dummy_hcd 10:05:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1215.608583][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.608646][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.748571][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1215.768660][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.803445][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.844641][T28420] usb 6-1: Product: syz [ 1215.844656][T28420] usb 6-1: Manufacturer: syz [ 1215.844669][T28420] usb 6-1: SerialNumber: syz [ 1215.883944][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.883992][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.884023][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1215.884045][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1216.059171][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1216.068230][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.104110][ T3791] usb 1-1: Product: syz [ 1216.108308][ T3791] usb 1-1: Manufacturer: syz [ 1216.118792][ T3791] usb 1-1: SerialNumber: syz [ 1216.998466][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1217.037021][T28420] usb 6-1: USB disconnect, device number 7 [ 1217.228824][ T3791] cdc_ncm 1-1:1.0: bind() failure [ 1217.278636][ T3791] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1217.298840][ T3791] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1217.316446][ T3791] usb 1-1: USB disconnect, device number 20 [ 1217.768357][T30884] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1217.998392][T28420] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1218.009091][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1218.128983][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.158339][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.238986][T28420] usb 1-1: Using ep0 maxpacket: 8 10:05:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000040601040000000000000000010000010900020073797a3100034600"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) flock(0xffffffffffffffff, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000000)={{0x1, 0x8}, 0x40}, 0x10) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1218.358424][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1218.367493][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.376552][T28420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.398320][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.418335][T30884] usb 6-1: Product: syz [ 1218.422525][T30884] usb 6-1: Manufacturer: syz [ 1218.427940][T28420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1218.468391][T30884] usb 6-1: can't set config #1, error -71 [ 1218.474534][T28420] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1218.493705][T30884] usb 6-1: USB disconnect, device number 8 10:05:39 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082525a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000000001c000006241a0000000905810340000000000904010000020d00711800f1e0cb887046f8ae608c0d000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x181800) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x2, 'Z '}, 0x3) 10:05:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0) 10:05:39 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x800, 0x90800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x600ac0, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="00d760e9", @ANYRES16=r5, @ANYBLOB="000229bd7000fbdbdf250c00000008000400000000005c0001800c0007002800000000d553fecb5f81b20e57434545c8e02f000000060002003a00000008000800040000000800080001fcffff060004004e22000008000b007369700008000500040000000a0006006c626c6372000000060004004e22000008000b0073697000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a81b86f50c50", @ANYRES16=r5, @ANYBLOB="000228bd7000fbdbdf250c00000008000400000000001400018008000b007369700008000b00736970000800060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x63365fd52eed70d1) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000012c0)={0x2, 0x4, 0x1, 0x4, 0x2, 0x0, 0x0, 0x25dfdbfd, [@sadb_ident={0x0, 0xa, 0x0, 0x0, 0x2}, @sadb_key={0x0, 0x8, 0x0, 0x0, "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"}, @sadb_x_nat_t_port={0x0, 0x15, 0x4e20}, @sadb_x_nat_t_port={0x0, 0x16, 0x4e23}]}, 0xffffffffffffff81}}, 0x8001) syncfs(r6) flock(r1, 0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @remote}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0xcf7666ba2488c246}, 0x815) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020400040e000000000000000000000005a5efc3c9c59bc4a3589ab82200fb628f000600000000000a00000000000000ff02000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000200100"/128], 0x70}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r7) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:39 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001153383, 0x8b968bf3dd3dc5af) flock(r1, 0x6) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ca9b000001090188000000000000000007000009440013800600014088a80000060001408100000006000240040000000600014088a800000600024003ff00000600014081000000060001408100000006000240003700009b8d7e5f6e88b6ffd3b379fe7eeeb04744574821ab584c39ba9f95ffe2c990f9dbb96e446dba5a435167abe89b572272d436062c955613145ae12f7d2346bc20698ae5f0b2113d5c187f103284e97f2c6cd41e4f84a7867d432540f70da82f8a528dc59c8498f2"], 0x58}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0xe) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x52000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000012da27431f7f360f0052a05e796fd5a90ae873bdbe9e189811d408cda4ebd73ef135725d08ced88fa363b1fdb7ae0c928b0135c299323981890387029db18e3002a9df00021580982669901a083dd400ab432b9863835e75af97213dec9a337cfb644e0ea2f41dd3ddc497a7524d9390ac473900452427ad81aea0950c102051df8519b3c05d7d262c44e3bc51efa6a23ac536979726b176a560c7e12247ee20309b2192d2c1c7a28bb3b6dff24ac0f244d823ab4b653ae79b5268f77b13a2fbe3b2f867a4c0e472b7229ca911abf4ed2f4fa9ba11d46b8c7bb3094baa00"/241, @ANYRES16=r3, @ANYBLOB="200000000000fedbdf25010000002c00018014000200687372300000000000000000000000001400020073797a6b616c6c657230000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xa, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040227bd7000fddbdf25070000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="041e0180306e0000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x80000000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7ff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) fdatasync(r2) ioctl$KDADDIO(r2, 0x4b34, 0x7) syz_usb_control_io(r0, 0x0, 0x0) 10:05:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 10:05:40 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0) [ 1218.728407][T28420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1218.728429][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.728443][T28420] usb 1-1: Product: syz [ 1218.748307][T28420] usb 1-1: can't set config #1, error -71 [ 1218.749638][T28420] usb 1-1: USB disconnect, device number 21 [ 1218.979771][T30884] usb 6-1: new high-speed USB device number 9 using dummy_hcd 10:05:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f0000000440)=""/127, 0x7f}], 0x5) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) fchmod(r1, 0x98) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x666642, 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) accept4$tipc(r4, &(0x7f0000000700)=@id, &(0x7f0000000740)=0x10, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x406, 0x10, 0x0, {0x2}, {}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}) r5 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0xc) flock(r5, 0x6) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) r7 = openat$cachefiles(0xffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x4200, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000640)={r7, r5, 0x200, 0xfd, &(0x7f0000000540)="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", 0x3, 0x0, 0x2, 0x6, 0x3, 0x2, 0x0, 'syz1\x00'}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000001c0)=0x3, 0x4) ioctl$FBIOPUTCMAP(r1, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:40 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, 0x0) [ 1219.148195][T28420] usb 1-1: new high-speed USB device number 22 using dummy_hcd 10:05:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0185648, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:40 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x300, 0x0) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) sendmmsg$alg(r2, &(0x7f0000000f80)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="4ca2b1a724d0d2de942b6d2508aa51265539dbbd91", 0x15}, {&(0x7f0000000480)="f2f3abe7816607a7467693086a647f43773fb9fa332f21fe53c8c0249c566afa202de0f7a726a33bfc14a98efd9256363018e8afe2d031f95cba4b6e0b08b6e5b9cb95e9b1e00608fcd2d41d7210f285d497f599d27f98589dddc5d5366a7d82783a92a1422ab51ef6a1ff0ac578553e6c343af0554aa9f8a58a453af54eec6cef0145557431882148cc0d75620db0d1efebb546c9c12d5f147099e0bb312e53d94a615d722b239a80641849885505b4f47e97e5877c721dc3314406bfc1a5de0c2b1a01ae0f353955f62b1e0d5a6a6ce108138974a451948cf26ae2edd1", 0xde}, {&(0x7f0000000340)="54d572b6163c4abeb65b3e07d501ee6d27179e323f939ae778125e58dfe4a3", 0x1f}, {&(0x7f0000000400)="0fb457a340751637fe27ac733416d153445f08cb44642eee8de7c2222988c7731ca68b0425bca940c9babd9e27ff2e", 0x2f}], 0x4, &(0x7f0000000600)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x2c}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x50, 0xc004}, {0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)="4426de5592a35ab20b23c0b36cbb821a4c04288d5a642ce303b8047e502d3d46a6b2acfabdcec62be919adbf3012a255b9b05f95ab5e4dded5c2655bf15f86d0b9455fa83a7f400a9380857ba1277b8d5ed42da2817b8b853c8c795b5a163f9d0d2ccdcccf3e8b499a084032f73483398bc03df5e3a4a9a1e2d851c9ff20569f98f9bb790f3b1b0f6353af8b23d5681e0ea13f8e3c05c9601a67c551843ae2c4c11dff02996b5463d2508003a2703101346731180ebd6a2aebe4d6a26256", 0xbe}, {&(0x7f0000000740)="288c1adf9be47cc1be1f86f99a6d1dae3f0de5a6151e1f72889a00433f81f3aeef1eac65a2310ef5e5e46b10f16d4d8e4909855c345ac1833aa8cc87609e58c55d19a4a8e244cd839a50fe984a63b8773f590e7791f623722fbf161d66dbb0fa44ac4e309560408c91b697d5865d552f56947c2bb72a81775825b57516cc6eeba3613f9cb45a20b2f335764e76341ec55318de41921d1dcf68b7f0f9249fb61fff1658589f722c854751f2b0998274d8fe821875c7e3", 0xb6}, {&(0x7f0000000800)="fd8f1f6424857ee1356e7d04ed76af573b5f79d10f4155dec27ca76f508ba9430fe1ba76aeb37f6c146bb1d6862e7863ef1a56392e615ba7a57c75b62f85a8d90f42a8807c5d1b3516414d4813615509f2310cce370fda3f9d316b7427d6e6a3acf12226b9c1f320f52422f1d3d47ab18f700232aca90a4d215d400089aa21543dc450b3b1ed7c9dfd60289daa70f88162553fbb7670ab0abc2270ed4773bc11821320c2d32b2b94e6e5129c4da0643bea7cb545650970d57039339cd99d0028cfc971f7a781560a61a181b35ea899b81ba862da30", 0xd5}, {&(0x7f0000000900)="449d3df3a4ec064c0c3b62c7347844a4a9aa819b4428408f1b23ab7c3fecbb488d71bc848275e58ac6a1", 0x2a}, {&(0x7f0000000940)="292784f83fe63bf3cd2f3c942ea1c1bade35de76e0cdcae3c33915b32cbe00a1c986b486fcfce779e30b2ebfb10835040c87ad0f96e63d5cc3baf2be4a3196d73c8d297374ba0000c98de80b07772bba071d592af9e6f7eaf53aa7d2f151636ecf0895b8ad6d86848b2a962fcfc68b45c86333ae312aeb51ed3c3f0214aae5f66ec70a50bbc894635cfaa157df3482b4e554aeb50c1e93c79554cf23c4ab46812d9838259cbd54690832db987cad8de0816a39798cfa30bcc028fe3c2ebb373814f98e82d5dc65aacf83e594dfbadf4436cb5f8fbdd6db74e1e34184a20801", 0xdf}, {&(0x7f0000000a40)="1fceec7f82c12887574aa485c67facb79eb2213b78beb65800a6398a862d3a316797be061dc50f079b219b287d430f7fbb0123f711bd6a2555f20a456d2fa681971d139428ea95b66e8b02a3f21e671d9e92c88f1904484cc21eb9d5a8ec240c9e0567365869e10a0be46fe3b40baf3a0f41e83c9e168f9f8b782b6c9bb039e852c8a8fed36e994d75064cc361a4c3aeca12601cbe112dcf3977e946753ec5", 0x9f}, {&(0x7f0000000b00)="5f08b019c9512b5a594ed94651156c87c672f8190b350ae4ff60b1dfd01b6bef035531f41d9e47003093e3555b6c366a9010e52b4facdfcdbaa2674fd3a15f5d9c7dce053771b86f3f6068e143621bebc2d5660fcb23c0a9e4936cccc1d3c9bfb85b804b6d634597c35e7f71df015b413fd9c7f67d3a096a6a6758f1aa419d84c5be891822f2437c5c7ef0909d10a1a1cb5bdfbac538d6649392d0ff9919", 0x9e}], 0x7, &(0x7f0000000c00)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x7}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x5c, 0x117, 0x2, 0x49, "1463d34245d868e6ca351594a76c9a0fc2ecb9ce4f6cd0ad045dc3de3233334f28242f6c46cc34ba19ec2679e6175f329573e197a7af01a2c54c652a2b7735c70f4795a11d5c8eea80"}], 0xac}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="859c6474d3bc0f758cf02515d47b89", 0xf}, {&(0x7f0000000d00)="73c2a7f341125b2b1ab8fc2a4664d6fb3f272fc57138519301b35df125e3d816947155e6dbaf9445e830b2064f918787cfbc417774cd192456d6a84eb3d6b45639c20a6d7aa0de674851216f89d6dd4c2315a03c860a420ae0ac0a1726f7ff9342cf2859d28517f847da5ce3ba2a7ff57a4941212f723893b704892c92777d3005ae3dabccb61f72d706cbf9a99e335d4b379d98a8e40556186d4e559fb1b4dec8629b472c6730b348842302bfe8858c228a9b457ea170506350c50f035815dfb1c9d5ea8e6cd6", 0xc7}, {&(0x7f0000000e00)="5eee3457463ae299919bbe3e00871cccfb7d3472c6bd5d774d163a0346b86bcd48ca0afd56284cddede07a47c0280b6e8f6479ab45de06467edfa07e5940fbd550e4bc721de0de0261336c6c7ef7db53a14ef2ee62aa69d974a4cbbefbb237c461280486ff9628c1408e5ec4f50983ad652ba4af9938a0980d6dd1ce1bf36ba8eb15d57a49ad7044f814517a018f46196d8c5f8c2b0e4140b4e73cb69d255f3c194082b708e5be927b07268d287f471a7bbc4056a84dfbb1bbfa906ed3a075fa67a418544de340d1d2fe54b14a8b3e98da94", 0xd2}], 0x3, &(0x7f0000000f40)=[@assoc={0x10, 0x117, 0x4, 0x3}, @assoc={0x10}, @assoc={0x10, 0x117, 0x4, 0x2}], 0x30, 0x40}], 0x3, 0x8840) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x34, r4, 0x1, 0x0, 0x0, {0x3}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r5, 0x6) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x1000) [ 1219.236270][T30884] usb 6-1: Using ep0 maxpacket: 8 10:05:40 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x115481, 0x0) io_setup(0x7, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x400, 0x0, 0x0, 0x0, 0x28ea, 0x0, 0x0, {0x0, 0x4}, {}, {0xfff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1219.358907][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.358947][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.388376][T28420] usb 1-1: Using ep0 maxpacket: 8 [ 1219.508843][T28420] usb 1-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 1219.508892][T28420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.519213][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1219.519235][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.519259][T30884] usb 6-1: Product: syz [ 1219.519275][T30884] usb 6-1: Manufacturer: syz [ 1219.519289][T30884] usb 6-1: SerialNumber: syz [ 1219.668699][T28420] usb 1-1: New USB device found, idVendor=2525, idProduct=a4a1, bcdDevice= 0.40 [ 1219.699552][T28420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.699569][T28420] usb 1-1: Product: syz [ 1219.699584][T28420] usb 1-1: Manufacturer: syz [ 1219.699600][T28420] usb 1-1: SerialNumber: syz [ 1219.739147][T28420] usb 1-1: selecting invalid altsetting 1 [ 1220.178220][T28420] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1220.184236][T28420] cdc_ncm 1-1:1.0: bind() failure [ 1220.218196][T30884] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1220.224241][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1220.250289][T30884] cdc_ncm 6-1:1.1: bind() failure [ 1220.270043][T30884] usb 6-1: USB disconnect, device number 9 [ 1220.308603][T28420] cdc_ncm 1-1:1.1: skipping garbage [ 1220.313838][T28420] cdc_ncm 1-1:1.1: bind() failure [ 1220.344370][T28420] usb 1-1: USB disconnect, device number 22 [ 1220.978265][T28420] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1221.037986][T30884] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1221.218052][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1221.278014][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1221.338757][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.358170][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.398112][T30884] usb 1-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 1221.418132][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.538211][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.558125][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.566127][T28420] usb 6-1: Product: syz [ 1221.578057][T28420] usb 6-1: Manufacturer: syz [ 1221.582667][T28420] usb 6-1: SerialNumber: syz [ 1221.598048][T30884] usb 1-1: New USB device found, idVendor=2525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.607117][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.632359][T30884] usb 1-1: Product: syz [ 1221.636545][T30884] usb 1-1: Manufacturer: syz [ 1221.642420][T30884] usb 1-1: SerialNumber: syz [ 1221.720487][T30884] usb 1-1: selecting invalid altsetting 1 [ 1221.768028][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1221.776622][T28420] cdc_ncm 6-1:1.1: bind() failure 10:05:42 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140e, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) syz_usb_control_io(r0, 0x0, 0x0) 10:05:42 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x69f, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0xc7, 0x53, 0xdc, 0x40, 0x13ad, 0x9999, 0xc9c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68d, 0x2, 0x8, 0x2, 0x20, 0x22, [{{0x9, 0x4, 0x96, 0x15, 0x4, 0x18, 0x3f, 0xae, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0xbc77, 0x3}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0x0], 0x3}]}, @hid_hid={0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x4a8}}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x4, 0x8, 0xfd, [@generic={0xd6, 0x6, "0eebbf561042b3b39354fc80a3b01fe9755dc02289c90fa2bf3769c825aefe8f72287a1b508005a0fac91690a65146694f23e240dc4280f196fe056329270bd31e930ab9e1653053958d98d54b279c8d10655eda31802863071bbe4578b593c63458aaf85c0b2267d4e618e596f781a347c4f5b38baf7809203b8055694c185167fbfce543dc6e5e72d47a75e58716372ea9eb1504e2d70b4569fade385db59f0f0f861083553604a1ffc180cca03280fc85c33b593a7937365dba237c740d69446b07d0c271fb91c0489252598c67e8825b2000"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x30}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xff}, @generic={0xf4, 0x22, "2ffe5a90f8f828797fae3547cc28fe07336f04a22b9e9ab6236bbb5aa66259f7c34518ed67412b35056037b180f8076308b633017ce2fcef1c8f4af26c4a9201c6520269faaa932ec208a0ef937e6e02cdb522972a594b27f0afeb3f72dbca75e5282890bd32304133b05919b016057b1988eaf1b32e9729ba9fa12285b59a6a13a4594b7cb9ccc719f57c578db6d6dc168b17236e87f58555e78446042fb24faa3d5121c4ccf08d4c8993734cbd5f0a8983e344460b2a90acc8b998fb5cc64eec08b3d2735d11fef56896c7eef4c6e04835dbda620fd3b32edcac66b26d49c6b47e10fe987a92a4dd61dedbde8ba75afa2f"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x418, 0x5, 0xf9, 0x40, [@generic={0x19, 0x11, "199ee04494a1495ea614187aa619fc739cab76d96de9e8"}, @generic={0xc9, 0x21, "82d172aa766b6a4407aaedac01726d889b1306664dcb7f8a51e4752b58c3d2d35bb082be4c219c8e827232c3cd7f4a2cbd30a538beb528927e58dec1c1bf778a4786a47c9006b0f9a74cbc80d4facd7e12a58d7a793f64614fc448bd3c404d404186551fab52a4c3f1419ea74f7f42e9738fbd08b0259c3ab277a483b73d5f62c242e295c84d3e244388464bd7c81e0ce01c85f1aab393f329b13176641c8a294e0059806c3894868c47c19721176d8230bbc2463e5891ebd41e0cc5e43afcde640e8c13239892"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xff, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}]}}, {{0x9, 0x4, 0xc9, 0x66, 0x8, 0x52, 0xed, 0x84, 0x1, [], [{{0x9, 0x5, 0xf, 0xad9b46eb4fbe7724, 0x8, 0x81}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x80, 0x9, 0x78, [@generic={0x35, 0x23, "b87fed503cd87e0ce8ace8c4dc067340456080d8f88fe373e9f78f12cde8acd0bfbb420e3c77b6d6acefebe1f089e6c25b0d5f"}, @generic={0xde, 0x22, "e527fd9c685364dddccbcd867b7bd64dfe27e76e5d7eb877f3c1de3d266c60bb43a7adcef2d26105658b70a3dac0890ce12f45de254720d2daf913680325817821a89f3931f85ce8ee91705769a4bc65569db38a2e1a8bec12a8bf4e27a2374be6b88bdd2d3e4b8bc9af668108f65c8d83e5838fa546008c87c7794460ceb1d9bfb0f609fa963766a41260574e689d71a230922bbcb53e0b752e9fff2d9e506b898e0e7a3d6b9a8ff5cd8b2bca1b247403ced179d61dcbea7a6e631c02c11edc59be5994376f5540cff84e2b0f0edb2f1d738daae3e43a5060fbb343"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x8, 0x40}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xcc, 0x8, 0x4, [@generic={0x80, 0x11, "046d3a1da187bc240400e4ee1b3213e85b8437c3479eb1cbaa897ec5210fbaaf8fe3a938053dd7f81da45fdc9993ba9fca835abd968ee844aba2757ca93bfba772035272e21acce97d5c1da868568c4ce4491b9f168e83a34f1a069afd2876bc4fce06d1d54ba2d0e585943005d8fb45f2b735f9e92212716b936350ef5b"}, @generic={0xc5, 0x3, "8ea060a0cc58ffe8ed131a9d7373b5a4702c4c2cc1a92f9df01452c036b73b37a36cf486da6423431a394989f9e1d2cabd579aecd3f3eac44f0b3c611f27eb4c15532f46d3cc045ebfab85e8368c200b020a6fafb14b985080a88b4d2e015989aad5400bc232ead5139bb3c2b69c9115c85add70182a7593e0ea275ad767bce35de8ff11f23c289c5b69579451ae069817cff1ecadb5add7752224d23b0d6f378993bc336f41212f6e1367757c1690d1b9bd201b41c830fe71976a9809d5396cdce66c"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x9, 0x3f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe6, 0x400}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0x9, 0x81, [@generic={0xc4, 0xb, "06d840288768633afb17ef6931c27766039499a0f9a24015e39302eec5aa6c44e5cd6a1afc0eb0e441e5db9ec1b9ac3a3359dd8ad2040810e2a89df0b4ac41741c0d17992d59c8423bf0ad6c8e729f98a7387a3ca1303b6d73a4de103e1667f6146408d856bbcae9f3f0c56c3f4a5c8fe66568764daf8bc0b75ca36de2009b67da10751946428eb2b7760f183494116b45ee525a1a3b9cce8a345e9a3c47cf4fe168d8615759e3008b6d3020a52e85eb340c849bc7cd6622baf0da482024534544d1"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x40, 0x4, 0x1f}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xc0, 0xf4, 0x8, 0x8, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}, {0xa1, &(0x7f00000002c0)=@string={0xa1, 0x3, "31c3b495cbde2910c0af4be4ccbe62327dda70ce881faec5171c75d9b3faad277643d621365b7aa253dfc1d4847d324eea9cb5114ec72d2822a8448ef857a49eea0bf4184cae52747a186a58c7be2ac71db7b1d78ab11c886b1ea427795e937b49aab03600b1752b0e018c6ffdaaa09155ca7b6b23760659120a6c58c81e57962980568b0a31532763fa63d66ffc860fb1ad146faceed480d5a55288160744"}}, {0x5e, &(0x7f0000000ac0)=@string={0x5e, 0x3, "db7deb9530a6ec367aa57744f76ddf77ff86214071f2c6f0c7117de98233718fbdf32648e08ec83604bda82d0c6cdc758a7168eedbd80b829bee01d8884fd05359bfe42c9278c801451a43f81fe67bc5084ed32f30ccc74c0cea3107"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3009}}, {0x16, &(0x7f0000000b40)=@string={0x16, 0x3, "1f782ea7e0ded05440b52424f446ca96b8d588be"}}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408c0d220080000000000109022400010000000009040000010300000009210300000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00002200000022006d60865ff9c2d57d87a0bf237ee62e8883da1fd9f597"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000040)) 10:05:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5829, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r6, 0x6) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000100)={0x3, 0x1, 0xfe2}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x8000, 0x1, 0x7cf, r5}, 0x10) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001e000d080000000000000000020000000000000000008000140003006c6f000000000000000000000000000021fea6823bec3f4bb72e9cf438bdd39813247637529cc0b2907900d24e5910c128cc1e23ced90f131e612a6b92b556c6457dd5bcb3db29733b97fead56b24f8d"], 0x30}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1221.825303][T28420] usb 6-1: USB disconnect, device number 10 [ 1221.838088][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1221.878670][T30884] cdc_ncm 1-1:1.1: skipping garbage [ 1221.907592][T30884] cdc_ncm 1-1:1.1: bind() failure [ 1221.954495][T30884] usb 1-1: USB disconnect, device number 23 10:05:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5829, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="1ba54cfd20d98662314ace59b051697b41cea18c329e6e339c4e02ec6e7081eb45fdb04eb69839434353160aa660505df0358b525d4d09c02dbb220de4758a4af954911339e0d3e3b843a00d7af47b58a94c7a87efa7489c26af902ee94973d92d712a28e98aa7631def75b81c2c7eb5a05b5689ae820f4267a0b04fc4122806b1497214f7f75a205f37fda505a75c11999c5cf6e138aec4b715777fc960c2a3cba993b0b4e412d18198e12a0074ac3dd7828d5052c8f9ce30d90b758b07126f3bd2d1c6ccc7b4001a76ca77b07406eb28981c41cbf1c73053f2465b", 0xdc}, {&(0x7f00000002c0)="f132006d1b794ecf98320b8af8d92cb66e7e065653ef451dc9821b8c124a97dfc4db9907822165d2a3cd4f2cda9e7bf5834aa1814e9ad493be120543abe0c69d7ddb308145f86ddf80b4a91ecda52f772ebe32223685c8c81be5cae26a0f0839cdf70aea5052e10722eee6a238118f7169b26bd53639ac", 0x77}, {&(0x7f0000000400)="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", 0xfb}], 0x3, 0x2) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0x0, 0x8, {0x5}}, 0x18) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:43 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1222.287983][T28420] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1222.417990][T30884] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1222.527898][T28420] usb 6-1: Using ep0 maxpacket: 8 10:05:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x402c5829, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000000c0)={{0x2, 0x80}, 0x1, 0xfe4, 0x6, {0x2, 0x1f}, 0x38, 0x2}) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x8, 0x0, 0x1004, 0xcc, 0x8, 0x5, 0x1, 0x1}) ioctl$CHAR_RAW_HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x5e1, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x69ee7f4fe11dc24b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1222.651212][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.651255][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.661584][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1222.781182][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.782097][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.782123][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1222.782141][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1222.808447][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1222.808484][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.808497][T28420] usb 6-1: Product: syz [ 1222.808510][T28420] usb 6-1: Manufacturer: syz [ 1222.808522][T28420] usb 6-1: SerialNumber: syz [ 1222.938587][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1223.157961][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.165994][T30884] usb 1-1: Product: syz [ 1223.171045][T30884] usb 1-1: Manufacturer: syz [ 1223.175645][T30884] usb 1-1: SerialNumber: syz [ 1223.713644][T21327] udc-core: couldn't find an available UDC or it's busy [ 1223.726498][T21327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1223.741032][T21327] udc-core: couldn't find an available UDC or it's busy [ 1223.754207][T21327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1223.765982][T21327] udc-core: couldn't find an available UDC or it's busy [ 1223.779248][T21327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1223.808157][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1223.834572][T28420] cdc_ncm 6-1:1.1: bind() failure [ 1223.865845][T28420] usb 6-1: USB disconnect, device number 11 [ 1224.337832][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1224.367827][T30884] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1224.397880][T30884] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1224.417798][T30884] usb 1-1: USB disconnect, device number 24 [ 1224.567682][ T3791] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1224.837781][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1224.958348][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.974248][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.097631][T28417] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1225.148386][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1225.157446][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.173828][ T3791] usb 6-1: Product: syz [ 1225.179111][ T3791] usb 6-1: Manufacturer: syz [ 1225.183855][ T3791] usb 6-1: SerialNumber: syz [ 1225.256575][ T3791] usb 6-1: can't set config #1, error -71 [ 1225.288729][ T3791] usb 6-1: USB disconnect, device number 12 [ 1225.357629][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1225.478316][T28417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.493084][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.513682][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1225.526604][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1225.717689][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1225.726738][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.747501][T28417] usb 1-1: Product: syz [ 1225.751677][T28417] usb 1-1: Manufacturer: syz 10:05:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000f10d240f0100000000000000000006241800000009058103400da40c88cb334c2100020d000009040102020d0041090582739e00"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) waitid$P_PIDFD(0x3, r4, &(0x7f0000000040), 0x1000002, &(0x7f00000000c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc04c5609, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:46 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:05:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r2, 0xff81, 0x6, 0x5, 0x81, 0xfffffff9}, &(0x7f0000000040)=0x14) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:46 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001022b0000052406000105240000000d240f0100000000000000000006241a000095482fdb8f9ec986a5795d626a2228c2000905810340000000000904010000020d00000904010102020d00000905"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x1, 0x0, 0x1, 0x8001, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) rt_sigpending(&(0x7f0000000040), 0x8) syz_usb_control_io(r0, 0x0, 0x0) [ 1225.767794][T28417] usb 1-1: SerialNumber: syz [ 1225.840865][T28417] usb 1-1: can't set config #1, error -71 [ 1225.842383][T28417] usb 1-1: USB disconnect, device number 25 10:05:47 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000002680)=ANY=[@ANYBLOB="a8120000931d039d876c4d6c63bd81257a65f2922061c8c9fce13bf0577da938f4ce4b12f37932794fd7a4f3035ac1b21ff274761c0430ebfe58096e84916af3677db6e634cc0142428b1cc7cf56111b6b4a6b81ab6707538a4d2b4a9e910f670aec92c87fbc384899b4fc52be35b7ee334cbd07640824055aeae25434f0bec424a2716c4fca12a765aacc771c17341bdc8b13dd28222df6ff120541ff369f8678a53d6ee566226fcd8f2709221902d3590402f63f994670a534b301a7362fea9eb7f1485fc02249ede453a5646e0ed8827b4a56ca62044f51be69f2ccdd6aef8aab5a49e3df228e3b5175ca7b263b", @ANYRES16=r2, @ANYBLOB="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"], 0x12a8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008085) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x4}}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/152, 0x98) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x100010, r3, 0x0) 10:05:47 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:05:47 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 1226.107580][ T3791] usb 6-1: new high-speed USB device number 13 using dummy_hcd 10:05:47 executing program 2: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r0, 0x6) recvmsg$can_j1939(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}, {&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f00000003c0)=""/162, 0xa2}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000640)=""/100, 0x64}], 0x6, &(0x7f00000001c0)=""/11, 0xb}, 0x100) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0xc0684608, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:47 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 1226.308188][T28417] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1226.367765][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1226.498571][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.498622][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.547585][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1226.667729][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.680806][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.690852][T28417] usb 1-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 1226.706030][T28417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1226.721331][ T3791] usb 6-1: Product: syz [ 1226.731190][ T3791] usb 6-1: Manufacturer: syz [ 1226.735940][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 164, changing to 11 [ 1226.749107][ T3791] usb 6-1: SerialNumber: syz [ 1226.755345][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1344, setting to 1024 [ 1226.947719][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.956787][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.974028][T28417] usb 1-1: Product: syz [ 1226.979328][T28417] usb 1-1: Manufacturer: syz [ 1226.984053][T28417] usb 1-1: SerialNumber: syz [ 1227.019458][T21432] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1227.048600][T28417] cdc_ncm 1-1:1.0: bind() failure [ 1227.440355][T21420] udc-core: couldn't find an available UDC or it's busy [ 1227.452133][T21420] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1227.487448][ T3791] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1227.493512][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1227.523222][ T3791] cdc_ncm 6-1:1.1: bind() failure [ 1227.549264][ T3791] usb 6-1: USB disconnect, device number 13 [ 1228.247353][ T17] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1228.487458][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1228.608094][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.620499][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.788021][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1228.797306][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.805327][ T17] usb 6-1: Product: syz [ 1228.827409][ T17] usb 6-1: Manufacturer: syz [ 1228.832051][ T17] usb 6-1: SerialNumber: syz 10:05:49 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e8e96f49f036b782ab2a460d5d1be35f175ae1436d99d0e858d6daab95534950c1e700842c95b6854b779cddadbbf4e2baf09cc6f95a43dc78442217f2747c64d4ccdd51113"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="6242be00897a741316dd052b3b7490ac1898162f56940e5e8aaf6f9d", 0x1c}, {&(0x7f0000000000)="13", 0x1}], 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000080)) r3 = syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x8, 0x0, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "64cfa69a4273"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x6, 0x16}, [@mbim={0xc, 0x24, 0x1b, 0x7f, 0x8f5, 0x1f, 0x76, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0xc1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3d, 0x5, 0x1f}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x5, 0x12, 0x2, 0x40, 0x5}, 0x13, &(0x7f00000002c0)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x74, 0x7, 0x8, 0x81, 0x3}, @ptm_cap={0x3}]}, 0x1, [{0xf1, &(0x7f0000000300)=@string={0xf1, 0x3, "474c78f9f4b40cf08c4174d0f316eea188fd1fa4fda09f6b8f32ce87d894207f38b1011de560453d16f16aa71188af2a4e18f0f5c1a684991ea241db7a2da8e8e10be55b1706daf60ce759fbeabf3f13f2829760008cece1de353620de1c680c211e97e6c3503f8a08ff1501b73bb789907ba6b36644ec16c87daf563eb345173fdbbbf59c472c0c9270d80f16e5dd57de2cec290a05f9101b2c31e9f06847b545d71f48dfc566496db2fe6af8742557e6783cfebe71b90b49e4a2eece97fe40ff46a2863e500deb3cf746202f1668ba22e281adfc418bc45a82be15c1bb0c8b6f3451ce42fd2c3d79ae6d9d720355"}}]}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:49 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:05:49 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:49 executing program 2: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r0, 0x6) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000000)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$BLKBSZGET(r2, 0x80041270, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x2}) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x8], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x5) 10:05:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1228.903284][T30884] usb 1-1: USB disconnect, device number 26 10:05:50 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:05:50 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:05:50 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 1228.997380][ T17] cdc_ncm 6-1:1.0: bind() failure 10:05:50 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x2, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1228.999369][ T17] cdc_ncm 6-1:1.1: bind() failure 10:05:50 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 1229.004998][ T17] usb 6-1: USB disconnect, device number 14 10:05:50 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x4000000, 0x80000001}, {}, {}, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x12, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'nr0\x00', 0x2}, 0x18) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) write$eventfd(r2, &(0x7f0000000000), 0x8) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xa0000, 0x0) 10:05:50 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x70, r2, 0x0, 0x70bd29, 0xf8, {}, [@ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) flock(r1, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r9, 0x301}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) [ 1229.437275][T30884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1229.467239][ T17] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1229.492600][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1229.677763][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1229.737860][ T17] usb 6-1: device descriptor read/64, error 18 [ 1229.797849][T30884] usb 1-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 1229.797900][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.797933][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 150, changing to 11 [ 1229.797957][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1694, setting to 1024 [ 1229.797979][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1229.799949][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1229.959541][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1229.959562][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.959575][T30884] usb 1-1: Product: syz [ 1229.959589][T30884] usb 1-1: Manufacturer: syz [ 1229.959603][T30884] usb 1-1: SerialNumber: syz [ 1230.127255][ T17] usb 6-1: device descriptor read/64, error 18 [ 1230.204700][T21512] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1230.397204][ T17] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1230.642658][T21512] udc-core: couldn't find an available UDC or it's busy [ 1230.655552][T21512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1230.667213][ T17] usb 6-1: device descriptor read/64, error 18 [ 1230.700168][T30884] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1230.706216][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1230.749622][T30884] cdc_ncm 1-1:1.1: bind() failure [ 1230.773124][T30884] usb 1-1: USB disconnect, device number 27 [ 1231.067115][ T17] usb 6-1: device descriptor read/64, error 18 [ 1231.187353][ T17] usb usb6-port1: attempt power cycle [ 1231.467031][ T3791] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1231.736978][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1231.857266][ T3791] usb 1-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 1231.873575][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.892285][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 150, changing to 11 [ 1231.897006][ T17] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1231.908960][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1694, setting to 1024 [ 1231.929767][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:05:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f00000000c0)={0x4, 0x8, 0x1, r2, 0x0, &(0x7f0000000080)={0x41d5e4033f54561, 0x7ff, [], @p_u16=&(0x7f0000000040)=0x101}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000100)={0x2, 0x7fffffff, 0xfffffff8}) 10:05:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x3, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:53 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:05:53 executing program 4: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r0, 0x6) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x100, 0x2, {0x1, 0x0, 0x5, 0x6}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x10}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) getpeername$netlink(r4, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) fgetxattr(r3, &(0x7f0000000080)=@random={'btrfs.', '\x00'}, &(0x7f00000000c0)=""/35, 0x23) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r5, 0x6) flock(0xffffffffffffffff, 0x6) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000300)) io_uring_setup(0x7d42, &(0x7f0000000100)={0x0, 0x4b15, 0x10, 0x0, 0x232, 0x0, r5}) ioctl$FBIOPUTCMAP(r2, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:05:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) 10:05:53 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a4c996c0cf8b29985bd8fb4340000102030109025c0002010000000904000001020d0000800000000105240000000d240f010000dfff000000000006241a0000000905810340000000000904010000020d00000904010167bd1c39e352f7fe8e047786f608b0fa9defaff72504b801cfe76007c08599a5c68ac1f19cfefe0a390313aa5171f7d035784cb5e2f76efd920c4ef63f68b115cec571303302a99fe083e40d3c38ff0e757383a98cb82a0b982f66863d97692ffa7393a65397d88f8751b230fef3fe"], 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x0, 0xab9535e9a6578fc1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe4) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x92011001}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008080}, 0x20000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1232.097291][ T17] usb 6-1: device descriptor read/8, error -71 [ 1232.177219][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1232.186281][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:05:53 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 10:05:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x4, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:53 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) [ 1232.237954][ T3791] usb 1-1: Product: syz [ 1232.237972][ T3791] usb 1-1: Manufacturer: syz [ 1232.257153][ T3791] usb 1-1: can't set config #1, error -71 [ 1232.259032][ T3791] usb 1-1: USB disconnect, device number 28 [ 1232.306993][ T17] usb 6-1: device descriptor read/8, error -71 10:05:53 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x5, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:53 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) [ 1232.686973][ T3791] usb 1-1: new high-speed USB device number 29 using dummy_hcd 10:05:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r2, 0x90d, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x40}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4018000}, 0x800) [ 1232.796923][ T17] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1232.887673][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1232.927093][ T17] usb 6-1: too many configurations: 41, using maximum allowed: 8 [ 1232.966843][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1233.046938][ T17] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1233.046956][ T17] usb 6-1: can't read configurations, error -61 [ 1233.047144][ T17] usb usb6-port1: unable to enumerate USB device [ 1233.097586][ T3791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.097659][ T3791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.097690][ T3791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1233.097712][ T3791] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.278549][ T3791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.293828][ T3791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.303334][ T3791] usb 1-1: Product: syz [ 1233.314552][ T3791] usb 1-1: Manufacturer: syz [ 1233.320088][ T3791] usb 1-1: SerialNumber: syz [ 1234.446884][ T3791] cdc_ncm 1-1:1.0: bind() failure [ 1234.466848][ T3791] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1234.496858][ T3791] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1234.507965][ T3791] usb 1-1: USB disconnect, device number 29 [ 1235.238728][ T17] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1235.486648][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1235.607391][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.626694][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.646621][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1235.666735][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 10:05:56 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010440000102030109025c0002010000000904000001020d1300052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102cd0d0040090582739e4194d08999f5b48947028d128a297dc3db637cae4463c1df2cefb851aac6471aa0e6bee814e1f187b6d422a1f22a7cc994ad573a84d50987d3dc9f79da40f0b4fd64f9356bd64c4b3fdeca2a7209452855ed"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = io_uring_setup(0x40a5, &(0x7f0000000100)={0x0, 0xfda5, 0x2, 0x3, 0x8, 0x0, r1}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='\'*/$#.-*\x00', 0x9, 0x3) 10:05:56 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, r3, 0x400, 0x0, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3f}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000001180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000000380)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r4, 0x6) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000011c0)={0xffff}) r5 = syz_usb_connect(0x2, 0xd11, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xd5, 0x2, 0xdd, 0x8, 0x403, 0xd017, 0x2012, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcff, 0x4, 0x20, 0x21, 0xa0, 0x1f, [{{0x9, 0x4, 0x8b, 0xff, 0x1, 0xd2, 0xd5, 0x16, 0x7, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "2e59cef5d10a"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x7ff, 0x1f}, {0x6, 0x24, 0x1a, 0x0, 0x22}, [@mdlm={0x15, 0x24, 0x12, 0x1ff}, @mdlm={0x15, 0x24, 0x12, 0xfff9}]}], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x3f, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x32, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9}]}}]}}, {{0x9, 0x4, 0xc8, 0x2, 0x9, 0x25, 0xbd, 0x94, 0x3, [@hid_hid={0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x340}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0ddd4c1dafa2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfff8, 0xf8d4, 0x1}, {0x6, 0x24, 0x1a, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x7, 0x5}, @obex={0x5, 0x24, 0x15, 0x1f}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x3, 0x40, 0x7, 0x3f, 0x6}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x7f, 0x8, [@generic={0xd5, 0x1, "db676171791b4e46611a998d4c29518882738a9c5eac27d687c1ae0cc5cb6766bd09ece72bf749b2671f8d2b3955d9d1cd5615ab3aa3bed6543d4be528be12bdacbb04a97c304eff01ac4d873892416f4d193988f9482a5a121e640598ff60e0d4e0e51d7c6d693095a1c20c6cba048c82a725d39f820b0e8f930964bf357be0740e84b3e994c1bc7368e953907f40006ad5566098870821f78c1d5208f57ed42b3b6ec6d77f8957637720c416f436b1e50497c1210480fdfe78d10d64ac857682d76149b77def258a76f887e82124d1d8f25d"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x5}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x1f, 0x2, 0x9, [@generic={0x55, 0x2a, "c3b84733ea94b9bed69581d64de2a144519c2b7247c56706d29466b457e378e525cea47fcafbafe4a10caef8d88d5d3334fbd8578fa82275182bdd167a38311b5536e80709b4e124af0a243d4ca9c29164d5f6"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0xc2, 0x1c, 0x40}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x20, 0x2, 0x2, [@generic={0x99, 0x24, "17a927e9540a473531e38f0f0bcb991778f2a6b62f021df5a200ab5af64f10d9bada90a9bbe0d1d3fa5ef3d54cb7e6565b2d9ee232cbb40d72a74678a5ef6b851511b0bf7ae63113ef0cd6aa0a63d13956b5ab30c8218fbbc4efd5dd817741fdf28af6a5f8738a6eeb3f78a9fa2bbe8d61bf1a34c61728a4450c14e338d5b053d7e43a1f5c2fbc84f67da73dfb74c3f9e9b39f4c1cb3bf"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x59, 0xf000}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3bf, 0x81, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3e7, 0xff, 0x1e, 0x1, [@generic={0x94, 0x10, "cb7e33836b0972e6b699d774563a87b37ceedc2d2bc3d00e7ee61b409ad2dd7d2db02e061a7121d49318cf4ccf94abc775a4673d927abe3536fdbe925ca68ac5d095dacac03fd7d002a114ec57f55229aba00447df20ca0e027fd33b703734399c7778e9c8dc946f96f5c55146c03b9f7e10d3d234487e39db4c88742a37f9bfa59d1b4642236ec43ad17cbb4c0a9c301ce7"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0xfe, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x9, 0x0, 0x4, [@generic={0x101, 0x23, "517b0c6f9e61bd7ad318df2a6991a00f4685db793fbb39e3d52dc3dbe30479f4ee13d9e8a639d429807dccfdb4747108d622b854527f067addbb205e10d51c4ae201038282f5a84f17c1f274173419a64cc540a81acde55e0d287bfc4ca6862dbf0a1ebc7a71318145b1b1f261f91dba7d2a507ee6ba63123f7d32ef76ebb5959169ac52bc66f506d22097b7ec02504979bb7abf226fca86efd353cd9a640c81f082cdd31667bec73a4b0238f88c38e18eea96e8e4e407f91f0d5f778100e2042377d672fbee5337e6c98d40aa22e71da85ee4cca6982f30ff6618eb74cbcfcf7e6bbcf05f583dea9f6727bf5132fef587017a9df6dc63692fd4fabaa9d273"}, @generic={0x42, 0x22, "4bde976d0bb3fb815e918290d2eee3097de54dad2f693a6882bc457f92009c877598b2450b0430a047d687d0f82702d180f1fcc4601dca39f7cdb4f8b887a400"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x81, 0x81, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8001}]}}]}}, {{0x9, 0x4, 0xcf, 0x7, 0xb, 0x19, 0xc9, 0xc2, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0x564}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "cc"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x81, 0x3}, {0x6, 0x24, 0x1a, 0x8db, 0x8}, [@country_functional={0xa, 0x24, 0x7, 0x7, 0x5, [0x0, 0x3]}, @obex={0x5, 0x24, 0x15, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x2, 0xa6}]}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x20, 0x1, 0x28}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x3f, 0x9, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x7}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x0, 0x3f, 0xf9}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x12, 0x4, 0x2, [@generic={0x2d, 0x3, "4ffefea6d9917571b2a2e68647c64e396cc833b8f6960403a03ced2f29f5ee14c96bec8bbb021ee29db0fb"}, @generic={0xeb, 0x32, "a8b5909cc6c388b2965384aa9bfddcfd6ed4fc2a3744c98b576f4b3fd0f6cc250e0a816e3c4416d70fc32c20d1489724b76af3e8398e4ea19d33bef270d3c20a72c878ab5cdfab6f01ad70dcbe9e16bd6a6ae329fd7d057a4474e27e8af4aacd2dcecb57467c4ed9bb84575b8fcbccd21a92914ee4b353a30cc249bf917972cc1dcebad0cba2e0e14f030d9a1dd6e00144573e07275183cebcf9c5746729af615df405040f0a0b444f12762a146127af91b744eee893aa25f41edef7b0b2f1fb9fb798c138cbd542f490b20545d806e455b61d095eab2d4c537a3c0a5ea3179c527f1b36e0eebbb201"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x7, 0x3f, 0x7f}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x80, 0x8, 0x40}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x4, 0x1f, 0x7, [@generic={0xe3, 0x7, "081762765423381c4046bb3e192a1e08c396d3ee425bb0d5815b59a3755f6b59647fe03336e3df1ab015e1a1729fb3964fc0b58caec3882e2ac022e7578d047872af28c301c372eeaad3b857b0b9beb6f7b559e2b962de82cd29981812628c5350e4cdd5c2e635a981b76150f7e965963dc64634e2b910a3d03eba1f7c72ef4f3aa043d9f20178c9b3fc1928167cde8b6a6036ff3f02d8ce65786bb0acb1c10d5bb781ae329ee4f7193954560c3d734baa7884675871acaaf07a55855ca9e12b0baf8054b1213fcacc9faa6e0f08e78ee10578237943a38802d0311f6fd87ee101"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf7}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x38, 0x0, 0x6, [@generic={0x4c, 0x7, "ccd4679757d94418b67167b90fc3848a4cf6e846713236ca3b1e4a8a7e27585d299a7595cc174d2345077f4a2f135c86440bdd448f9a0290b18cf0fe063b0c7b41c1250892184e744b5f"}]}}, {{0x9, 0x5, 0xe8092f835e06ec42, 0xc, 0x10, 0x0, 0x1, 0x2, [@generic={0x7, 0x21, "6ca5763574"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x8}]}}]}}, {{0x9, 0x4, 0x9f, 0x80, 0xc, 0xff, 0x2, 0x48, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0xaa99, 0x8}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x20, "8a"}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x38, 0xc3, "d936d7ad1d39"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x7, "76bd9c61"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x2, 0x3, 0x6, 0x25}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x2, 0x43, 0xef, 0x80, 0x2}]}, @hid_hid={0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xd95}}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x1, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x9, 0x3, 0x7f, [@generic={0xfc, 0x7, "1cc08b69412b254d09ba4b6051ffc624525ea92e33f76f40c15428b08fb9254e9a313212525b5451808b37f737cdcb72bb5e42b354bafb2f07849afab003ee3acd1ee8e21d658e22b28e246b60eabf56387a09edf525bdc8cccfff8c40ef8564ed0f279d610c08c3293dc1e319000b7d23f422ed2f722346ecc2b18c865ee7fb35912f0dd33f93284981dccf0a42ca7f33749d05023f0baea41ae026cbda068d88bce7881e740903d6c4b906e32f0157ce8b51aea7937928d9b4d95a92490b2f2f6eef743826a074cf3bacdf0f88fbf09a7506eaddd24517fb18711de02a985838a22c95e004d70baadc5db97bcec023a6a481b8c3ccdafaf7be"}, @generic={0xdd, 0xa, "cedfa917aa758d2e8f5538b5c8c2d91638a4f4bad3658e41fee1a131f57d208bcb4fa4696cf5a7a4604f5477bf499433d751c6efbc60f0b48447add25f4e9736d7be3b2d95b9d0827903b4b00686afba81879d0a38492f0f0755cc0cd06d53b6ecf2027e6563bdde7ac1975535608ac2ee37473a082ca1afc8e5be1166e4632d66b1ddb0f8532ec633e9ae208197d40fc806baf079fed3713e3d8c9049261848eae1c1ec96816b407b69bec5a539081f5de9afb7e725fcf35c50471e726086d9f0f10c58f632959a30dc38105291eca313c6eb8d33eb3295921ac6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x40, 0xfd, 0x4d}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x5, 0x0, 0x7f, [@generic={0x7d, 0x22, "6f65ca6f7576e8d58988db20fbaf3a844c2f27c4496b83ae4fd06da120791828bfd0b4e306b85462a072a28efb33acabf138244088fea8b45064ffe63721ac22473a23c3b3c25842037a6f5954923122ccfde41fea72bf27b7e58f097bbca4d092bcd440939c8b88b7d8a6ffb28a832142a6e1ba6cd8e0ffd8c9c0"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x1, 0x0, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8c0}, @generic={0x5b, 0x8, "2f9ee3f54627b63a1f0c87231bb0e7067eb57d6c0e659d5d910a21755538cabc5c79a7a87c31574a1d34162d2e6533697d8c665a3c753e6f66343e1d14cd26d5437c276a69932dafa5ddb85563cace24374d45ef9882108200"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x6, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xfc00}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x20, 0xfc, 0x81}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x20, 0x7, 0xb8}}, {{0x9, 0x5, 0x8, 0x3, 0x1ef, 0xff, 0x1f, 0x4, [@generic={0x1c, 0x2, "24e5f01cef563d358b1714eb50a38859b78cbc5ce1c7bb180e06"}, @generic={0x58, 0xa, "cc3d0137c95b6829b55b57227fdb81b3499b7002479f53f2a272454929ef796bbd63d8044e4f3b6e399059b7f99de6ecefc6df7361dd4c8253cbff974284bc94038a801db16fecbeafa5cee65fd9e4d9bed66e1552eb"}]}}, {{0x9, 0x5, 0x8c, 0x4, 0x200, 0x7f, 0xa0, 0x3f, [@generic={0x90, 0x7, "b62f50b5e03d3447829f6cf24a0dcc65610647312ddc0ff9771c64df2e690a1daf6a58e95180ec49895ae50c502f3311d48f8d411e10daa691779cd71eaffeececf2a621d0b5da97ef327cb46fd8b71dbf123612245b56fb1e9175ab735797482601ac18e944a96739721539bae2e6f214d5f85cf55cbf64daa1c73caa310e1c4a4aad151b6deac837f3d646de26"}, @generic={0x79, 0x7, "35fa5730069230fef606d0d4cb58bbc251c497148a6a4ab11f8fc699c2cebad5037ac64deb2344787e792f6a9819bc78eb4d30ca1d85a73655128561b18cb455e428ed62a180c5a84a9d01c4d814bafd67f92531920bc25ec80f62ddad64dfa00e983c13a5e217c231462ee69fce76f76cf84f63e559d8"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x9f, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x3f}, @generic={0xa, 0x23, "334cb791c9fad7d4"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0x20, 0x54, 0x8, 0x40}, 0x4e, &(0x7f00000000c0)={0x5, 0xf, 0x4e, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xf9, 0x2, 0x20, 0x0, 0x2, [0xff3f30, 0xff000f]}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x2, 0xf00, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x20, 0x5, 0x8001, 0xf007, 0x1000, [0xff0000, 0xc6, 0x3f0f, 0xc00f, 0xf]}, @ptm_cap={0x1}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xa809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x54) syz_usb_control_io(r0, 0x0, 0x0) 10:05:56 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) open$dir(&(0x7f00000000c0)='./bus\x00', 0x80000, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, r3}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) r5 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000004c0)={0x5b0, 0xfffffffffffffffe, 0x1, [{{0x4, 0x3, 0xfffffffffffffffe, 0x7, 0x7f, 0x8001, {0x5, 0xfffffffffffffffa, 0xb6ac, 0x6, 0x2, 0x5, 0x0, 0xe85, 0x0, 0xfffffff7, 0x5, 0x0, 0x0, 0x1, 0x1548}}, {0x1, 0x100, 0x0, 0x20}}, {{0x5, 0x3, 0x0, 0x81, 0x8, 0x4, {0x6, 0x1, 0x2, 0x5, 0x4, 0x2, 0x7, 0x401, 0x10000, 0x0, 0x8}}, {0x6, 0x8, 0x9, 0x1ff, 'hash:mac\x00'}}, {{0x4, 0x0, 0x7, 0x8, 0x4, 0xffffffff, {0x3, 0x0, 0x7ff, 0xffffffff, 0x0, 0x6, 0x5, 0x90, 0x0, 0x3, 0x4, 0x0, 0x0, 0xf285}}, {0x5, 0xae7, 0x9, 0x7, 'hash:mac\x00'}}, {{0x3, 0x1, 0x0, 0x2, 0x64, 0x3, {0x2, 0x1, 0x5, 0x1, 0x5, 0x10001, 0xff, 0x33, 0x1000, 0x4abb090a, 0x3ff, 0x0, 0x0, 0xba9, 0xfffffffa}}, {0x5, 0x6, 0x5, 0xcfe9, '&{}^&'}}, {{0x2, 0x1, 0x6, 0x1, 0x567f, 0x8, {0x6, 0x9, 0x200, 0x3, 0x0, 0xcd10, 0x80, 0x1, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x2337, 0xffffffff}}, {0x0, 0x0, 0x5, 0x8, 'syz0\x00'}}, {{0x6, 0x0, 0x80, 0xff, 0x5, 0xffff, {0x2, 0x6, 0x9, 0xfffffffffffffff9, 0x6, 0x2, 0x7ff, 0xe6, 0x8a, 0x8, 0x7, 0xee01, 0x0, 0x1, 0xfffffff9}}, {0x4, 0x31b, 0x4, 0x8, '$)$-'}}, {{0x0, 0x0, 0x672e, 0x100000000, 0x0, 0x101, {0x1, 0x1ff, 0x3, 0x6, 0x7f, 0x4ab, 0x5, 0x6c3d, 0x0, 0x9, 0x1f, 0x0, 0x0, 0x44f9, 0x2}}, {0x3, 0x8, 0x5, 0x6, 'syz0\x00'}}, {{0x4, 0x3, 0x80000001, 0x8, 0xef, 0x9, {0x2, 0x1, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}}, {0x2, 0xffffffff, 0x2, 0x0, '|.'}}, {{0x0, 0x0, 0x0, 0x7, 0x0, 0x0, {0x3, 0x2da, 0x6, 0xe3, 0x9, 0x0, 0x6, 0x3, 0xd97, 0x3ff, 0x24, r4, r5, 0xb92, 0x3}}, {0x0, 0x4, 0x0, 0x5}}]}, 0x5b0) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0x0, 0x7, {0x7fff, 0x5, 0x0, {0x2, 0x2, 0x3, 0x8, 0x5, 0x6, 0x0, 0x430, 0xff, 0x0, 0x6, r3, r5, 0x10000, 0x9}}}, 0x78) 10:05:56 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 10:05:56 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x1d) ptrace$cont(0x11, r8, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x401, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2}}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) 10:05:56 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x6, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1235.866691][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:05:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) [ 1235.892452][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.892470][ T17] usb 1-1: Product: syz [ 1235.916696][ T17] usb 1-1: can't set config #1, error -71 [ 1235.917953][ T17] usb 1-1: USB disconnect, device number 30 [ 1235.994708][T21657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:05:57 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x7, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:05:57 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@mcast1, @loopback, @private0, 0x7f, 0x9, 0x1, 0x200, 0x4, 0xd0010, r6}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1236.129659][T28420] usb 6-1: new high-speed USB device number 19 using dummy_hcd 10:05:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) 10:05:57 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) getsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) copy_file_range(r1, &(0x7f00000002c0)=0xd9, r4, 0x0, 0x7, 0x0) r5 = dup(r3) dup2(r5, r1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x40, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}, {0xfffffffd}, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) read$FUSE(r5, &(0x7f00000012c0), 0x1000) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x5, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) 10:05:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) [ 1236.316717][ T17] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1236.366562][T28420] usb 6-1: Using ep0 maxpacket: 8 [ 1236.428293][T21674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1236.494251][T28420] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.494301][T28420] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.587292][ T17] usb 1-1: device descriptor read/64, error 18 [ 1236.647510][T28420] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1236.661445][T28420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.680079][T28420] usb 6-1: Product: syz [ 1236.684350][T28420] usb 6-1: Manufacturer: syz [ 1236.690391][T28420] usb 6-1: SerialNumber: syz [ 1236.976616][ T17] usb 1-1: device descriptor read/64, error 18 [ 1237.246626][ T17] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1237.395952][T21639] udc-core: couldn't find an available UDC or it's busy [ 1237.410585][T21639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1237.451578][T28420] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1237.460576][T28420] cdc_ncm 6-1:1.0: bind() failure [ 1237.502980][T28420] cdc_ncm 6-1:1.1: bind() failure [ 1237.518914][T28420] usb 6-1: USB disconnect, device number 19 [ 1237.526449][ T17] usb 1-1: device descriptor read/64, error 18 [ 1237.926486][ T17] usb 1-1: device descriptor read/64, error 18 [ 1238.046559][ T17] usb usb1-port1: attempt power cycle [ 1238.206390][ T3791] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1238.466414][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1238.606396][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.626319][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.756519][ T17] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1238.816675][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.825735][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.847043][ T17] usb 1-1: Invalid ep0 maxpacket: 3 [ 1238.853023][ T3791] usb 6-1: Product: syz [ 1238.876369][ T3791] usb 6-1: Manufacturer: syz [ 1238.880988][ T3791] usb 6-1: SerialNumber: syz [ 1238.916771][ T3791] usb 6-1: can't set config #1, error -71 [ 1238.926832][ T3791] usb 6-1: USB disconnect, device number 20 10:06:00 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="1ba54cfd20d98662314ace59b051697b41cea18c329e6e339c4e02ec6e7081eb45fdb04eb69839434353160aa660505df0358b525d4d09c02dbb220de4758a4af954911339e0d3e3b843a00d7af47b58a94c7a87efa7489c26af902ee94973d92d712a28e98aa7631def75b81c2c7eb5a05b5689ae820f4267a0b04fc4122806b1497214f7f75a205f37fda505a75c11999c5cf6e138aec4b715777fc960c2a3cba993b0b4e412d18198e12a0074ac3dd7828d5052c8f9ce30d90b758b07126f3bd2d1c6ccc7b4001a76ca77b07406eb28981c41cbf1c73053f2465b", 0xdc}, {&(0x7f00000002c0)="f132006d1b794ecf98320b8af8d92cb66e7e065653ef451dc9821b8c124a97dfc4db9907822165d2a3cd4f2cda9e7bf5834aa1814e9ad493be120543abe0c69d7ddb308145f86ddf80b4a91ecda52f772ebe32223685c8c81be5cae26a0f0839cdf70aea5052e10722eee6a238118f7169b26bd53639ac", 0x77}, {&(0x7f0000000400)="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", 0xfb}], 0x3, 0x2) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) write$FUSE_GETXATTR(r3, &(0x7f0000000000)={0x18, 0x0, 0x8, {0x5}}, 0x18) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1238.996313][ T17] usb 1-1: new high-speed USB device number 34 using dummy_hcd 10:06:00 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={&(0x7f0000000000)=@ethernet={0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="293f48d36dd5a811f23c945ef5809e08cec88649762e1bf56f85df9960f63921be8095030471c1e464097364261d4da0b99f433c8594965fd74072", 0x3b}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000000c0)="d768a6ad74eb9e6380dc7158c0666914948df6f1a8fc0be50fd6423ff88a8a180e2aadea9c95379a014ea9a8dae4166f22a015147c7e3d825e20f1b18a4f965b774019c9665bd0e8f24d6ebdbe29f33144921b74ffd0e827a01b5f1d3492d3e609cbd21b9f8e4186599bc86d5537ed985ec5e5e5c6f0ffed6db883962d4adfe6f828fda7451497e56b0ca4718423f3201eedf96ad7b6f4", 0x97}], 0x3, &(0x7f0000000300)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x1f}}], 0x34}, 0x880) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x2) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) io_setup(0x1, &(0x7f0000000300)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x20000004003}) io_submit(r3, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r4, &(0x7f0000000040), 0xe}]) io_pgetevents(r3, 0x8, 0x4, &(0x7f0000000400)=[{}, {}, {}, {}], 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={[0xff, 0x90000000]}, 0x8}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x8, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x7fff}}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x20a1, 0x30, 0xffffffff00000001, 0x8000}, &(0x7f00000000c0)=0x18) r5 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000040)) 10:06:00 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) getsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) copy_file_range(r1, &(0x7f00000002c0)=0xd9, r4, 0x0, 0x7, 0x0) r5 = dup(r3) dup2(r5, r1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x40, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}, {0xfffffffd}, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) read$FUSE(r5, &(0x7f00000012c0), 0x1000) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x5, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) 10:06:00 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$sequencer(0xffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000380)={0x0, {0x7, 0x8}}) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r4 = pidfd_getfd(r1, r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='\x00'/14], 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="dfd2e4f09413d4bbaa93e06cd77bb08569c9541caf82188174b438b6deb385c4fc66970db6223834b6e296baea178e8655c2ea125cfeafef109fb60a29de4a41290cbddb811f5ca9676feafa6834c2ba2f64906e8c81ac6bdab546a3ef763bb0eee21de605a9ef5863", @ANYRES16=r6, @ANYBLOB="820c2bbd7000fedbdf250000000008000a0003000000"], 0x1c}}, 0x20000084) creat(&(0x7f00000001c0)='./bus\x00', 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) syz_usb_control_io(r0, 0x0, 0x0) 10:06:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x300, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffffff34, 0xfffffffc}, {}, {0x6}, {}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x22, 0x0, 0x2}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1239.506426][ T17] usb 1-1: device not accepting address 34, error -71 [ 1239.507642][ T17] usb usb1-port1: unable to enumerate USB device [ 1239.666568][ T3791] usb 6-1: new high-speed USB device number 21 using dummy_hcd 10:06:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x500, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1239.936467][ T3791] usb 6-1: Using ep0 maxpacket: 8 10:06:01 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x6f) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000020c0)=ANY=[@ANYRES16=r2, @ANYBLOB="30017008ae1ae8"], 0x18}}, 0x8001) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x2dc, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x418, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9d6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x712}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @local, 0xea}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6ca}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf6b3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa83d}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x166}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x514}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x11400000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21c000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r3, 0x6) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f00000005c0)=""/196) 10:06:01 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) write$ppp(r2, &(0x7f00000002c0)="2463b46ff5ba04b52ae0204f7f193254dc16a999885c5a0705ad91f2e66f7328ae236caa40ea6bba8a44ef4aeab7143e108f7014da62ec48dafc4e03c69c1d1fa080c62babd614a36f223aea71b97b5e2d65e5c89853785f62e5ed334164dbea75adcddebc0cd1a383f1e70cf7238675218a085039ddc534367d5ae9e92c079f33ca0190c28486807a91cca1116a0c5a4b3fe35e", 0x94) 10:06:01 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) getsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) copy_file_range(r1, &(0x7f00000002c0)=0xd9, r4, 0x0, 0x7, 0x0) r5 = dup(r3) dup2(r5, r1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x40, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}, {0xfffffffd}, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) read$FUSE(r5, &(0x7f00000012c0), 0x1000) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x5, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) [ 1240.086952][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.087003][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:06:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x600, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1240.286280][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1240.286298][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.286312][ T3791] usb 6-1: Product: syz [ 1240.286326][ T3791] usb 6-1: Manufacturer: syz [ 1240.286341][ T3791] usb 6-1: SerialNumber: syz 10:06:01 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000001, 0x50, r1, 0xa3d3e000) ioctl$USBDEVFS_BULK(r1, 0xc0105502, &(0x7f0000000040)={{{0x1}}, 0x1f, 0x9, &(0x7f0000000000)="9789b16974acd878f612b459d532bbc8c077831ae70bd3e6c0a60aed90532a"}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x700, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:02 executing program 4: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000000)=0x965, 0x4) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x3c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x2, 0x0, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1241.022593][ T3791] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1241.031566][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1241.058913][ T3791] cdc_ncm 6-1:1.1: bind() failure [ 1241.072274][ T3791] usb 6-1: USB disconnect, device number 21 [ 1241.852183][ T17] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1242.116035][ T17] usb 6-1: Using ep0 maxpacket: 8 [ 1242.236756][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.252285][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:06:03 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x44) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x5, 0xfff7}, @timestamp, @window={0x3, 0x6, 0x532}], 0x3) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x20000881) 10:06:03 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) write$ppp(r2, &(0x7f00000002c0)="2463b46ff5ba04b52ae0204f7f193254dc16a999885c5a0705ad91f2e66f7328ae236caa40ea6bba8a44ef4aeab7143e108f7014da62ec48dafc4e03c69c1d1fa080c62babd614a36f223aea71b97b5e2d65e5c89853785f62e5ed334164dbea75adcddebc0cd1a383f1e70cf7238675218a085039ddc534367d5ae9e92c079f33ca0190c28486807a91cca1116a0c5a4b3fe35e", 0x94) 10:06:03 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0xf}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000080)=0x4) flock(r1, 0x6) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f0000000100)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000000c0)={0x4, 0x9, 0x1}) ioctl$DRM_IOCTL_GET_STATS(r1, 0x807c6406, &(0x7f0000000000)=""/88) 10:06:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0xff00, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1242.486156][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 10:06:03 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008200)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/246, 0xf6}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/238, 0xee}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/173, 0xad}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f0000001f40)=""/81, 0x51}], 0x9, &(0x7f0000002040)=""/177, 0xb1}, 0x5a499028}, {{&(0x7f0000002100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000002180)=""/232, 0xe8}, {&(0x7f0000002280)=""/134, 0x86}, {&(0x7f0000002340)=""/247, 0xf7}, {&(0x7f0000002440)=""/166, 0xa6}, {&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)=""/124, 0x7c}], 0x6, &(0x7f0000002680)=""/225, 0xe1}, 0x40}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002780)=""/207, 0xcf}, {&(0x7f0000002880)=""/134, 0x86}, {&(0x7f0000002940)=""/19, 0x13}, {&(0x7f0000002980)=""/199, 0xc7}, {&(0x7f0000002a80)=""/31, 0x1f}, {&(0x7f0000002ac0)=""/131, 0x83}, {&(0x7f0000002b80)=""/90, 0x5a}, {&(0x7f0000002c00)=""/206, 0xce}], 0x8, &(0x7f0000002d40)=""/131, 0x83}, 0x6}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002e00)=""/161, 0xa1}, {&(0x7f0000002ec0)=""/101, 0x65}, {&(0x7f0000002f40)=""/170, 0xaa}, {&(0x7f0000003000)=""/243, 0xf3}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x5, &(0x7f0000004140)=""/254, 0xfe}, 0x7}, {{&(0x7f0000004240)=@generic, 0x80, &(0x7f0000004340)=[{&(0x7f00000042c0)=""/81, 0x51}], 0x1, &(0x7f0000004380)=""/33, 0x21}, 0x3}, {{&(0x7f00000043c0)=@generic, 0x80, &(0x7f0000005480)=[{&(0x7f0000004440)=""/47, 0x2f}, {&(0x7f0000004480)=""/4096, 0x1000}], 0x2}, 0x1}, {{&(0x7f00000054c0)=@alg, 0x80, &(0x7f0000006880)=[{&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/251, 0xfb}, {&(0x7f0000006640)=""/63, 0x3f}, {&(0x7f0000006680)=""/198, 0xc6}, {&(0x7f0000006780)=""/199, 0xc7}], 0x5, &(0x7f00000068c0)=""/101, 0x65}, 0x4}, {{&(0x7f0000006940)=@generic, 0x80, &(0x7f0000007d80)=[{&(0x7f00000069c0)=""/119, 0x77}, {&(0x7f0000006a40)=""/1, 0x1}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/235, 0xeb}, {&(0x7f0000007b80)=""/38, 0x26}, {&(0x7f0000007bc0)=""/8, 0x8}, {&(0x7f0000007c00)=""/235, 0xeb}, {&(0x7f0000007d00)=""/65, 0x41}], 0x8}, 0xffff3d44}, {{&(0x7f0000007dc0)=@nl, 0x80, &(0x7f0000008140)=[{&(0x7f0000007e40)=""/37, 0x25}, {&(0x7f0000007e80)=""/168, 0xa8}, {&(0x7f0000007f40)=""/238, 0xee}, {&(0x7f0000008040)=""/214, 0xd6}], 0x4, &(0x7f0000008180)=""/82, 0x52}, 0x1}], 0x9, 0x20, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000008340), 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) r6 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)={0x658, 0xfffffffffffffffe, 0x1, [{{0x4, 0x3, 0xfffffffffffffffe, 0x7, 0x7f, 0x8001, {0x5, 0xfffffffffffffffa, 0xb6ac, 0x6, 0x2, 0x5, 0x0, 0xe85, 0x0, 0xfffffff7, 0x5, 0x0, 0x0, 0x1, 0x1548}}, {0x1, 0x100, 0x2b, 0x20, 'C\xdc\xbc\x91s\x03\xc0\xbf\xe4\xbb\xe6\xd4or\x84|\xbc\xba\xde=\xdd\x83k `f\xeba@\xd5\xf2\xc6\x1d\xe5\x19\xc1AF\xa27\xe9>F'}}, {{0x5, 0x3, 0x0, 0x81, 0x8, 0x4, {0x6, 0x1, 0x2, 0x5, 0x4, 0x2, 0x7, 0x401, 0x10000, 0x0, 0x8}}, {0x6, 0x8, 0x9, 0x1ff, 'hash:mac\x00'}}, {{0x4, 0x0, 0x7, 0x8, 0x4, 0xffffffff, {0x3, 0x0, 0x7ff, 0xffffffff, 0x0, 0x6, 0x5, 0x90, 0x0, 0x3, 0x4, 0x0, 0x0, 0xf285}}, {0x5, 0xae7, 0x9, 0x7, 'hash:mac\x00'}}, {{0x3, 0x1, 0x0, 0x2, 0x64, 0x3, {0x2, 0x1, 0x5, 0x1, 0x5, 0x10001, 0xff, 0x3, 0x1000, 0x4abb090a, 0x3ff, 0x0, 0x0, 0xba9, 0xfffffffa}}, {0x5, 0x6, 0x5, 0xcfe9, '&{}^&'}}, {{0x2, 0x1, 0x6, 0x1, 0x567f, 0x8, {0x6, 0x9, 0x200, 0x3, 0x0, 0xcd10, 0x80, 0x1, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x2337, 0xffffffff}}, {0x0, 0x0, 0x5, 0x8, 'syz0\x00'}}, {{0x6, 0x0, 0x80, 0xff, 0x5, 0xffff, {0x2, 0x6, 0x9, 0xfffffffffffffff9, 0x6, 0x2, 0x7ff, 0xe6, 0x8a, 0x8, 0x7, 0xee01, 0x0, 0x1, 0xfffffff9}}, {0x4, 0x31b, 0x4, 0x8, '$)$-'}}, {{0x0, 0x0, 0x672e, 0x100000000, 0x0, 0x101, {0x1, 0x1ff, 0x3, 0x6, 0x7f, 0x4ab, 0x5, 0x6c3d, 0x0, 0x9, 0x1f, 0x0, 0x0, 0x44f9, 0x2}}, {0x3, 0x8, 0x5, 0x6, 'syz0\x00'}}, {{0x4, 0x3, 0x80000001, 0x8, 0xef, 0x9, {0x2, 0x1, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}}, {0x2, 0xffffffff, 0x2, 0x0, '|.'}}, {{0x0, 0x0, 0x0, 0x7, 0x0, 0x0, {0x3, 0x2da, 0x6, 0xe3, 0x9, 0x0, 0x6, 0x3, 0xd97, 0x3ff, 0x24, r5, r6, 0xb92, 0x3}}, {0x0, 0x4, 0x74, 0x5, '\xcaFk)\xa0\xb1Tj.\xd8\x965\xcaZ\xd4\xdc\x9b%\xb2\x91Ld#\x1d|D\x15u\xce\xda\x85\xc3\xabg\x0e\xd8\xb2\xab\x8b\xb9\x91\x95\xeb\'\x9e\x14WB\x8b7\x8c\xc3\b}\xd9\xa6\xc8b=X\xe2gfmX\x11a\xb3\x1c\x94\x16\x18\x12\xc6*\xbc\t\x91\xcb\xfc\x1a@/\xc3\xe9\xfa\x89N\x95\xd9k\xb9\xe9z\xd0\xd0x\x9a\xcf\x95\xc3\f\xb4\xb2x\xa5\x01\xf5\x91\x1f\xaf\xcab\xb7\xa9\x14'}}]}, 0x658) fchown(r3, r4, r6) [ 1242.506630][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:06:03 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) write$ppp(r2, &(0x7f00000002c0)="2463b46ff5ba04b52ae0204f7f193254dc16a999885c5a0705ad91f2e66f7328ae236caa40ea6bba8a44ef4aeab7143e108f7014da62ec48dafc4e03c69c1d1fa080c62babd614a36f223aea71b97b5e2d65e5c89853785f62e5ed334164dbea75adcddebc0cd1a383f1e70cf7238675218a085039ddc534367d5ae9e92c079f33ca0190c28486807a91cca1116a0c5a4b3fe35e", 0x94) [ 1242.506645][ T17] usb 6-1: Product: syz [ 1242.526988][ T17] usb 6-1: can't set config #1, error -71 [ 1242.528511][ T17] usb 6-1: USB disconnect, device number 22 10:06:04 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x800) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x1000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:04 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) write$ppp(r2, &(0x7f00000002c0)="2463b46ff5ba04b52ae0204f7f193254dc16a999885c5a0705ad91f2e66f7328ae236caa40ea6bba8a44ef4aeab7143e108f7014da62ec48dafc4e03c69c1d1fa080c62babd614a36f223aea71b97b5e2d65e5c89853785f62e5ed334164dbea75adcddebc0cd1a383f1e70cf7238675218a085039ddc534367d5ae9e92c079f33ca0190c28486807a91cca1116a0c5a4b3fe35e", 0x94) [ 1243.015955][ T17] usb 6-1: new high-speed USB device number 23 using dummy_hcd 10:06:04 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) setpriority(0x0, r1, 0x81) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:04 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) preadv(r0, &(0x7f0000000040)=[{}], 0x1, 0x1, 0x7) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) close(r1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x25}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000000000)=[0x6], 0x0}) [ 1243.256130][ T17] usb 6-1: Using ep0 maxpacket: 8 10:06:04 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1d) ptrace$cont(0x11, r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, r5}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) r7 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000004c0)={0x5b0, 0xfffffffffffffffe, 0x1, [{{0x4, 0x3, 0xfffffffffffffffe, 0x7, 0x7f, 0x8001, {0x5, 0xfffffffffffffffa, 0xb6ac, 0x6, 0x2, 0x5, 0x0, 0xe85, 0x0, 0xfffffff7, 0x5, 0x0, 0x0, 0x1, 0x1548}}, {0x1, 0x100, 0x0, 0x20}}, {{0x5, 0x3, 0x0, 0x81, 0x8, 0x4, {0x6, 0x1, 0x2, 0x5, 0x4, 0x2, 0x7, 0x401, 0x10000, 0x0, 0x8}}, {0x6, 0x8, 0x9, 0x1ff, 'hash:mac\x00'}}, {{0x4, 0x0, 0x7, 0x8, 0x4, 0xffffffff, {0x3, 0x0, 0x7ff, 0xffffffff, 0x0, 0x6, 0x5, 0x90, 0x0, 0x3, 0x4, 0x0, 0x0, 0xf285}}, {0x5, 0xae7, 0x9, 0x7, 'hash:mac\x00'}}, {{0x3, 0x1, 0x0, 0x2, 0x64, 0x3, {0x2, 0x1, 0x5, 0x1, 0x5, 0x10001, 0xff, 0x33, 0x1000, 0x4abb090a, 0x3ff, 0x0, 0x0, 0xba9, 0xfffffffa}}, {0x5, 0x6, 0x5, 0xcfe9, '&{}^&'}}, {{0x2, 0x1, 0x6, 0x1, 0x567f, 0x8, {0x6, 0x9, 0x200, 0x3, 0x0, 0xcd10, 0x80, 0x1, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x2337, 0xffffffff}}, {0x0, 0x0, 0x5, 0x8, 'syz0\x00'}}, {{0x6, 0x0, 0x80, 0xff, 0x5, 0xffff, {0x2, 0x6, 0x9, 0xfffffffffffffff9, 0x6, 0x2, 0x7ff, 0xe6, 0x8a, 0x8, 0x7, 0xee01, 0x0, 0x1, 0xfffffff9}}, {0x4, 0x31b, 0x4, 0x8, '$)$-'}}, {{0x0, 0x0, 0x672e, 0x100000000, 0x0, 0x101, {0x1, 0x1ff, 0x3, 0x6, 0x7f, 0x4ab, 0x5, 0x6c3d, 0x0, 0x9, 0x1f, 0x0, 0x0, 0x44f9, 0x2}}, {0x3, 0x8, 0x5, 0x6, 'syz0\x00'}}, {{0x4, 0x3, 0x80000001, 0x8, 0xef, 0x9, {0x2, 0x1, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}}, {0x2, 0xffffffff, 0x2, 0x0, '|.'}}, {{0x0, 0x0, 0x0, 0x7, 0x0, 0x0, {0x3, 0x2da, 0x6, 0xe3, 0x9, 0x0, 0x6, 0x3, 0xd97, 0x3ff, 0x24, r6, r7, 0xb92, 0x3}}, {0x0, 0x4, 0x0, 0x5}}]}, 0x5b0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000100)="1495cc0bac7d4f36d991c5b8dddf2433740ab1cc217d335852274a5d19594491cb6c09318debd3fb89261987d707df4bc34f99530e678d58c0ec5ee1ffdb6533c9c9097ea5b161d37923721f", 0x4c}, {&(0x7f0000000180)="719a311affae49ba0adc95bf4fc8e3c461a7b266af9c67fd6f15b8585e201835c7f93e6d092a55c429e203695063dcb2ce585a3d7aa288cde92d5502b0e974eea49ee825", 0x44}, {&(0x7f00000002c0)="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", 0x1000}], 0x3, &(0x7f0000001740)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0xc}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1, r2]}}], 0xf4, 0x5000}, {&(0x7f0000001840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002940)=[{&(0x7f00000018c0)="e7072a6b21368c32358f9bff39fa299fdcd1a41929b4713b6a3a1c5d3e78467e33e97dbce2a2e0623015e541f184bcfd34d650015ea26f432dc7790bc05e2d8e7d627919b74b2359557b7bc938e43bdfc06aa480b2353923364b90fd258fcb40f2c1065a7eaa2eaea068940645a432b780853b7db907def05540232f512c4c94b642eeb87a5b022c416ef794b84ece2be4ef89100bbe5c06a7fc63b85b657d9f2e3b3fa04176ccc032589825aed11eb6b5aaa90d49eeb96d51af92b9e4995c22616208224ede97e6ea3ba5a477771f57d4ef0783232b1ebd795db7fc0bf2c35cd1c8cc08d5db9311651f28458e48b897c8ca016573c4a41ad4b5e6d95035484073cbcf1bf25f690c2564ca6ce865e3500138f14ece7db80aa02445991dfa9dbbe6c1ac73d7848cf1dfc37090b85e608593d906f8ed8cd1dad37943e7ca438f753fcebb17cb44495fc0d7d8284a9816b770ef87481ab97c7d1337d810fe12aceca3b2eabd2894cc47c180880d9b2c066c4991c73ff536a4ce57052461dcfe5655bcb6c9c7dc728acb3d30d1b0ec937d67509d381477f2cc04543e078d0a13f1ce928189069cd57f7b033783c372c1e8f4d95a818fb4b48bd69e4ab78f95d35d930044562b14cc2975c4b273aa8cc62b8b1de3d571bc089362b8daeb8fd10e5529d0696b17858deddc222807d3ba772071eca1ecc845d7cb69121a26382cb948e9b11f0b278c08ee774b2ce6c1c6a686783fa6b7264b89d5d230821010ae1c76cff4df34c2047cfa5e751fee1d39086f6958c85e928537f91635408679f286adf2bef898113d1cc86dc6ade8a5bb5fcaaa2c8dea4ea2abd5182e8865010737bafebf9b5ba97fa7ebb10daf37120b27b288bd48cb137299d03781dedec786e1aa3a56c74da9e2d698d5e33d4615e599fc8b2b0db7276a4cb6b892b73b920f1a22fbc9c9b6f05f9a4c217fcf073f7145f2b13836023b3cd6f8b5c79435a9523e02dbb5dfb40039e2632b3e3250fd34c78bde183bc21033f3bd7fb6e7e2c4d6d95ae2ce0b9b50cdbe34d4d0af6fa4dd9f3939195a7a77d5e29494d886e0633938174ead2b412e3e1297fec2aa3fd4094b6ffe945b2d551545754027dde6cb5b22c9e8da48c90504e26fc00ed5268787cd744abefb6357ed223a74bb2c1cfa10fc64403125d0336d19495f355d8514c1aa1e75bcc05d0bd6e1369c23ad8639da04a03d76fca8dcae0cb8fb7df8f44d67eb87bb36b0e9292737b28cd55249540da8e2984a6abba397ff8baffbf26f9626e7673e135dc03b36b4b06c4e26241159750e3b59e725826bb3ab77906adf862a26d193ea5111d1aadb18605958e005521e31966423f42ad0091eba354fa2d0d559ab4c6c7d1faa37ddb1ba3063942dfb8b1d4894e1039f82bebefaaf8898ce585441ab7f071f12439ac38912d73d79b8cf6eccbba261164c555d98cc5b495325222cf0a82fbaf6e2c9e83648793ad4a867df6f42eb8741213fbb39f39a88739186aee6cbb0ba850e9844279af964f895dcf744b42a13e9e5dbff5c9cc300d771306e50e11eed160a39825b7a5b95b2cd0a94cf95c8e7e914c55982c9096f4de0617de0e32d22f36683dee87d8d08a269ddba7c9b6a73eda6219527acc370825d7c113b60a8fc41db9115c0f0816b611dd3d92536ac6efd58fe21771937cbe07123203bc84335c82e41ccdafff56ce7bde424902e45fb9078968c250f916beb2d04a7efde2f3666c4a0409f98131728b280930213ba260180cfb394f777797ac6f71648564b096deb397650b1eb1aa8e87b4f0b7436f77fad90bc42591917afbeab81a702bdde9eed450a252c02049b9227fde2d05d2ff4d846f4276999766e9c3445f8ab04fbba34dfbe7121d55f5f4cec697cf267018744436c14d7099e4297cf16109f2fa1e9cb796fd7e27d27390f887f1c7c234c2b28a2374406b9309ffd3d09282ac21dfd2f8905805fb0d4ca6fa9495828ad3327d6d543ecbda4159070dd287877fec26110e0965154c8bd807fc1bc436031db6a5a24f14b1e75962c0c3b4996e693b845de8f9b4424a070a6e5116196377020e3d4e63c49d2f442d3d245a05b41176e22c82a22617859e67893109df15a9ad3cd654f503c9208aa3d0f1abea75fd3f65cb5313c01ba1c88d2efd53270307cce742197b007bb917144ceba0e395c8607a15ac6f0159b391f6acdf041e5caf6e8aea70bff4074ced3daf53d746a5fef0766d28a01258afdc672f9ba7cd9daafa37e78f3da6ef9baa3b8b38d97e883127a442207cc7eec14835611069bd2b20145ee3e29113c332cd14d5c3c79274b37192ff411d87fbe408ed906dcad4b13b1033f3ceac3f81be82366511e901409e33241bf1afddee6229caa6d6822dca38be8a83c0f3d331554a02fb0ee119e614d47e6a3dd806ba7b3276437a00ade5ecd7dcc0a3811644e94ed500762f144c45a648667b3cfbad7db97acb08cc13bc6b40514445e52ce24e8db43f5a44bfd9a57dcaf5f7b1040befd6ac710e840f554ced14e5bd7a8563886fdf9f61011fbb46544fcb6ee71b0fc27792e29f24b3c7f58168037e7eb00a706244c6e74e02015005dac4ee8ab98538bf6865a8940882586f18836851ef99c04778d6a0f03d325e31d8fb7ef438c5913628b3303980c1f7b9128d4de4a269804c3420192ad9e8f919f3334484e3e3e38c76375591e49847b2bf276e938411835af2b0d4bd459500f6c381ffb5ce5cd7b476f53ba9b837b0a6b77842b2fd5e88564347a8378c10b4574b322abe720b13d8eafb8300a8ec1ad787088da218625d75325a140c935a07ccaac560fb87114235e5dfa51ba19f2f7823a5cab9f8d5eec6c0889d905383a891515f5dbafa697e2685b04b1e8ac2f76c136d350c62eb5542a7602597f26880c13b0ddf71ccdf6a82de20a57a7486cd44918e3f23743a53efb4b73c94e8c53ed7bdfab594863598d7fb85d0b663abbe9cec3fc9e243da0fec905a019309f5c1be3a7b97386d91625d767639d7f334ff4583e2668f6ff1dcb583046413df592261ceceec5f4e65fb76e913243787895773f463e3488c30d1112bca1e9c47e388ce2fd7c770ec33edfa7a8e58a25af08f48de42bf969569f7133fbfdeaa31e95f64e8d7f51aa1ce96bdc753a15562bc25133b2dd33e81a4c828aeaec315755c5dadd6d82605ae0c7b4b159014f8cdde7a4bc07971a08d3593789b07c8a66c3fd243941555a8986affb97d970acb5a8c422315125330fc5fb37111949165049f9765c651354bc6ee2ddb961170d38ddf406d81ee8ef5b6a61e4f93444fb9c6ba3d05ab0cbb3ad0f1f3ceaacd8340515415802bf3dfd286d4c35d0745ca809009297982d3e0cdee33a0ac5d9eee00e846e2d6a3e7f62c9be5f131ecd787498339893f10e2c9719f32796f98223917ebc4da9a754d3dac59bec8304dd0613638d78f2248d2ee9ccdc4f03976d46e171e9042a1419839a71abc7b66d11b8e95d4b92268345d46f85c36a01fd67ff95f7c29a271e236bca774221adaede08e8b4e5bc618468fb2b72265314e5ff440a7adcd1f1cc5356baa1721576e0bea4d6a8dcec53dddb02f4ffd54ea1a7dc6a170ee2cd689cbe6d842f720b132f125de86dc1ed38d653fd0c53c00289e7ca4953a511f772e7e43f35dbe14535035ba2e042d85abeb32e2ea060708dc041f386ff158e63250ab75b6b400cfc8b457485dd6d3f9e576ef89beda3c04fb491d5264554387653cd6c7e053a94386481c8336d06979082dd48359b2fc0678cf629251fbd0408e1acd50164dbbe3222e26d4c711dd2aac88852ad1c3e1f286c3c61e96c4d1e7647b5202c53276ddb180937877681cd05e7d1ce8c097387d09e1ed0af381cac3fea64aaadca6ea38ec23243a93c8b89e9b6140ce85fb0d7fa903fe0218160495dfba8c39c84ef7f3866d186e80889b369b3ef48ca657ee052bd1fc648ca85b0d17a3809d46b4a9e46829ca4c70d36a4d81cf51b1018a119dee8896928b314301321eab387e6279f428c74d3fba1a96aecd4e069459915a296f78e04aa2ebd2a7c16c64a483674b9a81770bd7eecc313b39d666011e5f2f0079364b5203b863161cfa9932baab29ef761cedaec768e4eafd2b9e1c03b731c72f1c698d66b4bfb9e69a0c537910691a461c13b25c28a60d463927788ae74fafb1dcfbaa251865f2aad88c54fd6898a55f9e0990af26de0b50f75f42c0b366178a0f2f81896fbeffa6f26503055c8d39bee6c9645476cb54030f89141c6bd953a884555d428f9d932900ae7e7aefb9c5bff6d45f3850ed83b8189d7ad68603e83cfd3176859f28dde7dcc72e33c104697bfcfd8afa61518d655bf0c78592eb4a043ea9b3abed0d0cbf64061e6875bc2c78cc69252dc99d0929889e6dffa0c7ab4288cb9de767d7a5bb8273624e70c2b1976b533db520baa7d5af1c83f470bc25b4ff3dbd58dce917b505bd4e44058fe0437a5c19e8efd746a3823a7a07f6ab528df2c172e918786c196b7f8169b1db952754c68791944a5b95197ce6697029451e655473a3b51ee85df1aeee3c9ba708640915598109025b699a523b2f396d93ee7ce06de5f2ae434837bf3fa66a06fc6f96925651f2d8c71d8b75cec5f153060911892b5024c7496ec05faf61d85f0b81cf691c7f2faa3a2bae2b80325ce2308976156b241a4851ff1a2b62bd4d63b578d075b8eea27f774af4b597b57c4e0e5b5907e10cb5354023bff6dd7e7fcbd77d28694d8c647b986e00329c1965e5653066de813b225f6cc3b5b256ace7945e085af74c1672ae72e4a01f29ba3c75ee8393cfefe6103dc24b563c53489e65245f7f4bae90b31a6ad716c6bec865a36e68ea1cd75b2bf109555ebaa8dc71fad419db328b8d8fb735ba100fc922c3db3b0e07af7973643c1bb809ce004da51aaabc2a4d434fd4e048bec3f2bd3d5bac204eaf6b2901f42f2f4602cd1ce65928e3b0dc2ba7d6daedab7ed643b2f6e8312608c923f91b01accf6129defedf2f1ba9121cd3d54406221d729648da86b17800d87d798e24e5124512b80328e8daf241de9306c491f225a9495e6cec162354edc498520f189d922679b007caf442a5fcf514bd5c57d809385fbcd4033957d3645bc285bbcd19f7a4a91c7ead8bc32ba55c04b616e228a61785512088ecb0dfd15b49c18ceb3f50864fbbde52face95e1eb711eba41379da32e3c1dc1f633e879630932f79b9dbfc9deed252f3484921c3ad20f3aa0e8351a81f3bcaa49a42d3d6cd56929e3652572c83d825e39f58572966145649a2e1c01bad48db28109cacfa9f9d7961028ec955e7c0246c2cd3bef9aaac94408e93ac2a1807cd50381aba6e6724f04b04f370706ee67bd64c27d588adf50b58d556d41d8de00387f08743a0e6690778a52fe800f217485763db9dc09edc6fa9737308bef64e33252567ee0cebf00ecb730356dd0f89e13561d1fb48466eea401f164bfa1ef7eddcc5748af1e7e301d811f117808af5c45db98535533b4eef4db67541352d49cb0fa6e03b51b717fda312a7aa531a0b3ddc6406648a1d0f2a02f5ab6ab8b054383cf38cce14ae3622b7f7687c16315099c31c20b55a1dc46bf5c07262dca01793e8529e9c27319534a5cf044f8d0445a5991edf2259854218fac91e81a22e7674c8abfd4090666412b74d7f05767e737c650f63e2a4ef5a868492a93c3ac153adaac663b94c9a782147009e290216c2959470e65c58218fddc847784e11716b78a81400d8b602a48c429b9612", 0x1000}, {&(0x7f00000028c0)="e5ded89a330544bb9e05c6aabad4401deb1d1125df88b6516d8fec666869ebc81d98b7b4a2fbcea66d7b7a4eba43424bb84fb8743187da86ff9b5aeb0c5d980ee5e0cd7f06acbf2438423b32c940e5189e2f753992bd2ad4303d9fdbc66cb55fd859bfcbfd258123601dc56c3c3f", 0x6e}], 0x2, &(0x7f0000002980)=[@cred={{0x18, 0x1, 0x2, {r3, r5, r7}}}], 0x18, 0x44080}], 0x2, 0x8080) [ 1243.389737][ T17] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.389786][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.552775][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1243.552797][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.552813][ T17] usb 6-1: Product: syz [ 1243.552829][ T17] usb 6-1: Manufacturer: syz [ 1243.552845][ T17] usb 6-1: SerialNumber: syz 10:06:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @mcast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xb2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002400070f56900f4c178a3a77baff0500", @ANYRES32=r5, @ANYBLOB="e4a75b192e68507d078d83fafe00000000000800"/31], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r6, 0x6) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000300)={@broadcast, @broadcast, 0x0, 0x1, [@multicast1]}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', r5}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x2000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1243.767716][T30884] usb 1-1: new high-speed USB device number 35 using dummy_hcd 10:06:05 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) [ 1243.939890][T21870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1244.008210][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1244.046839][T21873] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1244.125875][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.125925][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.125955][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1244.125977][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1244.290030][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1244.290049][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:06:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x3000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1244.290062][T30884] usb 1-1: Product: syz [ 1244.290075][T30884] usb 1-1: Manufacturer: syz [ 1244.290087][T30884] usb 1-1: SerialNumber: syz [ 1244.709119][ T17] cdc_ncm 6-1:1.0: bind() failure [ 1244.718263][ T17] usb 6-1: USB disconnect, device number 23 [ 1244.736497][T21877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1244.796453][T21870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1245.485793][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1245.505824][ T3791] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1245.508608][T30884] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1245.557833][T30884] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1245.571884][T30884] usb 1-1: USB disconnect, device number 35 [ 1245.765783][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1245.885696][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.905810][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:06:07 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x8}, 0x18) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x52000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000012da27431f7f360f0052a05e796fd5a90ae873bdbe9e189811d408cda4ebd73ef135725d08ced88fa363b1fdb7ae0c928b0135c299323981890387029db18e3002a9df00021580982669901a083dd400ab432b9863835e75af97213dec9a337cfb644e0ea2f41dd3ddc497a7524d9390ac473900452427ad81aea0950c102051df8519b3c05d7d262c44e3bc51efa6a23ac536979726b176a560c7e12247ee20309b2192d2c1c7a28bb3b6dff24ac0f244d823ab4b653ae79b5268f77b13a2fbe3b2f867a4c0e472b7229ca911abf4ed2f4fa9ba11d46b8c7bb3094baa00"/241, @ANYRES16=r2, @ANYBLOB="200000000000fedbdf25010000002c00018014000200687372300000000000000000000000001400020073797a6b616c6c657230000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xa, &(0x7f0000001ac0)={&(0x7f0000000440)={0x5c, r2, 0x204, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x34}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002dbd7000fcdbdf0600000000000000000101000008000e00001000000800070004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x300, 0x0, 0x0, 0xe19, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0xb8}, {}, {}, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0xfffffffd, 0x1, &(0x7f0000001180)=[0x0], &(0x7f0000000040)=[0x80, 0x7f, 0x3], &(0x7f0000000080)=[0x800, 0x40, 0x3, 0x6dbc, 0x3, 0x8], 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x2, 'B+'}, 0x3) 10:06:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) 10:06:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x4000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:07 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x323b}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:07 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x588, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x5000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) [ 1246.145767][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.145788][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.145804][ T3791] usb 6-1: Product: syz [ 1246.166187][ T3791] usb 6-1: can't set config #1, error -71 [ 1246.167869][ T3791] usb 6-1: USB disconnect, device number 24 10:06:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180), &(0x7f0000000040)=[0xfeff, 0x9, 0x9, 0x0, 0x8], &(0x7f0000000000)=[0x8, 0x2a3b, 0x2, 0x6, 0x8, 0x6], 0x0}) 10:06:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) flock(r6, 0x6) [ 1246.416015][T30214] usb 1-1: new high-speed USB device number 36 using dummy_hcd 10:06:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x6000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:07 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x2, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1246.595585][ T3791] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1246.675540][T30214] usb 1-1: Using ep0 maxpacket: 8 10:06:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3c00, 0x1b20, 0x356, 0x600, 0x3, 0x40, 0x2, 0x0, {0x0, 0xff, 0x1}, {0xc0000000, 0x8, 0x1}, {0x20, 0x3a}, {0x81, 0x401, 0x1}, 0x2, 0x1, 0x8, 0x8, 0x0, 0x8001, 0x3, 0x800, 0xffffffff, 0x4, 0x9, 0x5, 0x2, 0x200, 0x2, 0x6}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) recvfrom$phonet(r3, &(0x7f0000000100)=""/54, 0x36, 0x12043, &(0x7f0000000140)={0x23, 0x8, 0x2, 0x80}, 0x10) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1246.816371][T30214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 10:06:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000400)) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) 10:06:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff0100000000", @ANYRES32=r4, @ANYRESOCT=r3], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40001) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000000040)=[0x0, 0x3, 0x9, 0x401, 0x4, 0xed], 0x0}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) umount2(&(0x7f0000000000)='./file0\x00', 0x4) [ 1246.816422][T30214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.816453][T30214] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.816475][T30214] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1246.866541][ T3791] usb 6-1: Using ep0 maxpacket: 8 [ 1246.996351][T30214] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.996372][T30214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.996387][T30214] usb 1-1: Product: syz [ 1246.996402][T30214] usb 1-1: Manufacturer: syz [ 1246.996417][T30214] usb 1-1: SerialNumber: syz [ 1246.997731][ T3791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.997779][ T3791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.170508][ T3791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1247.170530][ T3791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.170546][ T3791] usb 6-1: Product: syz [ 1247.170561][ T3791] usb 6-1: Manufacturer: syz [ 1247.170575][ T3791] usb 6-1: SerialNumber: syz [ 1247.688838][T21932] udc-core: couldn't find an available UDC or it's busy [ 1247.688862][T21932] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1247.701869][T30214] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1247.701916][T30214] cdc_ncm 1-1:1.0: bind() failure [ 1247.703844][T30214] cdc_ncm 1-1:1.1: bind() failure [ 1247.712846][T30214] usb 1-1: USB disconnect, device number 36 [ 1247.852449][T21946] udc-core: couldn't find an available UDC or it's busy [ 1247.880092][T21946] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1247.895693][ T3791] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1247.901743][ T3791] cdc_ncm 6-1:1.0: bind() failure [ 1247.927621][ T3791] cdc_ncm 6-1:1.1: bind() failure [ 1247.951435][ T3791] usb 6-1: USB disconnect, device number 25 [ 1248.475527][ T17] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1248.665520][T28048] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1248.725386][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1248.845482][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.865405][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.892861][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1248.905386][T28048] usb 6-1: Using ep0 maxpacket: 8 [ 1248.918603][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1249.026755][T28048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.045644][T28048] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:06:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f0000000000)=[0x101], &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0xffffffff}, 0xc) r2 = open(&(0x7f0000000040)='./file0\x00', 0x180, 0x20) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) [ 1249.085600][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1249.109568][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.160536][ T17] usb 1-1: Product: syz [ 1249.171978][ T17] usb 1-1: Manufacturer: syz [ 1249.194336][ T17] usb 1-1: SerialNumber: syz [ 1249.225507][T28048] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1249.234699][T28048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.244201][ T17] usb 1-1: can't set config #1, error -71 [ 1249.270182][ T17] usb 1-1: USB disconnect, device number 37 [ 1249.286212][T28048] usb 6-1: Product: syz [ 1249.290444][T28048] usb 6-1: Manufacturer: syz 10:06:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) 10:06:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x7000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x10000}}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) fcntl$dupfd(r2, 0x406, r3) ioctl$VIDIOC_DQEVENT(r1, 0x80805659, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) [ 1249.316455][T28048] usb 6-1: SerialNumber: syz 10:06:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0xfff}, {0x0, 0x9}}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYRES64=r0], 0x0) r3 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r3, 0x6) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000040)=0x4) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) [ 1249.365464][T28048] usb 6-1: can't set config #1, error -71 [ 1249.393705][T28048] usb 6-1: USB disconnect, device number 26 10:06:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r6 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0x1) 10:06:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:10 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x8000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1249.815849][ T17] usb 1-1: new high-speed USB device number 38 using dummy_hcd 10:06:11 executing program 2: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r0, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000300)=0x4a, 0x4) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x180, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000001280)={0x0, 0x2, &(0x7f0000000040)=[0x0, 0x1d], &(0x7f0000000080)=[0x3, 0x1], &(0x7f0000001200), 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="c18f000000000000000015000002"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x8000) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x9) [ 1249.900655][T28048] usb 6-1: new high-speed USB device number 27 using dummy_hcd 10:06:11 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0xfdfdffff, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1250.055334][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1250.165376][T28048] usb 6-1: device descriptor read/64, error 18 [ 1250.176228][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.176276][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.176309][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.176332][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1250.336185][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1250.336208][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.336224][ T17] usb 1-1: Product: syz [ 1250.336239][ T17] usb 1-1: Manufacturer: syz [ 1250.336255][ T17] usb 1-1: SerialNumber: syz 10:06:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x200}, {0x0, 0x3f}}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1250.555207][T28048] usb 6-1: device descriptor read/64, error 18 10:06:11 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x1) 10:06:11 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) 10:06:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x384, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x136, 0x20}, {}, 0x0, 0x82, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1250.895261][T28048] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1251.165149][T28048] usb 6-1: device descriptor read/64, error 18 [ 1251.486355][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1251.525347][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1251.545461][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1251.565108][T28048] usb 6-1: device descriptor read/64, error 18 [ 1251.571403][ T17] usb 1-1: USB disconnect, device number 38 [ 1251.685251][T28048] usb usb6-port1: attempt power cycle [ 1252.275105][T30884] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1252.395266][T28048] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1252.525137][T28048] usb 6-1: device descriptor read/8, error -71 [ 1252.531458][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1252.655811][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.675580][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.705479][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1252.717716][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1252.735132][T28048] usb 6-1: device descriptor read/8, error -71 10:06:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xc00, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_usb_control_io(r0, 0x0, 0x0) 10:06:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x1) 10:06:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 10:06:13 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0xff000000, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:13 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, {}, {}, {0x40}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000005c0)="ddb74c2f57eb8589c397d1f3e255498861f0099c091fac3031c8228985dc5b3169be8a9d6da6c4caf03bda529cb98d53aa9ae85919e7a5bb91adf2798a60576f43a29b6642845b14f110a58c064fe203aec8426ea63d3e4b29b655bff8caee5823978bed6f05f953e4052a4708bec7d6513a9d0d156bafcdb8a54380da9ba2236df3584b58861cca1e6c351dc89c5b5cf24c51d13893f3beddd81307090e1110ed3a17a36174c3f39efd4a89405aee9c381ff925e7f381a5587e5710bb029964836b176b42a91a899de98b4ae2ae7cf5606aa1cc7d8f9ae4a36d", 0xda, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f00000002c0)={{0x9, 0x3, 0x2, 0x871, 'syz0\x00', 0xf4f9}, 0x1, [0x2, 0x4bcb, 0x3, 0x4, 0x6cca, 0x80000001, 0x0, 0x10001, 0xdec, 0x3, 0x40, 0x0, 0x5, 0x80000001, 0xa017, 0x4, 0xffff3c89, 0x0, 0xe8a, 0x10001, 0x0, 0x9, 0x2, 0x2, 0x4, 0x0, 0x80000000, 0x2, 0x1, 0x80000000, 0x30, 0x5, 0x0, 0x42, 0x15, 0xfffffc00, 0x5, 0x1, 0x1, 0x7, 0x244d, 0x0, 0x9, 0x6, 0x1, 0x1000, 0xb, 0x10001, 0x2, 0x10001, 0x10001, 0x3, 0x9, 0x4f, 0x5, 0x7ca61cf, 0x5c2, 0x1, 0x200, 0x76, 0x874, 0x800, 0x8, 0x7ff, 0x3f, 0x8, 0x7a83, 0xf4, 0x7, 0x68, 0x4cde, 0x7fffffff, 0x8000, 0x3, 0x8001, 0x5, 0x6, 0xffffe344, 0x60, 0x80000001, 0x1, 0x6, 0x200, 0x4, 0x6, 0x7, 0x2, 0x8, 0x101, 0xc5d, 0x5, 0x7, 0x7, 0x5, 0x9, 0x80000001, 0x8, 0x4, 0x9, 0x6, 0x101, 0x1, 0x0, 0x101, 0x1, 0x27, 0x8000, 0xfffffe01, 0x9, 0xe0000, 0x1, 0x4, 0x0, 0x42, 0x61, 0x3fb, 0x2d2, 0x100, 0x1ff, 0x5, 0x8001, 0xffff, 0x1, 0x81, 0xfffffffc, 0x0, 0x1ff, 0x400]}) r2 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r2) 10:06:13 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) pipe2(&(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getpeername$l2tp6(r1, &(0x7f0000002fc0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000003000)=0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) [ 1252.905206][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1252.914561][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.966484][T30884] usb 1-1: Product: syz [ 1252.987371][T30884] usb 1-1: can't set config #1, error -71 [ 1252.988466][T30884] usb 1-1: USB disconnect, device number 39 10:06:14 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x73, @remote, 0x4e20, 0x0, 'rr\x00', 0x24, 0x5, 0x2e}, 0x2c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x1) 10:06:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, {}, {0x0, 0xffffffff, 0x10000000}, {}, {0x1ff}, 0x2, 0x1, 0x0, 0x2d4, 0x0, 0x800000, 0x593d, 0x0, 0x0, 0xff, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ptrace$cont(0x11, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x7fffffff, 0x1000100) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x8, 0x4) 10:06:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0xfffffdfd, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) [ 1253.314921][T28048] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1253.354906][T30884] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1253.405002][T28048] usb 6-1: Using ep0 maxpacket: 8 10:06:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}}) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1253.525660][T28048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 10:06:14 executing program 2: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r0, 0x6) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000000c0)={0x8000, 0x9}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$TIOCSTI(r2, 0x5412, 0xfffffffa) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) [ 1253.525711][T28048] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.594945][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1253.685619][T28048] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1253.685639][T28048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.685653][T28048] usb 6-1: Product: syz [ 1253.685668][T28048] usb 6-1: Manufacturer: syz [ 1253.685683][T28048] usb 6-1: SerialNumber: syz [ 1253.725044][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.725086][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.725113][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1253.725135][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.890426][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1253.890448][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.890464][T30884] usb 1-1: Product: syz [ 1253.890487][T30884] usb 1-1: Manufacturer: syz [ 1253.890502][T30884] usb 1-1: SerialNumber: syz 10:06:15 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x0, 0x2}, 0x8) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x1) [ 1254.604967][T30884] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1254.611139][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1254.650424][T30884] cdc_ncm 1-1:1.1: bind() failure [ 1254.675095][T30884] usb 1-1: USB disconnect, device number 40 [ 1254.814976][T28048] cdc_ncm 6-1:1.0: bind() failure [ 1254.835017][T28048] usb 6-1: USB disconnect, device number 30 [ 1255.375033][T28048] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1255.584783][T30884] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1255.614950][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1255.735489][T28048] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.745905][T28048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.758997][T28048] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.771437][T28048] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.834680][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1255.945561][T28048] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.955223][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.968900][T28048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.980408][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 10:06:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x1, 0x1ff, 0x7}) openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f00000011c0), &(0x7f0000000080)=[0x9, 0x800], 0x0}) 10:06:17 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:17 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r1, 0x6) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0x0, 0x9, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980903, 0x6, [], @value64=0xdcb}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000000c0)={0xffffffffffffffff, 0x7fffffff, 0x80000001, 0x1ffc000000000000}) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x4, 0x1) 10:06:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a44000011cf1ffffffffffff010000000904000001020d0000052406000105240000000d240ff7ffffff00000000000006241a0000810340000000000904010000020d00000904010102020d2000090582739ed8206795437d40d05110c8c4194e92017dbba8f29101000000c70153f9db79ed64b54309c5d3490eb3c5e5c70638ce00000000457b2918b0d51903356d7c81734ea9592cfa72ec4e2b704c920082afac3263abee3ead49f790c936d08ce31bbba018e02e49f2a4058b461069126e3d7af5aa0db80d3c22965cbf753f622fdbeae05e68ff8741f8a69f20c0179a380fdf4fe53848dc19638fcd7b91353b14735aae8f781667516ea51bc5edcf92de47911576febc14c6992f9ab699d382da7e1895973b73a1b731f83c9f410e006a65f842986d7c5d7708e71a9eddc4982e2c238f37ff0cf36187100075abd1e4c8fd1418c8e452cbf18a395011f6372e6dd8b30ff95841dd3dceb5ccf00244492467af88"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:17 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x1) [ 1255.994914][T28048] usb 1-1: Product: syz [ 1255.999305][T28048] usb 1-1: Manufacturer: syz [ 1256.004027][T28048] usb 1-1: SerialNumber: syz [ 1256.055463][T28048] usb 1-1: can't set config #1, error -71 [ 1256.070679][T28048] usb 1-1: USB disconnect, device number 41 10:06:17 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x907a}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000080)={0xa, 0x32, {0x57, 0x2, 0x3, {0x18}, {0xe000, 0x8000}, @period={0x5d, 0x9, 0x8001, 0x0, 0x3, {0x8, 0x9, 0x3, 0x4}, 0x5, &(0x7f0000000040)=[0x422, 0xff81, 0x6, 0x97, 0x5d]}}, {0x54, 0x9, 0x4, {0xffe1, 0xc9f}, {0x0, 0x3}, @rumble={0x7, 0x9}}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000000), &(0x7f0000001200), 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x802, 0x120) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000500)={0x3a04, {{0xa, 0x4e20, 0x7, @private1, 0x8}}}, 0x84) [ 1256.254751][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1256.254779][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.254793][T30884] usb 6-1: Product: syz [ 1256.275221][T30884] usb 6-1: can't set config #1, error -71 [ 1256.276267][T30884] usb 6-1: USB disconnect, device number 31 10:06:17 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020400040e000000000000000000000005000600000000000a00000000000000ff0200000000000000000060aa60d07e36ef88042ecd39b6000000000100000000000000000200010000000000000000000000000005000500000000000a000000000000002001000000000000000000"], 0x70}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r1, 0x5, 0x80}) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000040)=0x1) [ 1256.624923][T28048] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1256.681071][T30884] usb 6-1: new high-speed USB device number 32 using dummy_hcd 10:06:17 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1, 0x1, 0x3, "b7258af51408cf4ca949df19b4e8a4ee0655ef3148015a120b5891e42c0a9c2e", 0xa0363159}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0103000000000000000008000000"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000003db26fcbddbe2d7c9e0867a3c3d0eb68cffe9b559343b74af9af51f065d5c7518b109040db20f37c7a1cf8f76a2fd8d5059bf19df85d16819f62c8701b8b121c063226085973cc26", @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf250400000008000a000000000006001d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc008011}, 0x4004050) 10:06:17 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r2, 0x6) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2) flock(r1, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, {0x9}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x1) [ 1256.864669][T28048] usb 1-1: Using ep0 maxpacket: 8 10:06:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020400040e000000000000000000000005100600000000000a004a1d376fd6db800900000000000000ff020000000000000000000000000001000000000000000002000100000000000000000000804c94c82c05412d640000000020010000000000000000000000000000009eab000000000075be25cb436e857c1813747d746794010060922bbff36916ebddd9e86063b32da3981b296c000000000000"], 0x70}}, 0x0) r2 = dup2(r0, r1) read$midi(r2, &(0x7f0000000000)=""/101, 0x65) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000080)={0x8, 'macvtap0\x00', {'bridge_slave_0\x00'}, 0x6}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000001280)={0x0, 0x1, &(0x7f0000001180)=[0x0], &(0x7f00000011c0), &(0x7f0000001200), 0x0}) syncfs(r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x17, 0x4) 10:06:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000001280)={0x0, 0x2, 0x0, &(0x7f00000011c0), 0x0, 0x0}) 10:06:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a40109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581c23d530340000000000904010d00005e04010102020d0000090582739e000074de89c3cc0ba48994f873d027ed2d2b3775e83ded03a38b596e15df1099dd81b4d7e672447f2e43be9dee247a2198b6e0b251764056ce7b41f0f35abd4b43069571403cc9bbea0b6bbeb713be71369f4bfd9e691cfb4566c3bd7f22f87e0ae1a089607acf20b12d3cb563e331f4c2bb9f91b25434e84401b1575374a356ab1245969e9e835ba074"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r1, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/63, &(0x7f0000000080)=0x3f) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x400, 0x108) mq_getsetattr(r2, &(0x7f0000000100)={0x20, 0xffff144e, 0x80000001, 0x8000}, &(0x7f0000000140)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:20 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a44000ea01030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009240101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:23 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:23 executing program 5: r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x24000, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000080)) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x8001141042, 0x0) flock(r2, 0x6) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000300)) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000002c0)) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 10:06:26 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582739e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000020000082505a1a440000102030109025c0002010000000904000001020d0000052406ff0500000000000d240f0100000000200000000006241a0000000905810340000000000904010000020d00000904010102020d0000090582bf00000075c900fffffff400000000"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000400)) getsockopt$sock_int(r2, 0x1, 0x28, 0x0, &(0x7f0000000100)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000040)={0x40, 0xd, 0x5, {0x5, 0x2, "3905c6"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x24, &(0x7f0000000100)={0x40, 0x8, 0x33, "f63897a92ddc8c4c1d42584961aeefc1fcdbb73c3f9204a54e2db8e594022cc63c15a23be8cc32c3a823ae9f4742a163f7418c"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x7, 0x7fffffff, 0x7, 0x7, 0x5, 0x5, 0x60, 0xf2b, 0x7f, 0x4, 0x800}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:27 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810340000000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) fadvise64(r1, 0x4, 0x800, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10:06:30 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x70}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$RAW_CHAR_CTRL_GETBIND(r2, 0xac01, &(0x7f0000000280)={0x0, 0x7, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000240)=""/13) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r4, 0x6) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1d) ptrace$cont(0x11, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) flock(r5, 0x6) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f00000002c0)={r5, r2, 0x5}) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000180)={0x2f}) [ 1256.905036][T28048] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1256.915682][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1257.025284][T28048] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1257.025307][T28048] usb 1-1: can't read configurations, error -61 [ 1257.036206][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.036258][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.175412][T28048] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1257.197102][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1257.197125][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.197140][T30884] usb 6-1: Product: syz [ 1257.197156][T30884] usb 6-1: Manufacturer: syz [ 1257.197178][T30884] usb 6-1: SerialNumber: syz [ 1257.417810][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1257.456925][T28048] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1257.575427][T28048] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1257.575451][T28048] usb 1-1: can't read configurations, error -61 [ 1257.575777][T28048] usb usb1-port1: attempt power cycle [ 1258.289817][T28048] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1258.336451][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1258.340111][T30884] usb 6-1: USB disconnect, device number 32 [ 1258.375328][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1258.415569][T28048] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1258.541340][T28048] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1258.541365][T28048] usb 1-1: can't read configurations, error -61 [ 1258.684428][T28048] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1258.775324][T28048] usb 1-1: Using ep0 maxpacket: 8 [ 1258.815646][T28048] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 1258.935519][T28048] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1258.935544][T28048] usb 1-1: can't read configurations, error -61 [ 1258.936244][T28048] usb usb1-port1: unable to enumerate USB device [ 1259.084525][T30884] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1259.324507][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1259.445450][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.445527][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.611447][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1259.611470][T30884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.611485][T30884] usb 6-1: Product: syz [ 1259.611510][T30884] usb 6-1: Manufacturer: syz [ 1259.611526][T30884] usb 6-1: SerialNumber: syz [ 1259.684492][T30884] usb 6-1: can't set config #1, error -71 [ 1259.685609][T30884] usb 6-1: USB disconnect, device number 33 [ 1259.686844][ T3791] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1259.944423][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1260.135195][ T3791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1260.135226][ T3791] usb 1-1: can't read configurations, error -61 [ 1260.138162][T30884] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1260.304394][ T3791] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1260.374314][T30884] usb 6-1: Using ep0 maxpacket: 8 [ 1260.495436][T30884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.495490][T30884] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.564210][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1260.654808][T30884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1260.654830][T30884] usb 6-1: New USB device strings: Mfr=234, Product=1, SerialNumber=3 [ 1260.654846][T30884] usb 6-1: Product: syz [ 1260.654862][T30884] usb 6-1: Manufacturer: syz [ 1260.654877][T30884] usb 6-1: SerialNumber: syz [ 1260.695257][T30884] usb 6-1: selecting invalid altsetting 1 [ 1260.744891][ T3791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1260.744915][ T3791] usb 1-1: can't read configurations, error -61 [ 1260.745102][ T3791] usb usb1-port1: attempt power cycle [ 1261.144408][T30884] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1261.144459][T30884] cdc_ncm 6-1:1.0: bind() failure [ 1261.146428][T30884] cdc_ncm 6-1:1.1: bind() failure [ 1261.464181][ T3791] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1261.554891][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1261.726423][ T3791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1261.726446][ T3791] usb 1-1: can't read configurations, error -61 [ 1261.884193][ T3791] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1261.974999][ T3791] usb 1-1: Using ep0 maxpacket: 8 [ 1262.134956][ T3791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1262.134979][ T3791] usb 1-1: can't read configurations, error -61 [ 1262.135232][ T3791] usb usb1-port1: unable to enumerate USB device [ 1262.774090][T30884] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1262.786284][T28417] usb 6-1: USB disconnect, device number 34 [ 1263.014076][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1263.134808][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.134857][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.134889][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1263.134910][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.254102][T28417] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1263.295115][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1263.295136][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.295152][T30884] usb 1-1: Product: syz [ 1263.295168][T30884] usb 1-1: Manufacturer: syz [ 1263.295184][T30884] usb 1-1: SerialNumber: syz [ 1263.520011][T28417] usb 6-1: Using ep0 maxpacket: 8 [ 1263.640059][T28417] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.640109][T28417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.794689][T28417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1263.794710][T28417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.794727][T28417] usb 6-1: Product: syz [ 1263.794742][T28417] usb 6-1: Manufacturer: syz [ 1263.794758][T28417] usb 6-1: SerialNumber: syz [ 1264.434041][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1264.455079][T30884] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1264.474004][T30884] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1264.476210][T30884] usb 1-1: USB disconnect, device number 50 [ 1264.919981][T28417] cdc_ncm 6-1:1.0: bind() failure [ 1264.923280][T28417] usb 6-1: USB disconnect, device number 35 [ 1265.244389][T30884] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1265.490368][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1265.604697][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.604748][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.604781][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1265.604803][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.683826][T30214] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1265.764586][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1265.764609][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.764624][T30884] usb 1-1: Product: syz [ 1265.764641][T30884] usb 1-1: Manufacturer: syz [ 1265.764656][T30884] usb 1-1: SerialNumber: syz [ 1265.833596][T30884] usb 1-1: can't set config #1, error -71 [ 1265.837619][T30884] usb 1-1: USB disconnect, device number 51 [ 1265.954052][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1266.084596][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.084645][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.283808][T30884] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1266.311890][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1266.311912][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.311928][T30214] usb 6-1: Product: syz [ 1266.323937][T30214] usb 6-1: can't set config #1, error -71 [ 1266.331090][T30214] usb 6-1: USB disconnect, device number 36 [ 1266.523723][T30884] usb 1-1: Using ep0 maxpacket: 8 [ 1266.644422][T30884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.644473][T30884] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.644504][T30884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1266.644525][T30884] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.703743][T30214] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1266.810530][T30884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1266.810554][T30884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.810570][T30884] usb 1-1: Product: syz [ 1266.810585][T30884] usb 1-1: Manufacturer: syz [ 1266.810600][T30884] usb 1-1: SerialNumber: syz [ 1266.953869][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1267.085419][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.085471][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.254336][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1267.254358][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.254374][T30214] usb 6-1: Product: syz [ 1267.254389][T30214] usb 6-1: Manufacturer: syz [ 1267.254404][T30214] usb 6-1: SerialNumber: syz [ 1267.287622][T22349] udc-core: couldn't find an available UDC or it's busy [ 1267.287646][T22349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1267.967621][T30884] cdc_ncm 1-1:1.0: bind() failure [ 1267.983918][T30884] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1268.007696][T30884] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1268.009975][T30884] usb 1-1: USB disconnect, device number 52 [ 1268.373730][T30214] cdc_ncm 6-1:1.0: bind() failure [ 1268.385995][T30214] usb 6-1: USB disconnect, device number 37 [ 1268.713546][ T17] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1268.953544][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1269.074257][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.074305][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.074336][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1269.074358][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1269.143510][T30214] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1269.234233][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.234255][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.234270][ T17] usb 1-1: Product: syz [ 1269.234285][ T17] usb 1-1: Manufacturer: syz [ 1269.234301][ T17] usb 1-1: SerialNumber: syz [ 1269.309365][ T17] usb 1-1: can't set config #1, error -71 [ 1269.310721][ T17] usb 1-1: USB disconnect, device number 53 [ 1269.393595][T30214] usb 6-1: Using ep0 maxpacket: 8 [ 1269.524166][T30214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.524217][T30214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.738538][T30214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.738560][T30214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.738575][T30214] usb 6-1: Product: syz [ 1269.738590][T30214] usb 6-1: Manufacturer: syz [ 1269.753534][T30214] usb 6-1: can't set config #1, error -71 [ 1269.754789][T30214] usb 6-1: USB disconnect, device number 38 [ 1269.763565][ T17] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1270.003537][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 1270.124206][ T17] usb 1-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 1270.124258][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.124291][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 168, changing to 11 [ 1270.124314][ T17] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1182, setting to 1024 [ 1270.124337][ T17] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1270.284169][ T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.284190][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.284205][ T17] usb 1-1: Product: syz [ 1270.284221][ T17] usb 1-1: Manufacturer: syz [ 1270.284236][ T17] usb 1-1: SerialNumber: syz [ 1270.528874][T22400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1271.186949][T22400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1271.423446][ T17] cdc_ncm 1-1:1.0: bind() failure [ 1271.449450][ T17] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1271.463458][ T17] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1271.473291][ T17] usb 1-1: USB disconnect, device number 54 [ 1272.243318][T28417] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1272.513365][T28417] usb 1-1: Using ep0 maxpacket: 8 [ 1272.640988][T28417] usb 1-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 1272.641041][T28417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.641074][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 168, changing to 11 [ 1272.641096][T28417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1182, setting to 1024 [ 1272.641119][T28417] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.873184][T28417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1272.873211][T28417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.873227][T28417] usb 1-1: Product: syz [ 1272.893271][T28417] usb 1-1: can't set config #1, error -71 [ 1272.894432][T28417] usb 1-1: USB disconnect, device number 55 [ 1318.401274][ T1059] tipc: TX() has been purged, node left! [ 1321.729098][ T1059] tipc: TX() has been purged, node left! [ 1321.889499][ T1059] tipc: TX() has been purged, node left! [ 1322.069693][ T1059] tipc: TX() has been purged, node left! [ 1322.209621][ T1059] tipc: TX() has been purged, node left! [ 1322.348786][ T1059] tipc: TX() has been purged, node left! [ 1322.468763][ T1059] tipc: TX() has been purged, node left! [ 1322.599224][ T1059] tipc: TX() has been purged, node left! [ 1322.760054][ T1059] tipc: TX() has been purged, node left! [ 1322.919417][ T1059] tipc: TX() has been purged, node left! [ 1414.888348][ T1150] INFO: task syz-executor.3:22239 blocked for more than 143 seconds. [ 1414.888360][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.888366][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.888373][ T1150] syz-executor.3 D28728 22239 7188 0x20024004 [ 1414.888398][ T1150] Call Trace: [ 1414.888425][ T1150] __schedule+0x91f/0x2250 [ 1414.888457][ T1150] ? io_schedule_timeout+0x140/0x140 [ 1414.888482][ T1150] schedule+0xd0/0x2a0 [ 1414.888502][ T1150] schedule_preempt_disabled+0xf/0x20 [ 1414.888519][ T1150] __mutex_lock+0x3e2/0x10d0 [ 1414.888538][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 1414.888555][ T1150] ? fb_open+0xd3/0x430 [ 1414.888577][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 1414.888598][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1414.888620][ T1150] ? lock_downgrade+0x820/0x820 [ 1414.888639][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 1414.888662][ T1150] fb_open+0xd3/0x430 [ 1414.888681][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 1414.888695][ T1150] chrdev_open+0x266/0x770 [ 1414.888712][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.888732][ T1150] ? security_file_open+0x1f5/0x3f0 [ 1414.888754][ T1150] do_dentry_open+0x501/0x1290 [ 1414.888770][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.888793][ T1150] path_openat+0x1bb9/0x2750 [ 1414.888819][ T1150] ? path_lookupat+0x830/0x830 [ 1414.888835][ T1150] ? cache_grow_end+0x46/0x170 [ 1414.888857][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.888878][ T1150] do_filp_open+0x17e/0x3c0 [ 1414.888896][ T1150] ? may_open_dev+0xf0/0xf0 [ 1414.888919][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 1414.888933][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 1414.888956][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 1414.888970][ T1150] ? __alloc_fd+0x28d/0x600 [ 1414.888993][ T1150] do_sys_openat2+0x16f/0x3b0 [ 1414.889007][ T1150] ? __might_fault+0x190/0x1d0 [ 1414.889023][ T1150] ? build_open_flags+0x650/0x650 [ 1414.889044][ T1150] ? put_old_timespec32+0x101/0x1f0 [ 1414.889062][ T1150] ? get_old_timespec32+0x1f0/0x1f0 [ 1414.889083][ T1150] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1414.889099][ T1150] ? __x32_compat_sys_open+0x1c0/0x1c0 [ 1414.889116][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.889135][ T1150] ? do_fast_syscall_32+0x40/0x120 [ 1414.889158][ T1150] do_syscall_32_irqs_on+0x3f/0x60 [ 1414.889175][ T1150] do_fast_syscall_32+0x7f/0x120 [ 1414.889196][ T1150] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.889209][ T1150] RIP: 0023:0xf7fec569 [ 1414.889215][ T1150] Code: Bad RIP value. [ 1414.889223][ T1150] RSP: 002b:00000000f5de70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1414.889239][ T1150] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1414.889248][ T1150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.889257][ T1150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.889266][ T1150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1414.889276][ T1150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.889302][ T1150] INFO: task syz-executor.4:22243 blocked for more than 143 seconds. [ 1414.889310][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.889316][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.889323][ T1150] syz-executor.4 D28728 22243 7337 0x20020004 [ 1414.889344][ T1150] Call Trace: [ 1414.889365][ T1150] __schedule+0x91f/0x2250 [ 1414.889389][ T1150] ? io_schedule_timeout+0x140/0x140 [ 1414.889414][ T1150] schedule+0xd0/0x2a0 [ 1414.889439][ T1150] schedule_preempt_disabled+0xf/0x20 [ 1414.889455][ T1150] __mutex_lock+0x3e2/0x10d0 [ 1414.889473][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 1414.889489][ T1150] ? fb_open+0xd3/0x430 [ 1414.889511][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 1414.889532][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1414.889553][ T1150] ? lock_downgrade+0x820/0x820 [ 1414.889571][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 1414.889594][ T1150] fb_open+0xd3/0x430 [ 1414.889613][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 1414.889626][ T1150] chrdev_open+0x266/0x770 [ 1414.889642][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.889661][ T1150] ? security_file_open+0x1f5/0x3f0 [ 1414.889682][ T1150] do_dentry_open+0x501/0x1290 [ 1414.889698][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.889720][ T1150] path_openat+0x1bb9/0x2750 [ 1414.889746][ T1150] ? path_lookupat+0x830/0x830 [ 1414.889763][ T1150] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1414.889778][ T1150] ? __lock_acquire+0x16e3/0x56e0 [ 1414.889799][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.889820][ T1150] do_filp_open+0x17e/0x3c0 [ 1414.889837][ T1150] ? may_open_dev+0xf0/0xf0 [ 1414.889859][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 1414.889875][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 1414.889897][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 1414.889911][ T1150] ? __alloc_fd+0x28d/0x600 [ 1414.889933][ T1150] do_sys_openat2+0x16f/0x3b0 [ 1414.889947][ T1150] ? __might_fault+0x190/0x1d0 [ 1414.889962][ T1150] ? build_open_flags+0x650/0x650 [ 1414.889982][ T1150] ? put_old_timespec32+0x101/0x1f0 [ 1414.890000][ T1150] ? get_old_timespec32+0x1f0/0x1f0 [ 1414.890020][ T1150] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1414.890036][ T1150] ? __x32_compat_sys_open+0x1c0/0x1c0 [ 1414.890053][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.890071][ T1150] ? do_fast_syscall_32+0x40/0x120 [ 1414.890093][ T1150] do_syscall_32_irqs_on+0x3f/0x60 [ 1414.890110][ T1150] do_fast_syscall_32+0x7f/0x120 [ 1414.890129][ T1150] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.890140][ T1150] RIP: 0023:0xf7f61569 [ 1414.890145][ T1150] Code: Bad RIP value. [ 1414.890154][ T1150] RSP: 002b:00000000f5d5c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1414.890169][ T1150] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1414.890178][ T1150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.890187][ T1150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.890196][ T1150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1414.890205][ T1150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.890230][ T1150] INFO: task syz-executor.4:22245 blocked for more than 143 seconds. [ 1414.890238][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.890244][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.890251][ T1150] syz-executor.4 D28728 22245 7337 0x20020004 [ 1414.890271][ T1150] Call Trace: [ 1414.890290][ T1150] __schedule+0x91f/0x2250 [ 1414.890314][ T1150] ? io_schedule_timeout+0x140/0x140 [ 1414.890340][ T1150] schedule+0xd0/0x2a0 [ 1414.890359][ T1150] schedule_preempt_disabled+0xf/0x20 [ 1414.890375][ T1150] __mutex_lock+0x3e2/0x10d0 [ 1414.890392][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 1414.890409][ T1150] ? fb_open+0xd3/0x430 [ 1414.890436][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 1414.890456][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1414.890478][ T1150] ? lock_downgrade+0x820/0x820 [ 1414.890496][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 1414.890518][ T1150] fb_open+0xd3/0x430 [ 1414.890538][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 1414.890551][ T1150] chrdev_open+0x266/0x770 [ 1414.890567][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.890586][ T1150] ? security_file_open+0x1f5/0x3f0 [ 1414.890606][ T1150] do_dentry_open+0x501/0x1290 [ 1414.890622][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.890645][ T1150] path_openat+0x1bb9/0x2750 [ 1414.890671][ T1150] ? path_lookupat+0x830/0x830 [ 1414.890687][ T1150] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1414.890703][ T1150] ? __lock_acquire+0x16e3/0x56e0 [ 1414.890724][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.890745][ T1150] do_filp_open+0x17e/0x3c0 [ 1414.890762][ T1150] ? may_open_dev+0xf0/0xf0 [ 1414.890784][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 1414.890800][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 1414.890821][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 1414.890835][ T1150] ? __alloc_fd+0x28d/0x600 [ 1414.890858][ T1150] do_sys_openat2+0x16f/0x3b0 [ 1414.890871][ T1150] ? __might_fault+0x190/0x1d0 [ 1414.890887][ T1150] ? build_open_flags+0x650/0x650 [ 1414.890907][ T1150] ? put_old_timespec32+0x101/0x1f0 [ 1414.890925][ T1150] ? get_old_timespec32+0x1f0/0x1f0 [ 1414.895965][ T1150] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1414.895983][ T1150] ? __x32_compat_sys_open+0x1c0/0x1c0 [ 1414.896002][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.896020][ T1150] ? do_fast_syscall_32+0x40/0x120 [ 1414.896043][ T1150] do_syscall_32_irqs_on+0x3f/0x60 [ 1414.896059][ T1150] do_fast_syscall_32+0x7f/0x120 [ 1414.896077][ T1150] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.896095][ T1150] RIP: 0023:0xf7f61569 [ 1414.896101][ T1150] Code: Bad RIP value. [ 1414.896110][ T1150] RSP: 002b:00000000f5d3b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1414.896124][ T1150] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1414.896133][ T1150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.896142][ T1150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.896151][ T1150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1414.896160][ T1150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.896187][ T1150] INFO: task syz-executor.1:22246 blocked for more than 143 seconds. [ 1414.896197][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.896203][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.896210][ T1150] syz-executor.1 D28728 22246 6972 0x20020004 [ 1414.896232][ T1150] Call Trace: [ 1414.896254][ T1150] __schedule+0x91f/0x2250 [ 1414.896278][ T1150] ? io_schedule_timeout+0x140/0x140 [ 1414.896303][ T1150] schedule+0xd0/0x2a0 [ 1414.896323][ T1150] schedule_preempt_disabled+0xf/0x20 [ 1414.896339][ T1150] __mutex_lock+0x3e2/0x10d0 [ 1414.896358][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 1414.896374][ T1150] ? fb_open+0xd3/0x430 [ 1414.896396][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 1414.896415][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1414.896446][ T1150] ? lock_downgrade+0x820/0x820 [ 1414.896465][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 1414.896487][ T1150] fb_open+0xd3/0x430 [ 1414.896507][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 1414.896520][ T1150] chrdev_open+0x266/0x770 [ 1414.896535][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.896555][ T1150] ? security_file_open+0x1f5/0x3f0 [ 1414.896576][ T1150] do_dentry_open+0x501/0x1290 [ 1414.896593][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.896616][ T1150] path_openat+0x1bb9/0x2750 [ 1414.896641][ T1150] ? path_lookupat+0x830/0x830 [ 1414.896657][ T1150] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1414.896680][ T1150] ? __lock_acquire+0x16e3/0x56e0 [ 1414.896701][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.896726][ T1150] do_filp_open+0x17e/0x3c0 [ 1414.896741][ T1150] ? may_open_dev+0xf0/0xf0 [ 1414.896772][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 1414.896788][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 1414.896809][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 1414.896823][ T1150] ? __alloc_fd+0x28d/0x600 [ 1414.896845][ T1150] do_sys_openat2+0x16f/0x3b0 [ 1414.896859][ T1150] ? __might_fault+0x190/0x1d0 [ 1414.896873][ T1150] ? build_open_flags+0x650/0x650 [ 1414.896894][ T1150] ? put_old_timespec32+0x101/0x1f0 [ 1414.896912][ T1150] ? get_old_timespec32+0x1f0/0x1f0 [ 1414.896931][ T1150] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1414.896947][ T1150] ? __x32_compat_sys_open+0x1c0/0x1c0 [ 1414.896964][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.896982][ T1150] ? do_fast_syscall_32+0x40/0x120 [ 1414.897004][ T1150] do_syscall_32_irqs_on+0x3f/0x60 [ 1414.897021][ T1150] do_fast_syscall_32+0x7f/0x120 [ 1414.897041][ T1150] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.897052][ T1150] RIP: 0023:0xf7f47569 [ 1414.897057][ T1150] Code: Bad RIP value. [ 1414.897066][ T1150] RSP: 002b:00000000f5d420cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1414.897081][ T1150] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1414.897090][ T1150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.897098][ T1150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.897113][ T1150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1414.897122][ T1150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.897148][ T1150] INFO: task syz-executor.1:22247 blocked for more than 143 seconds. [ 1414.897156][ T1150] Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.897162][ T1150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.897169][ T1150] syz-executor.1 D28728 22247 6972 0x20020004 [ 1414.897190][ T1150] Call Trace: [ 1414.897211][ T1150] __schedule+0x91f/0x2250 [ 1414.897235][ T1150] ? io_schedule_timeout+0x140/0x140 [ 1414.897260][ T1150] schedule+0xd0/0x2a0 [ 1414.897280][ T1150] schedule_preempt_disabled+0xf/0x20 [ 1414.897296][ T1150] __mutex_lock+0x3e2/0x10d0 [ 1414.897313][ T1150] ? get_fb_info.part.0+0x18/0x80 [ 1414.897329][ T1150] ? fb_open+0xd3/0x430 [ 1414.897351][ T1150] ? mutex_lock_io_nested+0xf60/0xf60 [ 1414.897371][ T1150] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1414.897392][ T1150] ? lock_downgrade+0x820/0x820 [ 1414.897411][ T1150] ? kobject_get_unless_zero+0x15a/0x1e0 [ 1414.897437][ T1150] fb_open+0xd3/0x430 [ 1414.897477][ T1150] ? get_fb_info.part.0+0x80/0x80 [ 1414.897490][ T1150] chrdev_open+0x266/0x770 [ 1414.897506][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.897530][ T1150] ? security_file_open+0x1f5/0x3f0 [ 1414.897551][ T1150] do_dentry_open+0x501/0x1290 [ 1414.897567][ T1150] ? cdev_device_add+0x210/0x210 [ 1414.897590][ T1150] path_openat+0x1bb9/0x2750 [ 1414.897616][ T1150] ? path_lookupat+0x830/0x830 [ 1414.897631][ T1150] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 1414.897647][ T1150] ? __lock_acquire+0x16e3/0x56e0 [ 1414.897668][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.897688][ T1150] do_filp_open+0x17e/0x3c0 [ 1414.897709][ T1150] ? may_open_dev+0xf0/0xf0 [ 1414.897731][ T1150] ? do_raw_spin_lock+0x120/0x2b0 [ 1414.897747][ T1150] ? rwlock_bug.part.0+0x90/0x90 [ 1414.897769][ T1150] ? _raw_spin_unlock+0x24/0x40 [ 1414.897782][ T1150] ? __alloc_fd+0x28d/0x600 [ 1414.897812][ T1150] do_sys_openat2+0x16f/0x3b0 [ 1414.897826][ T1150] ? __might_fault+0x190/0x1d0 [ 1414.897841][ T1150] ? build_open_flags+0x650/0x650 [ 1414.897861][ T1150] ? put_old_timespec32+0x101/0x1f0 [ 1414.897879][ T1150] ? get_old_timespec32+0x1f0/0x1f0 [ 1414.897899][ T1150] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1414.897915][ T1150] ? __x32_compat_sys_open+0x1c0/0x1c0 [ 1414.897932][ T1150] ? lock_is_held_type+0xb0/0xe0 [ 1414.897950][ T1150] ? do_fast_syscall_32+0x40/0x120 [ 1414.897971][ T1150] do_syscall_32_irqs_on+0x3f/0x60 [ 1414.897988][ T1150] do_fast_syscall_32+0x7f/0x120 [ 1414.898008][ T1150] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1414.898019][ T1150] RIP: 0023:0xf7f47569 [ 1414.898024][ T1150] Code: Bad RIP value. [ 1414.898032][ T1150] RSP: 002b:00000000f5d210cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1414.898046][ T1150] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1414.898055][ T1150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.898064][ T1150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.898073][ T1150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1414.898082][ T1150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.898108][ T1150] [ 1414.898108][ T1150] Showing all locks held in the system: [ 1414.898124][ T1150] 1 lock held by khungtaskd/1150: [ 1414.898129][ T1150] #0: ffffffff89bc11c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1414.898214][ T1150] 1 lock held by in:imklog/6518: [ 1414.898219][ T1150] #0: ffff888099ec03f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1414.898289][ T1150] 2 locks held by kworker/u4:0/31240: [ 1414.898323][ T1150] 2 locks held by syz-executor.2/22233: [ 1414.898333][ T1150] 1 lock held by syz-executor.3/22239: [ 1414.898338][ T1150] #0: ffff888219260078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 1414.898373][ T1150] 1 lock held by syz-executor.4/22243: [ 1414.898378][ T1150] #0: ffff888219260078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 1414.898412][ T1150] 1 lock held by syz-executor.4/22245: [ 1414.898417][ T1150] #0: ffff888219260078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 1414.898465][ T1150] 1 lock held by syz-executor.1/22246: [ 1414.898470][ T1150] #0: ffff888219260078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 1414.898505][ T1150] 1 lock held by syz-executor.1/22247: [ 1414.898510][ T1150] #0: ffff888219260078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 1414.898541][ T1150] [ 1414.898547][ T1150] ============================================= [ 1414.898547][ T1150] [ 1414.898554][ T1150] NMI backtrace for cpu 1 [ 1414.898568][ T1150] CPU: 1 PID: 1150 Comm: khungtaskd Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.898576][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.898580][ T1150] Call Trace: [ 1414.898596][ T1150] dump_stack+0x18f/0x20d [ 1414.898614][ T1150] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1414.898633][ T1150] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1414.898647][ T1150] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1414.898663][ T1150] watchdog+0xd7d/0x1000 [ 1414.898682][ T1150] ? reset_hung_task_detector+0x30/0x30 [ 1414.898699][ T1150] kthread+0x3b5/0x4a0 [ 1414.898713][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 1414.898726][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 1414.898743][ T1150] ret_from_fork+0x1f/0x30 [ 1414.898763][ T1150] Sending NMI from CPU 1 to CPUs 0: [ 1414.898870][ C0] NMI backtrace for cpu 0 [ 1414.898876][ C0] CPU: 0 PID: 3882 Comm: systemd-journal Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.898881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.898884][ C0] RIP: 0033:0x7ff1b22fd46c [ 1414.898887][ C0] Code: Bad RIP value. [ 1414.898890][ C0] RSP: 002b:00007ffc0a49af00 EFLAGS: 00000202 [ 1414.898897][ C0] RAX: 00007ff1afd7c890 RBX: 00000000005ee890 RCX: 00000000005ee890 [ 1414.898902][ C0] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000557b82008120 [ 1414.898906][ C0] RBP: 0000557b82007e80 R08: 0000000000025068 R09: 0000557b82008120 [ 1414.898911][ C0] R10: 0000000000044676 R11: 00007ff1aff34f70 R12: 0000000000000001 [ 1414.898915][ C0] R13: 00007ffc0a49af78 R14: 0000000000000006 R15: 00007ffc0a49af00 [ 1414.898919][ C0] FS: 00007ff1b260e8c0 GS: 0000000000000000 [ 1414.899789][ T1150] Kernel panic - not syncing: hung_task: blocked tasks [ 1414.899804][ T1150] CPU: 1 PID: 1150 Comm: khungtaskd Not tainted 5.8.0-rc6-syzkaller #0 [ 1414.899816][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.899825][ T1150] Call Trace: [ 1414.899841][ T1150] dump_stack+0x18f/0x20d [ 1414.899860][ T1150] panic+0x2e3/0x75c [ 1414.899876][ T1150] ? __warn_printk+0xf3/0xf3 [ 1414.899893][ T1150] ? cpumask_next+0x3c/0x40 [ 1414.899910][ T1150] ? printk_safe_flush+0xd6/0x120 [ 1414.899926][ T1150] ? watchdog.cold+0x5/0x16b [ 1414.899944][ T1150] ? watchdog+0xa82/0x1000 [ 1414.899960][ T1150] watchdog.cold+0x16/0x16b [ 1414.899977][ T1150] ? reset_hung_task_detector+0x30/0x30 [ 1414.899993][ T1150] kthread+0x3b5/0x4a0 [ 1414.900009][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 1414.900025][ T1150] ? __kthread_bind_mask+0xc0/0xc0 [ 1414.900042][ T1150] ret_from_fork+0x1f/0x30 [ 1414.901549][ T1150] Kernel Offset: disabled [ 1418.248475][ T1150] Rebooting in 86400 seconds..