fffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 17:01:08 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) 17:01:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x280, 0x80, 0x20, 0x240, 0x1, 0x101, 0x1, 0x2, {0xdeb, 0x35, 0x1}, {0x8d2, 0xffffffff}, {0xcc3, 0x1f}, {0x3f, 0x8}, 0x3, 0x10, 0x9d, 0x2, 0x1, 0x9, 0x1, 0x5, 0x737, 0x4, 0xffff, 0xfffffff9, 0x2e, 0x4, 0x1, 0x8}) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x1001, 0x2040) 17:01:08 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 17:01:08 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 17:01:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) 17:01:08 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x280, 0x80, 0x20, 0x240, 0x1, 0x101, 0x1, 0x2, {0xdeb, 0x35, 0x1}, {0x8d2, 0xffffffff}, {0xcc3, 0x1f}, {0x3f, 0x8}, 0x3, 0x10, 0x9d, 0x2, 0x1, 0x9, 0x1, 0x5, 0x737, 0x4, 0xffff, 0xfffffff9, 0x2e, 0x4, 0x1, 0x8}) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) 17:01:08 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) 17:01:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1, 0x0) write$rfkill(r2, &(0x7f00000001c0)={0x372132d4, 0x0, 0x3}, 0x8) pselect6(0x40, &(0x7f0000000000)={0x7ac, 0x3, 0x3, 0x4, 0x0, 0xfffffffffffffffc, 0x400, 0xbc}, &(0x7f0000000040)={0x5, 0x8, 0x6, 0x3, 0x8, 0x1, 0x3ff}, &(0x7f0000000340)={0x8, 0x8, 0x10001, 0x1, 0x2, 0x1f, 0x6, 0xb734}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0xb34]}, 0x8}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) [ 3314.130010][ T9774] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3314.257794][T22222] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3314.409952][ T9774] usb 4-1: Using ep0 maxpacket: 8 [ 3314.499864][T22222] usb 5-1: Using ep0 maxpacket: 8 [ 3314.560025][ T9774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3314.571116][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3314.586835][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3314.620313][T22222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3314.632057][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3314.645163][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3314.789978][ T9774] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3314.799081][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.807193][ T9774] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3314.811717][T22222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3314.812520][ T9774] usb 4-1: Manufacturer:  [ 3314.827057][ T9774] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3314.834481][T22222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.859921][T22222] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3314.866124][T22222] usb 5-1: Manufacturer:  [ 3314.878691][T22222] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3315.157865][ T9774] cdc_ncm 4-1:1.0: bind() failure [ 3315.166729][ T9774] cdc_ncm 4-1:1.1: bind() failure [ 3315.179942][T22222] cdc_ncm 5-1:1.0: bind() failure [ 3315.200535][T22222] cdc_ncm 5-1:1.1: bind() failure [ 3315.206872][ T9774] usb 4-1: USB disconnect, device number 40 [ 3315.247716][T22222] usb 5-1: USB disconnect, device number 70 17:01:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:10 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x280, 0x80, 0x20, 0x240, 0x1, 0x101, 0x1, 0x2, {0xdeb, 0x35, 0x1}, {0x8d2, 0xffffffff}, {0xcc3, 0x1f}, {0x3f, 0x8}, 0x3, 0x10, 0x9d, 0x2, 0x1, 0x9, 0x1, 0x5, 0x737, 0x4, 0xffff, 0xfffffff9, 0x2e, 0x4, 0x1, 0x8}) 17:01:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:10 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000400)=""/228, 0xe4) 17:01:10 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x280, 0x80, 0x20, 0x240, 0x1, 0x101, 0x1, 0x2, {0xdeb, 0x35, 0x1}, {0x8d2, 0xffffffff}, {0xcc3, 0x1f}, {0x3f, 0x8}, 0x3, 0x10, 0x9d, 0x2, 0x1, 0x9, 0x1, 0x5, 0x737, 0x4, 0xffff, 0xfffffff9, 0x2e, 0x4, 0x1, 0x8}) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) 17:01:10 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) 17:01:10 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000400)=""/228, 0xe4) 17:01:10 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x280, 0x80, 0x20, 0x240, 0x1, 0x101, 0x1, 0x2, {0xdeb, 0x35, 0x1}, {0x8d2, 0xffffffff}, {0xcc3, 0x1f}, {0x3f, 0x8}, 0x3, 0x10, 0x9d, 0x2, 0x1, 0x9, 0x1, 0x5, 0x737, 0x4, 0xffff, 0xfffffff9, 0x2e, 0x4, 0x1, 0x8}) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) 17:01:10 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) 17:01:10 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000400)=""/228, 0xe4) [ 3316.040066][T22222] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3316.169795][T18515] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3316.279747][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 3316.400522][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3316.411652][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3316.427317][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3316.429798][T18515] usb 5-1: Using ep0 maxpacket: 8 [ 3316.570396][T18515] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3316.581467][T18515] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3316.594460][T18515] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3316.601689][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3316.613488][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3316.625802][T22222] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3316.633810][T22222] usb 4-1: Manufacturer:  [ 3316.638524][T22222] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3316.799892][T18515] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3316.808933][T18515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3316.816991][T18515] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3316.824541][T18515] usb 5-1: Manufacturer:  [ 3316.829175][T18515] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3316.940080][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3316.947218][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3316.979871][T22222] usb 4-1: USB disconnect, device number 41 [ 3317.124827][T18515] cdc_ncm 5-1:1.0: bind() failure [ 3317.132678][T18515] cdc_ncm 5-1:1.1: bind() failure [ 3317.154432][T18515] usb 5-1: USB disconnect, device number 71 17:01:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) 17:01:12 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:12 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000400)=""/228, 0xe4) 17:01:12 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) 17:01:12 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:12 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x541b, 0x0) 17:01:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) 17:01:12 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:12 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) 17:01:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101281, 0x0) write$fb(r3, &(0x7f0000000380), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0xc000, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x309802, 0x0) 17:01:12 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000400)=""/228, 0xe4) 17:01:12 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x541b, 0x0) 17:01:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) 17:01:12 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000400)=""/228, 0xe4) 17:01:12 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x55d640, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x26, 0x1, 0xcc) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1018100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000008) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:12 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) read$fb(r0, &(0x7f0000000080)=""/3, 0x3) 17:01:12 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x541b, 0x0) 17:01:12 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) 17:01:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x55d640, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x26, 0x1, 0xcc) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1018100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000008) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:13 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000400)=""/228, 0xe4) 17:01:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) write$fb(r2, &(0x7f0000000280)="0250fff49e198c5df6179e8a6849ac26cc3aeadf21cbc7cfb3dd68e7ba1c02c8d984880c47b208814e8159cd70423b7e3380b502632eb474227c23295177b8515cadd7bb33e92f2a2d4a33bae758723dd12ffc1e58050048bfa6d10b089d985f114ca581ce384bf0d6cb184857e95ae9e2b0209c4849e19e6cddabbaac023b7754fe8f537691cf05fd2a8d6b350a1bd90f453697910cd724b6576c8e24d0e0a67e187871f65a2e011cfaf9825931c02f0502b28a6fe8d2cdeacb3fd5cccbdd47f260423b764faac57d30999ff2c704", 0xcf) 17:01:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:13 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000400)=""/228, 0xe4) 17:01:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) 17:01:13 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x55d640, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x26, 0x1, 0xcc) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1018100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000008) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:13 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, &(0x7f0000000400)=""/228, 0xe4) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) 17:01:13 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000400)=""/228, 0xe4) 17:01:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) 17:01:13 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:13 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x55d640, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x26, 0x1, 0xcc) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1018100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000008) 17:01:13 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000400)=""/228, 0xe4) 17:01:13 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000400)=""/228, 0xe4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) [ 3318.640113][T10506] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3318.901480][T10506] usb 4-1: Using ep0 maxpacket: 8 [ 3319.030192][T10506] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3319.041190][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3319.056725][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3319.229708][T10506] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3319.239302][T10506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.253394][T10506] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3319.258790][T10506] usb 4-1: Manufacturer:  [ 3319.270139][T10506] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3319.559615][T10506] cdc_ncm 4-1:1.0: bind() failure [ 3319.566939][T10506] cdc_ncm 4-1:1.1: bind() failure [ 3319.604215][T10506] usb 4-1: USB disconnect, device number 42 17:01:14 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) 17:01:14 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x55d640, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x26, 0x1, 0xcc) 17:01:14 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:14 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000400)=""/228, 0xe4) 17:01:14 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) 17:01:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") 17:01:15 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 17:01:15 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) 17:01:15 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x55d640, 0x0) socket(0x26, 0x1, 0xcc) 17:01:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) [ 3320.449476][ T9774] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3320.689489][ T9774] usb 4-1: Using ep0 maxpacket: 8 [ 3320.810177][ T9774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3320.821289][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3320.837122][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3321.010144][ T9774] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3321.019184][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3321.032979][ T9774] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3321.038173][ T9774] usb 4-1: Manufacturer:  [ 3321.049397][ T9774] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3321.339506][ T9774] cdc_ncm 4-1:1.0: bind() failure [ 3321.351616][ T9774] cdc_ncm 4-1:1.1: bind() failure [ 3321.370588][ T9774] usb 4-1: USB disconnect, device number 43 17:01:16 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:16 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x541b, 0x0) 17:01:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) 17:01:16 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 17:01:16 executing program 5: socket(0x26, 0x1, 0xcc) 17:01:16 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x414080, 0x0) 17:01:16 executing program 5: socket(0x0, 0x1, 0xcc) 17:01:16 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 17:01:16 executing program 0: openat$fb0(0xffffffffffffff9c, 0x0, 0x414080, 0x0) 17:01:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:16 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x541b, 0x0) 17:01:16 executing program 5: socket(0x0, 0x1, 0xcc) [ 3322.219409][T23339] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3322.459344][T23339] usb 4-1: Using ep0 maxpacket: 8 [ 3322.579713][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3322.595304][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3322.613377][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3322.779790][T23339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3322.788862][T23339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3322.804798][T23339] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3322.812848][T23339] usb 4-1: Manufacturer:  [ 3322.817856][T23339] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3323.109374][T23339] cdc_ncm 4-1:1.0: bind() failure [ 3323.116541][T23339] cdc_ncm 4-1:1.1: bind() failure [ 3323.136622][T23339] usb 4-1: USB disconnect, device number 44 17:01:18 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:18 executing program 5: socket(0x0, 0x1, 0xcc) 17:01:18 executing program 0: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:01:18 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x541b, 0x0) 17:01:18 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) 17:01:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) 17:01:18 executing program 0: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:01:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:18 executing program 5: socket(0x26, 0x0, 0xcc) 17:01:18 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:18 executing program 0: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3324.009222][T23339] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3324.109253][T10506] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 3324.122533][ T9774] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3324.249223][T23339] usb 4-1: Using ep0 maxpacket: 8 [ 3324.349211][T10506] usb 2-1: Using ep0 maxpacket: 8 [ 3324.369889][ T9774] usb 3-1: Using ep0 maxpacket: 8 [ 3324.375020][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3324.396276][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3324.411467][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3324.469250][T10506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3324.480507][T10506] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3324.492253][ T9774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3324.504705][T10506] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3324.516140][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3324.526355][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3324.579916][T23339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3324.588940][T23339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3324.598593][T23339] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3324.606823][T23339] usb 4-1: Manufacturer:  [ 3324.612458][T23339] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3324.687502][T10506] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3324.696946][ T9774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3324.706413][T10506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3324.717613][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3324.726523][T10506] usb 2-1: Product: ⋼溷騣ꘉ뼐 [ 3324.732063][ T9774] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3324.737474][ T9774] usb 3-1: Manufacturer:  [ 3324.743820][T10506] usb 2-1: Manufacturer:  [ 3324.750226][T10506] usb 2-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3324.764833][ T9774] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3324.909377][T23339] cdc_ncm 4-1:1.0: bind() failure [ 3324.919042][T23339] cdc_ncm 4-1:1.1: bind() failure [ 3324.929574][T23339] usb 4-1: USB disconnect, device number 45 [ 3325.059279][ T9774] cdc_ncm 3-1:1.0: bind() failure [ 3325.075682][ T9774] cdc_ncm 3-1:1.1: bind() failure [ 3325.080981][T10506] cdc_ncm 2-1:1.0: bind() failure [ 3325.097304][T10506] cdc_ncm 2-1:1.1: bind() failure [ 3325.114869][ T9774] usb 3-1: USB disconnect, device number 118 [ 3325.135876][T10506] usb 2-1: USB disconnect, device number 87 17:01:20 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:20 executing program 5: socket(0x26, 0x0, 0x0) 17:01:20 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getpeername(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:20 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0x8) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:20 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:20 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:20 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xc1000) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x7fffffffefff) 17:01:20 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x7fffffffefff) [ 3325.739126][T10506] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3325.749150][ T9774] usb 4-1: new high-speed USB device number 46 using dummy_hcd 17:01:20 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) [ 3325.819128][T23339] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 3325.979102][T26248] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 3325.999715][T10506] usb 1-1: Using ep0 maxpacket: 8 [ 3326.004862][ T9774] usb 4-1: Using ep0 maxpacket: 8 [ 3326.069801][T23339] usb 6-1: Using ep0 maxpacket: 8 [ 3326.129288][ T9774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3326.140485][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3326.151693][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3326.169416][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3326.179783][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3326.190062][T23339] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3326.203296][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3326.214383][T23339] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3326.224589][T26248] usb 2-1: Using ep0 maxpacket: 8 [ 3326.230156][T23339] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3326.349680][T26248] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3326.361194][T26248] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3326.374258][T26248] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3326.400079][T10506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3326.409325][ T9774] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3326.418338][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3326.426697][T23339] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3326.438599][T10506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3326.446655][T23339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3326.456805][ T9774] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3326.462094][T10506] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3326.468786][T10506] usb 1-1: Manufacturer:  [ 3326.474197][T23339] usb 6-1: Product: ⋼溷騣ꘉ뼐 [ 3326.479488][T10506] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3326.494937][T23339] usb 6-1: Manufacturer:  [ 3326.499609][ T9774] usb 4-1: Manufacturer:  [ 3326.504667][ T9774] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3326.520197][T23339] usb 6-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3326.549742][T26248] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3326.566025][T26248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3326.587157][T26248] usb 2-1: Product: ⋼溷騣ꘉ뼐 [ 3326.600692][T26248] usb 2-1: Manufacturer:  [ 3326.611791][T26248] usb 2-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3326.819978][ T9774] cdc_ncm 4-1:1.0: bind() failure [ 3326.833965][ T9774] cdc_ncm 4-1:1.1: bind() failure [ 3326.845058][T23339] cdc_ncm 6-1:1.0: bind() failure [ 3326.851244][T10506] cdc_ncm 1-1:1.0: bind() failure [ 3326.862465][T23339] cdc_ncm 6-1:1.1: bind() failure [ 3326.890320][T10506] cdc_ncm 1-1:1.1: bind() failure [ 3326.899289][ T9774] usb 4-1: USB disconnect, device number 46 [ 3326.909391][T10506] usb 1-1: USB disconnect, device number 79 [ 3326.927234][T23339] usb 6-1: USB disconnect, device number 83 [ 3326.989210][T26248] cdc_ncm 2-1:1.0: bind() failure [ 3327.001180][T26248] cdc_ncm 2-1:1.1: bind() failure [ 3327.034990][T26248] usb 2-1: USB disconnect, device number 88 17:01:22 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="8078d77da65a8b311e835e74aecd99fe21e42c3feace59b60e2a9eabb6509753a8ff1b9610d6adb81086a44cd72b0573b9d0fa92cf2fd562fd750d8ed69e6fa1b1e4b071bb8aedd4e37260dc6082862667845387b38e3cf9612f3bb01ce4867c031afe") syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x7fffffffefff) 17:01:22 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:22 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) syz_usbip_server_init(0x2) 17:01:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:22 executing program 2: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x7fffffffefff) 17:01:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) r4 = getpgrp(0x0) waitid(0x0, r4, 0x0, 0x8, &(0x7f0000000300)) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:22 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) syz_usbip_server_init(0x2) 17:01:22 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) r4 = getpgrp(0x0) waitid(0x0, r4, 0x0, 0x8, &(0x7f0000000300)) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:22 executing program 2: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x7fffffffefff) [ 3327.543302][ T3485] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3327.549847][ T3485] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 17:01:22 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) [ 3327.601460][ T3486] vhci_hcd: connection closed [ 3327.601822][ T21] vhci_hcd: stop threads [ 3327.626502][ T21] vhci_hcd: release socket [ 3327.648777][ T21] vhci_hcd: disconnect device [ 3327.709131][T26248] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3327.737866][ T3496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3327.744393][ T3496] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3327.789311][ T3498] vhci_hcd: connection closed [ 3327.789873][ T21] vhci_hcd: stop threads [ 3327.805659][ T21] vhci_hcd: release socket [ 3327.820224][ T21] vhci_hcd: disconnect device [ 3327.958995][T26248] usb 4-1: Using ep0 maxpacket: 8 [ 3328.079396][T26248] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3328.090589][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3328.103647][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3328.279050][T26248] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3328.288306][T26248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3328.305540][T26248] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3328.315650][T26248] usb 4-1: Manufacturer:  [ 3328.325015][T26248] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3328.629071][T26248] cdc_ncm 4-1:1.0: bind() failure [ 3328.649989][T26248] cdc_ncm 4-1:1.1: bind() failure [ 3328.670569][T26248] usb 4-1: USB disconnect, device number 47 17:01:23 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8, 0x4) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:23 executing program 2: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x7fffffffefff) 17:01:23 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) 17:01:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) r4 = getpgrp(0x0) waitid(0x0, r4, 0x0, 0x8, &(0x7f0000000300)) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:23 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) syz_usbip_server_init(0x2) 17:01:23 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) syz_usbip_server_init(0x2) 17:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f00000004c0)) 17:01:24 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x7fffffffefff) [ 3329.203525][ T3523] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3329.204313][ T3522] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3329.210064][ T3523] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3329.216562][ T3522] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 17:01:24 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) r3 = getpgrp(0x0) waitid(0x0, r3, 0x0, 0x8, &(0x7f0000000300)) 17:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0x0) [ 3329.309238][ T3526] vhci_hcd: connection closed [ 3329.309675][T30845] vhci_hcd: stop threads [ 3329.319364][T30845] vhci_hcd: release socket [ 3329.344063][T30845] vhci_hcd: disconnect device 17:01:24 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x7fffffffefff) 17:01:24 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) getpgrp(0x0) [ 3329.417091][ T3536] vhci_hcd: connection closed [ 3329.427301][T30845] vhci_hcd: stop threads [ 3329.474115][T30845] vhci_hcd: release socket [ 3329.482638][T30845] vhci_hcd: disconnect device [ 3329.569160][T13035] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3329.819905][T13035] usb 4-1: Using ep0 maxpacket: 8 [ 3329.939477][T13035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3329.950528][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3329.968056][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3330.149353][T13035] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3330.158455][T13035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3330.166569][T13035] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3330.172586][T13035] usb 4-1: Manufacturer:  [ 3330.177743][T13035] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3330.468936][T13035] cdc_ncm 4-1:1.0: bind() failure [ 3330.480878][T13035] cdc_ncm 4-1:1.1: bind() failure [ 3330.499897][T13035] usb 4-1: USB disconnect, device number 48 17:01:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0x0) 17:01:25 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x7fffffffefff) 17:01:25 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) syz_usbip_server_init(0x2) 17:01:25 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) getpgrp(0x0) 17:01:25 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) syz_usbip_server_init(0x2) [ 3331.027918][ T3564] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 3331.034483][ T3564] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 17:01:25 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x7fffffffefff) [ 3331.054258][ T3566] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3331.054277][ T3566] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3331.070060][ T3570] vhci_hcd: connection closed [ 3331.070539][ T21] vhci_hcd: stop threads [ 3331.070559][ T21] vhci_hcd: release socket 17:01:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0x0) [ 3331.070575][ T21] vhci_hcd: disconnect device 17:01:26 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) getpgrp(0x0) 17:01:26 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x7fffffffefff) [ 3331.104059][ T3571] vhci_hcd: connection closed [ 3331.155666][ T28] vhci_hcd: stop threads [ 3331.171039][ T28] vhci_hcd: release socket [ 3331.185730][ T28] vhci_hcd: disconnect device 17:01:26 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) getpgrp(0x0) 17:01:26 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) getpgrp(0x0) [ 3331.358719][ T9774] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3331.598882][ T9774] usb 4-1: Using ep0 maxpacket: 8 [ 3331.719411][ T9774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3331.730892][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3331.743824][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3331.909243][ T9774] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3331.918301][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3331.936465][ T9774] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3331.941791][ T9774] usb 4-1: Manufacturer:  [ 3331.946698][ T9774] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3332.238795][ T9774] cdc_ncm 4-1:1.0: bind() failure [ 3332.260412][ T9774] cdc_ncm 4-1:1.1: bind() failure [ 3332.280139][ T9774] usb 4-1: USB disconnect, device number 49 17:01:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:27 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x7fffffffefff) 17:01:27 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20101, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4080e8d88962c3a3, 0x6, 0x6, 0x0, 0x14, @mcast2, @mcast1, 0x7800, 0x8, 0xba, 0xffff}}) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0x145000) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) r3 = getpgrp(0x0) waitid(0x0, r3, 0x0, 0x8, &(0x7f0000000300)) 17:01:27 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) syz_usbip_server_init(0x2) 17:01:27 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x1e0, 0x400, 0x5995f585bff5c306, 0x0, 0xf8f, 0x1, 0x0, {0x3ff, 0xbc49}, {0xfa, 0x80, 0x1}, {0x20, 0x7, 0x1}, {0x8, 0x2c}, 0x6, 0x100, 0x80000001, 0x7f, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x3, 0x7, 0x7, 0x34, 0x1, 0x2, 0x2}) getpgrp(0x0) 17:01:27 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) 17:01:27 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r0 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getpgrp(0x0) [ 3332.794022][ T3611] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3332.800565][ T3611] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 17:01:27 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:27 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) 17:01:27 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) [ 3332.879242][ T3616] vhci_hcd: connection closed [ 3332.879824][ T28] vhci_hcd: stop threads [ 3332.904387][ T28] vhci_hcd: release socket [ 3332.920025][ T28] vhci_hcd: disconnect device 17:01:27 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) getpgrp(0x0) 17:01:27 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) [ 3333.179894][ T9774] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3333.278704][T22222] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3333.418580][ T9774] usb 4-1: Using ep0 maxpacket: 8 [ 3333.539030][ T9774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3333.548538][T22222] usb 5-1: Using ep0 maxpacket: 8 [ 3333.556402][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3333.569797][ T9774] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3333.688749][T22222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3333.699878][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3333.718521][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3333.740148][ T9774] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3333.749248][ T9774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3333.757214][ T9774] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3333.762556][ T9774] usb 4-1: Manufacturer:  [ 3333.770875][ T9774] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3333.888846][T22222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3333.898398][T22222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3333.914661][T22222] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3333.922501][T22222] usb 5-1: Manufacturer:  [ 3333.927089][T22222] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3334.068683][ T9774] cdc_ncm 4-1:1.0: bind() failure [ 3334.076181][ T9774] cdc_ncm 4-1:1.1: bind() failure [ 3334.103866][ T9774] usb 4-1: USB disconnect, device number 50 [ 3334.228653][T22222] cdc_ncm 5-1:1.0: bind() failure [ 3334.249396][T22222] cdc_ncm 5-1:1.1: bind() failure [ 3334.268560][T22222] usb 5-1: USB disconnect, device number 72 17:01:29 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:29 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r1, 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) 17:01:29 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) getpgrp(0x0) 17:01:29 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) 17:01:29 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x13, 0x0, "ab6286cdd19271a3615bb86a287a24991d00d0de155e2214f830f96d978ac5c3a1b583f081ab29927b5a8cb3b1611c98273cc37a642e1c1ecf4d4e2ac757b7db6b8344de1ce588a437ed263fa360894d"}, 0xd8) 17:01:29 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r1, 0x0, 0x0) 17:01:29 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) getpgrp(0x0) 17:01:29 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:29 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) 17:01:29 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) 17:01:29 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:29 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) getpgrp(0x0) [ 3334.928507][T19845] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3335.138566][T22222] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3335.188793][T19845] usb 4-1: Using ep0 maxpacket: 8 [ 3335.320637][T19845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3335.331669][T19845] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3335.344608][T19845] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3335.398615][T22222] usb 5-1: Using ep0 maxpacket: 8 [ 3335.538605][T19845] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3335.547657][T19845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3335.559611][T22222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3335.570673][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3335.580749][T19845] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3335.586132][T19845] usb 4-1: Manufacturer:  [ 3335.590809][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3335.600674][T19845] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3335.818535][T22222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3335.829449][T22222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3335.837599][T22222] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3335.842936][T22222] usb 5-1: Manufacturer:  [ 3335.848937][T22222] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3335.900778][T19845] cdc_ncm 4-1:1.0: bind() failure [ 3335.929547][T19845] cdc_ncm 4-1:1.1: bind() failure [ 3335.947037][T19845] usb 4-1: USB disconnect, device number 51 [ 3336.168565][T22222] cdc_ncm 5-1:1.0: bind() failure [ 3336.180729][T22222] cdc_ncm 5-1:1.1: bind() failure [ 3336.200158][T22222] usb 5-1: USB disconnect, device number 73 17:01:31 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:31 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r1, 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) 17:01:31 executing program 5: getpgrp(0x0) 17:01:31 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) 17:01:31 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) ioprio_get$uid(0x3, 0xee01) 17:01:31 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:31 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r1, 0x0, 0x0) 17:01:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:31 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:31 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioprio_get$uid(0x3, 0xee01) 17:01:31 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) 17:01:31 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) [ 3336.788448][T26248] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3337.038319][T26248] usb 4-1: Using ep0 maxpacket: 8 [ 3337.088410][T23339] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3337.158772][T26248] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3337.169884][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3337.189171][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3337.328533][T23339] usb 5-1: Using ep0 maxpacket: 8 [ 3337.358473][T26248] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3337.367528][T26248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.377359][T26248] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3337.382746][T26248] usb 4-1: Manufacturer:  [ 3337.387588][T26248] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3337.459532][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3337.470582][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3337.482417][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3337.648902][T23339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3337.658066][T23339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.677845][T23339] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3337.684818][T26248] cdc_ncm 4-1:1.0: bind() failure [ 3337.697587][T23339] usb 5-1: Manufacturer:  [ 3337.702284][T23339] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3337.719204][T26248] cdc_ncm 4-1:1.1: bind() failure [ 3337.728023][T26248] usb 4-1: USB disconnect, device number 52 [ 3338.028488][T23339] cdc_ncm 5-1:1.0: bind() failure [ 3338.041822][T23339] cdc_ncm 5-1:1.1: bind() failure [ 3338.065807][T23339] usb 5-1: USB disconnect, device number 74 17:01:33 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:33 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) 17:01:33 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:33 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) 17:01:33 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:33 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) ioprio_get$uid(0x3, 0xee01) 17:01:33 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) 17:01:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:33 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) 17:01:33 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioprio_get$uid(0x3, 0xee01) 17:01:33 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:33 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x55903ff2dd5f6749) [ 3338.518323][T26248] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3338.768433][T26248] usb 4-1: Using ep0 maxpacket: 8 [ 3338.888320][T26248] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3338.899778][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3338.915399][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3339.078317][T26248] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3339.087473][T26248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3339.101793][T26248] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3339.107012][T26248] usb 4-1: Manufacturer:  [ 3339.118860][T26248] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3339.408504][T26248] cdc_ncm 4-1:1.0: bind() failure [ 3339.420270][T26248] cdc_ncm 4-1:1.1: bind() failure [ 3339.439533][T26248] usb 4-1: USB disconnect, device number 53 17:01:34 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:34 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) 17:01:34 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) ioprio_get$uid(0x3, 0xee01) 17:01:34 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 17:01:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:34 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) ioprio_get$uid(0x3, 0xee01) 17:01:34 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 17:01:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:34 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:34 executing program 0: socket(0x2c, 0x6, 0x0) 17:01:34 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:35 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) [ 3340.288233][T10506] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3340.528140][T10506] usb 4-1: Using ep0 maxpacket: 8 [ 3340.648651][T10506] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3340.659666][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3340.673241][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3340.838126][T10506] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3340.847313][T10506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3340.858942][T10506] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3340.864360][T10506] usb 4-1: Manufacturer:  [ 3340.869330][T10506] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3341.168311][T10506] cdc_ncm 4-1:1.0: bind() failure [ 3341.175440][T10506] cdc_ncm 4-1:1.1: bind() failure [ 3341.186800][T10506] usb 4-1: USB disconnect, device number 54 17:01:36 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:36 executing program 0: socket(0x0, 0x6, 0x0) 17:01:36 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) read$fb(r0, &(0x7f0000000000)=""/151, 0x97) ioprio_get$uid(0x3, 0xee01) 17:01:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:36 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioprio_get$uid(0x3, 0xee01) 17:01:36 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:36 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:36 executing program 0: socket(0x0, 0x6, 0x0) 17:01:36 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:36 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:36 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) ioprio_get$uid(0x3, 0xee01) 17:01:36 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) [ 3341.978094][T23339] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 3342.048055][T22222] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3342.228059][T23339] usb 5-1: Using ep0 maxpacket: 8 [ 3342.318054][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 3342.348637][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3342.359938][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3342.373094][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3342.478039][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3342.489066][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3342.499116][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3342.538636][T23339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3342.547750][T23339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3342.562967][T23339] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3342.571322][T23339] usb 5-1: Manufacturer:  [ 3342.575905][T23339] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3342.708161][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3342.717209][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3342.732778][T22222] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3342.741968][T22222] usb 4-1: Manufacturer:  [ 3342.746581][T22222] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3342.868346][T23339] cdc_ncm 5-1:1.0: bind() failure [ 3342.890796][T23339] cdc_ncm 5-1:1.1: bind() failure [ 3342.908337][T23339] usb 5-1: USB disconnect, device number 75 [ 3343.038083][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3343.058719][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3343.077493][T22222] usb 4-1: USB disconnect, device number 55 17:01:38 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:38 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:38 executing program 0: socket(0x0, 0x6, 0x0) 17:01:38 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioprio_get$uid(0x3, 0xee01) 17:01:38 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:38 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r0, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:38 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') ioprio_get$uid(0x3, 0xee01) 17:01:38 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) ioprio_get$uid(0x3, 0xee01) 17:01:38 executing program 0: socket(0x2c, 0x0, 0x0) 17:01:38 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) ioprio_get$uid(0x3, 0xee01) 17:01:38 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:38 executing program 2: ioprio_get$uid(0x3, 0xee01) [ 3343.877953][T22222] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 3343.908433][T23339] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3344.117846][T22222] usb 5-1: Using ep0 maxpacket: 8 [ 3344.207873][T23339] usb 4-1: Using ep0 maxpacket: 8 [ 3344.238263][T22222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3344.249391][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3344.262523][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3344.337971][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3344.348976][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3344.359082][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3344.428137][T22222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3344.437165][T22222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.445245][T22222] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3344.452151][T22222] usb 5-1: Manufacturer:  [ 3344.456761][T22222] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3344.558051][T23339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3344.567187][T23339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.578820][T23339] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3344.584118][T23339] usb 4-1: Manufacturer:  [ 3344.589134][T23339] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3344.747951][T22222] cdc_ncm 5-1:1.0: bind() failure [ 3344.769114][T22222] cdc_ncm 5-1:1.1: bind() failure [ 3344.789002][T22222] usb 5-1: USB disconnect, device number 76 [ 3344.887950][T23339] cdc_ncm 4-1:1.0: bind() failure [ 3344.897601][T23339] cdc_ncm 4-1:1.1: bind() failure [ 3344.921743][T23339] usb 4-1: USB disconnect, device number 56 17:01:40 executing program 3: syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:40 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:40 executing program 2: ioprio_get$uid(0x0, 0xee01) 17:01:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(r1, &(0x7f0000000440)=@tipc=@id, &(0x7f00000004c0)=0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 17:01:40 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) read$fb(r0, &(0x7f0000000000)=""/151, 0x97) ioprio_get$uid(0x3, 0xee01) 17:01:40 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:40 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:40 executing program 2: ioprio_get$uid(0x0, 0xee01) 17:01:40 executing program 1: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) 17:01:40 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioprio_get$uid(0x3, 0xee01) 17:01:40 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:40 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioprio_get$uid(0x3, 0xee01) [ 3345.717935][T23339] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 3345.717948][T13035] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3345.977800][T23339] usb 5-1: Using ep0 maxpacket: 8 [ 3345.987775][T13035] usb 4-1: Using ep0 maxpacket: 8 [ 3346.098128][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3346.109329][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3346.117865][T13035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3346.119999][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3346.147988][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3346.163651][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3346.298495][T23339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3346.307681][T23339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.315730][T23339] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3346.327674][T23339] usb 5-1: Manufacturer:  [ 3346.332288][T23339] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3346.353235][T13035] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3346.373884][T13035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.387829][T13035] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3346.393221][T13035] usb 4-1: Manufacturer:  [ 3346.406423][T13035] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3346.627803][T23339] cdc_ncm 5-1:1.0: bind() failure [ 3346.647917][T23339] cdc_ncm 5-1:1.1: bind() failure [ 3346.667008][T23339] usb 5-1: USB disconnect, device number 77 [ 3346.737930][T13035] cdc_ncm 4-1:1.0: bind() failure [ 3346.749885][T13035] cdc_ncm 4-1:1.1: bind() failure [ 3346.770030][T13035] usb 4-1: USB disconnect, device number 57 17:01:42 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:42 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:42 executing program 2: ioprio_get$uid(0x0, 0xee01) 17:01:42 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:42 executing program 0: r0 = socket(0x2c, 0x6, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x74, 0x0, 0x202, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x41) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20009000}, 0x55903ff2dd5f6749) read$fb(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x3, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) 17:01:42 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:42 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:42 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x40) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff800000000, 0x109280) r0 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xaae, 0x84180) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250a0000000c000380060007004e2400004000018008000500010000001400030020381a6974075728d87d4e707a010000000000000000000000000002080005000300000008000800ff0f0000060001000200000008000b007369700020000380140002007465616d300000000000000000000000060007004e2000000800040000000000380003801400060000000000000000000000000000000001080005007f00000108000500000000000800010001000000060007004e230000080006000100000008000500ff030000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getpgrp(0x0) 17:01:42 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') ioprio_get$uid(0x3, 0xee01) 17:01:42 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 17:01:42 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) 17:01:42 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) [ 3347.577605][T18982] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 3347.598231][T23339] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3347.687716][T26248] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3347.827763][T18982] usb 5-1: Using ep0 maxpacket: 8 [ 3347.858138][T23339] usb 4-1: Using ep0 maxpacket: 8 [ 3347.937805][T26248] usb 3-1: Using ep0 maxpacket: 8 [ 3347.988434][T18982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3347.999686][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3348.014893][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3348.028848][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3348.038797][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3348.049142][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3348.088335][T26248] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3348.099585][T26248] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3348.113807][T26248] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3348.228410][T18982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3348.237639][T18982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.245643][T18982] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3348.254199][T23339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3348.263900][T18982] usb 5-1: Manufacturer:  [ 3348.268696][T23339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.278111][T18982] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3348.293591][T23339] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3348.299126][T26248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3348.308945][T23339] usb 4-1: Manufacturer:  [ 3348.314052][T23339] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3348.332586][T26248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.357621][T26248] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3348.362847][T26248] usb 3-1: Manufacturer:  [ 3348.367443][T26248] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3348.617741][T18982] cdc_ncm 5-1:1.0: bind() failure [ 3348.652547][T18982] cdc_ncm 5-1:1.1: bind() failure [ 3348.667700][T23339] cdc_ncm 4-1:1.0: bind() failure [ 3348.675662][T23339] cdc_ncm 4-1:1.1: bind() failure [ 3348.704876][T18982] usb 5-1: USB disconnect, device number 78 [ 3348.711152][T26248] cdc_ncm 3-1:1.0: bind() failure [ 3348.723098][T26248] cdc_ncm 3-1:1.1: bind() failure [ 3348.731683][T23339] usb 4-1: USB disconnect, device number 58 [ 3348.760528][T26248] usb 3-1: USB disconnect, device number 119 17:01:44 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:44 executing program 5: ioprio_get$uid(0x3, 0xee01) 17:01:44 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) 17:01:44 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) 17:01:44 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:44 executing program 5: ioprio_get$uid(0x0, 0xee01) 17:01:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 17:01:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) setgid(0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) 17:01:44 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) ioprio_get$uid(0x3, 0xee01) 17:01:44 executing program 5: ioprio_get$uid(0x0, 0xee01) 17:01:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) setgid(0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) 17:01:44 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) setgid(0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) [ 3349.477600][T13035] usb 5-1: new high-speed USB device number 79 using dummy_hcd 17:01:44 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:44 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000400)={0x2000, 0x800, 0x890, 0x78, 0x8, 0x6, 0x12, 0x0, {0x101, 0x3, 0x1}, {0x4, 0x20, 0x1}, {0x8, 0x7fff}, {0xeee9, 0x1}, 0x2, 0x100, 0x8, 0x9, 0x1, 0x7, 0x7ff, 0x9, 0x6, 0x1f, 0x460, 0x0, 0x10, 0x0, 0x1, 0x1}) 17:01:44 executing program 5: ioprio_get$uid(0x0, 0xee01) 17:01:44 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) setgid(0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) [ 3349.737484][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3349.858131][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3349.873393][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3349.891764][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3350.067605][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3350.076734][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3350.088479][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3350.093766][T13035] usb 5-1: Manufacturer:  [ 3350.099415][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3350.397617][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3350.404918][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3350.423030][T13035] usb 5-1: USB disconnect, device number 79 17:01:45 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:45 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket(0xf, 0x6, 0x8) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000090) 17:01:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) write$fb(r1, &(0x7f0000000000)="5bdf3c21e3896d7d41542badef6ff749736ea50958d59771aa36e5f83f7126050b61b7f97714c502", 0x28) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) 17:01:45 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) setgid(0xffffffffffffffff) 17:01:45 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fb0\x00', 0x80800, 0x0) 17:01:45 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:45 executing program 2: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket(0xf, 0x6, 0x8) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000090) 17:01:45 executing program 1: setgid(0xffffffffffffffff) 17:01:45 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:46 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket(0xf, 0x6, 0x8) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000090) 17:01:46 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x2, 0x0) 17:01:46 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x7fffffffefff) [ 3351.277390][T13035] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3351.527469][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3351.648134][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3351.659230][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3351.674844][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3351.847450][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3351.856542][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3351.872264][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3351.880300][T13035] usb 5-1: Manufacturer:  [ 3351.884909][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3352.177435][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3352.197709][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3352.217552][T13035] usb 5-1: USB disconnect, device number 80 17:01:47 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket(0xf, 0x6, 0x8) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000090) 17:01:47 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="a53c109d88812b7288c90609053fe39c", 0x10) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:47 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x7fffffffefff) 17:01:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x2, 0x0) 17:01:47 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x626100, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:47 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:47 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x7fffffffefff) 17:01:47 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socket(0xf, 0x6, 0x8) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000040)) syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') 17:01:47 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) recvfrom$l2tp(r2, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x2, 0x0) 17:01:47 executing program 2: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x7fffffffefff) 17:01:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x2, 0x0) 17:01:47 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socket(0xf, 0x6, 0x8) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000040)) 17:01:47 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 3352.987290][T26248] usb 4-1: new high-speed USB device number 59 using dummy_hcd 17:01:47 executing program 2: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x7fffffffefff) [ 3353.067259][T13035] usb 5-1: new high-speed USB device number 81 using dummy_hcd 17:01:48 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socket(0xf, 0x6, 0x8) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) [ 3353.237254][T26248] usb 4-1: Using ep0 maxpacket: 8 [ 3353.317255][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3353.387311][T26248] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3353.399054][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3353.412626][T26248] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3353.437967][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3353.449196][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3353.465196][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3353.597832][T26248] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3353.606875][T26248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.624496][T26248] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3353.630129][T26248] usb 4-1: Manufacturer:  [ 3353.634721][T26248] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3353.637804][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3353.670643][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.686714][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3353.692047][T13035] usb 5-1: Manufacturer:  [ 3353.696673][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3353.948605][T26248] cdc_ncm 4-1:1.0: bind() failure [ 3353.959003][T26248] cdc_ncm 4-1:1.1: bind() failure [ 3353.986196][T26248] usb 4-1: USB disconnect, device number 59 [ 3354.017307][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3354.038042][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3354.062860][T13035] usb 5-1: USB disconnect, device number 81 17:01:49 executing program 4: syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:49 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x2, 0x0) 17:01:49 executing program 2: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x7fffffffefff) 17:01:49 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:49 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socket(0xf, 0x6, 0x8) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) 17:01:49 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x7fffffffefff) 17:01:49 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socket(0xf, 0x6, 0x8) 17:01:49 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:49 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x2, 0x0) 17:01:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x7fffffffefff) 17:01:49 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x2, 0x0) [ 3354.857270][T10506] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3354.868143][T13035] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3355.067148][T10506] usb 4-1: device descriptor read/64, error 18 [ 3355.147157][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3355.307262][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3355.318330][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3355.331669][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3355.337636][T10506] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3355.517251][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3355.526312][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3355.537274][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3355.537418][T10506] usb 4-1: device descriptor read/64, error 18 [ 3355.548841][T13035] usb 5-1: Manufacturer:  [ 3355.553446][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3355.659785][T10506] usb usb4-port1: attempt power cycle [ 3355.857174][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3355.877944][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3355.903067][T13035] usb 5-1: USB disconnect, device number 82 17:01:51 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:51 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:51 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) socket(0xf, 0x6, 0x8) 17:01:51 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x7fffffffefff) 17:01:51 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 3356.367290][T10506] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3356.457122][T10506] usb 4-1: Invalid ep0 maxpacket: 0 [ 3356.617020][T10506] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3356.707523][T10506] usb 4-1: Invalid ep0 maxpacket: 0 [ 3356.712942][T10506] usb usb4-port1: unable to enumerate USB device [ 3356.749377][T13035] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 3357.007084][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3357.167091][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3357.178308][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3357.195349][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3357.397070][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3357.406248][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.422025][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3357.432596][T13035] usb 5-1: Manufacturer:  [ 3357.440065][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:01:52 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:52 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x7fffffffefff) 17:01:52 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) socket(0xf, 0x6, 0x8) 17:01:52 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) read$fb(r0, &(0x7f0000000000)=""/151, 0x97) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:52 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:01:52 executing program 1: openat$audio1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:01:52 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) socket(0xf, 0x6, 0x8) [ 3357.737045][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3357.761498][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3357.793855][T13035] usb 5-1: USB disconnect, device number 83 [ 3357.977344][T22222] usb 4-1: new high-speed USB device number 64 using dummy_hcd 17:01:53 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:53 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x7fffffffefff) 17:01:53 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x0, 0x0) 17:01:53 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:53 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) socket(0xf, 0x6, 0x8) [ 3358.176932][T22222] usb 4-1: device descriptor read/64, error 18 [ 3358.446935][T22222] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3358.636894][T22222] usb 4-1: device descriptor read/64, error 18 [ 3358.757285][T22222] usb usb4-port1: attempt power cycle [ 3359.476831][T22222] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3359.596921][T22222] usb 4-1: Invalid ep0 maxpacket: 0 [ 3359.746829][T22222] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3359.856922][T22222] usb 4-1: Invalid ep0 maxpacket: 0 [ 3359.862294][T22222] usb usb4-port1: unable to enumerate USB device 17:01:55 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:55 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket(0xf, 0x6, 0x8) 17:01:55 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:55 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x7fffffffefff) 17:01:55 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x0, 0x0) 17:01:55 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:55 executing program 5: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) socket(0xf, 0x6, 0x8) 17:01:55 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:55 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x0, 0x0) 17:01:55 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000000)=""/151, 0x97) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x100000000, 0x6, 0x8483, 0x80000001, 0x80000000, 0x60a, 0x2}, &(0x7f0000000140)={0x100000001, 0x3, 0x8, 0x800, 0x7, 0x2, 0x40, 0xfffffffffffffff7}, &(0x7f0000000180)={0xbf85, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x4, 0x7f, 0x4}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setfsuid(0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:55 executing program 5: socket(0xf, 0x6, 0x8) 17:01:55 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) [ 3361.086771][T13035] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3361.286807][T13035] usb 4-1: device descriptor read/64, error 18 [ 3361.566770][T13035] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3361.776726][T13035] usb 4-1: device descriptor read/64, error 18 [ 3361.907242][T13035] usb usb4-port1: attempt power cycle [ 3362.616832][T13035] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3362.736987][T13035] usb 4-1: Invalid ep0 maxpacket: 0 [ 3362.886722][T13035] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3362.977226][T13035] usb 4-1: Invalid ep0 maxpacket: 0 [ 3362.982617][T13035] usb usb4-port1: unable to enumerate USB device 17:01:58 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:58 executing program 2: ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x7ff, 0x80880) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socket(0xf, 0x6, 0x8) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000040)) 17:01:58 executing program 5: socket(0x0, 0x6, 0x8) 17:01:58 executing program 0: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000280)=""/84, 0x54, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16=r2, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:01:58 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:01:58 executing program 5: socket(0x0, 0x6, 0x8) 17:01:58 executing program 0: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x2042, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:58 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16=r2, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:01:58 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16=r2, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:01:58 executing program 0: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10) 17:01:58 executing program 5: socket(0x0, 0x6, 0x8) [ 3364.126625][T22222] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3364.376632][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 3364.506666][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3364.517721][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3364.530827][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3364.696887][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3364.705929][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3364.717049][T22222] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3364.722573][T22222] usb 4-1: Manufacturer:  [ 3364.727492][T22222] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3365.016595][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3365.026042][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3365.053011][T22222] usb 4-1: USB disconnect, device number 72 17:02:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16=r2, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:00 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e23, @empty}, @rc={0x1f, @any, 0x6}, @ethernet={0x0, @broadcast}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ipvlan0\x00', 0x1ff, 0x10001, 0x6}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x23, 0x3, 0x9) ioctl$FBIO_WAITFORVSYNC(r2, 0x541b, 0x0) 17:02:00 executing program 5: socket(0xf, 0x0, 0x8) 17:02:00 executing program 0: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:02:00 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:00 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:00 executing program 5: socket(0xf, 0x0, 0x0) 17:02:00 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) 17:02:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:00 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) 17:02:00 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e23, @empty}, @rc={0x1f, @any, 0x6}, @ethernet={0x0, @broadcast}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ipvlan0\x00', 0x1ff, 0x10001, 0x6}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x23, 0x3, 0x9) ioctl$FBIO_WAITFORVSYNC(r2, 0x541b, 0x0) 17:02:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:00 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) 17:02:00 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) [ 3365.838656][T22222] usb 5-1: new high-speed USB device number 84 using dummy_hcd 17:02:00 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e23, @empty}, @rc={0x1f, @any, 0x6}, @ethernet={0x0, @broadcast}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ipvlan0\x00', 0x1ff, 0x10001, 0x6}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x23, 0x3, 0x9) ioctl$FBIO_WAITFORVSYNC(r2, 0x541b, 0x0) 17:02:00 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3365.916620][T10961] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 3366.116516][T22222] usb 5-1: Using ep0 maxpacket: 8 [ 3366.186422][T10961] usb 4-1: Using ep0 maxpacket: 8 [ 3366.246534][T22222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3366.257531][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3366.270705][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3366.306470][T10961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3366.322508][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3366.335858][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3366.456561][T22222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3366.465651][T22222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.483054][T22222] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3366.491559][T22222] usb 5-1: Manufacturer:  [ 3366.496150][T22222] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3366.526637][T10961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3366.535680][T10961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.556209][T10961] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3366.565959][T10961] usb 4-1: Manufacturer:  [ 3366.575161][T10961] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3366.806433][T22222] cdc_ncm 5-1:1.0: bind() failure [ 3366.815980][T22222] cdc_ncm 5-1:1.1: bind() failure [ 3366.840312][T22222] usb 5-1: USB disconnect, device number 84 [ 3366.886631][T10961] cdc_ncm 4-1:1.0: bind() failure [ 3366.912606][T10961] cdc_ncm 4-1:1.1: bind() failure [ 3366.925427][T10961] usb 4-1: USB disconnect, device number 73 17:02:02 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:02 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:02 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) 17:02:02 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) 17:02:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e23, @empty}, @rc={0x1f, @any, 0x6}, @ethernet={0x0, @broadcast}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ipvlan0\x00', 0x1ff, 0x10001, 0x6}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x23, 0x3, 0x9) 17:02:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e23, @empty}, @rc={0x1f, @any, 0x6}, @ethernet={0x0, @broadcast}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ipvlan0\x00', 0x1ff, 0x10001, 0x6}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) socket(0x23, 0x3, 0x9) 17:02:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:02 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5450, 0x0) 17:02:02 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) 17:02:02 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e23, @empty}, @rc={0x1f, @any, 0x6}, @ethernet={0x0, @broadcast}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ipvlan0\x00', 0x1ff, 0x10001, 0x6}) socket(0x23, 0x3, 0x9) 17:02:02 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) [ 3367.566361][T10961] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 3367.726711][T10506] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 3367.766875][T10961] usb 5-1: device descriptor read/64, error 18 [ 3367.976274][T10506] usb 4-1: Using ep0 maxpacket: 8 [ 3368.036324][T10961] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 3368.096438][T10506] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3368.107454][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3368.122998][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3368.236261][T10961] usb 5-1: device descriptor read/64, error 18 [ 3368.296891][T10506] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3368.305930][T10506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.323729][T10506] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3368.330471][T10506] usb 4-1: Manufacturer:  [ 3368.341886][T10506] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3368.357485][T10961] usb usb5-port1: attempt power cycle [ 3368.646329][T10506] cdc_ncm 4-1:1.0: bind() failure [ 3368.666807][T10506] cdc_ncm 4-1:1.1: bind() failure [ 3368.687410][T10506] usb 4-1: USB disconnect, device number 74 [ 3369.086200][T10961] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 3369.177785][T10961] usb 5-1: Invalid ep0 maxpacket: 0 [ 3369.336321][T10961] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 3369.426263][T10961] usb 5-1: Invalid ep0 maxpacket: 0 [ 3369.432226][T10961] usb usb5-port1: unable to enumerate USB device 17:02:05 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:05 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() 17:02:05 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x24280, 0x0) 17:02:05 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) socket(0x23, 0x3, 0x9) 17:02:05 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:05 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:05 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) getgid() 17:02:05 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:05 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) socket(0x23, 0x3, 0x9) 17:02:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:05 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x3) [ 3370.706195][T23339] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 3370.706242][T10961] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 3370.906073][T23339] usb 5-1: device descriptor read/64, error 18 [ 3370.966059][T10961] usb 4-1: Using ep0 maxpacket: 8 [ 3371.096227][T10961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3371.107322][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3371.126328][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3371.176189][T23339] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 3371.326620][T10961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3371.335687][T10961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3371.346741][T10961] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3371.353633][T10961] usb 4-1: Manufacturer:  [ 3371.358590][T10961] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3371.366090][T23339] usb 5-1: device descriptor read/64, error 18 [ 3371.506341][T23339] usb usb5-port1: attempt power cycle [ 3371.636161][T10961] cdc_ncm 4-1:1.0: bind() failure [ 3371.648351][T10961] cdc_ncm 4-1:1.1: bind() failure [ 3371.667199][T10961] usb 4-1: USB disconnect, device number 75 [ 3372.216008][T23339] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 3372.306140][T23339] usb 5-1: Invalid ep0 maxpacket: 0 [ 3372.455971][T23339] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 3372.549236][T23339] usb 5-1: Invalid ep0 maxpacket: 0 [ 3372.554839][T23339] usb usb5-port1: unable to enumerate USB device 17:02:08 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:08 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:08 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) socket(0x23, 0x3, 0x9) 17:02:08 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x3) 17:02:08 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:08 executing program 0: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x3) 17:02:08 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:08 executing program 5: write$dsp(0xffffffffffffffff, &(0x7f0000000000)="736fe2a7febb834578b2bf7eee954d91989b3523ad91534e0f105ef407b7d3eac7c27dd1193eb83c56533b4ffd22b3cf7c6679f83c18b7b79e2d356e868bd617c264ffcab6938d2dc42cbcce7328c6e001e32979daf69fb94860f3efca67bdb56ef4d660c359218cb514605d01dc", 0x6e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) 17:02:08 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) socket(0x23, 0x3, 0x9) 17:02:08 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:08 executing program 2: socket(0x23, 0x3, 0x9) [ 3373.735921][T18982] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 3373.826102][T23339] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 3373.987173][T18982] usb 4-1: Using ep0 maxpacket: 8 [ 3374.016532][T23339] usb 5-1: device descriptor read/64, error 18 [ 3374.106564][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3374.117899][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3374.131166][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3374.285897][T23339] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 3374.299081][T18982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3374.308862][T18982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3374.320439][T18982] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3374.327039][T18982] usb 4-1: Manufacturer:  [ 3374.331644][T18982] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3374.475824][T23339] usb 5-1: device descriptor read/64, error 18 [ 3374.603307][T23339] usb usb5-port1: attempt power cycle [ 3374.626346][T18982] cdc_ncm 4-1:1.0: bind() failure [ 3374.633818][T18982] cdc_ncm 4-1:1.1: bind() failure [ 3374.657396][T18982] usb 4-1: USB disconnect, device number 76 [ 3375.315761][T23339] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 3375.406639][T23339] usb 5-1: Invalid ep0 maxpacket: 0 [ 3375.555807][T23339] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 3375.645850][T23339] usb 5-1: Invalid ep0 maxpacket: 0 [ 3375.651612][T23339] usb usb5-port1: unable to enumerate USB device 17:02:11 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) 17:02:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:11 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:11 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:11 executing program 2: socket(0x0, 0x3, 0x9) 17:02:11 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:11 executing program 2: socket(0x0, 0x3, 0x9) 17:02:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) 17:02:11 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:11 executing program 5: openat$nullb(0xffffffffffffff9c, 0x0, 0xb81, 0x0) 17:02:11 executing program 2: socket(0x0, 0x3, 0x9) 17:02:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) 17:02:11 executing program 5: openat$nullb(0xffffffffffffff9c, 0x0, 0xb81, 0x0) [ 3376.825822][T10961] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 3376.866477][T13035] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 3377.065630][T10961] usb 4-1: Using ep0 maxpacket: 8 [ 3377.105687][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3377.187699][T10961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3377.198798][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3377.215144][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3377.228358][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3377.239589][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3377.254960][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3377.395709][T10961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3377.404833][T10961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3377.414448][T10961] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3377.421802][T10961] usb 4-1: Manufacturer:  [ 3377.427743][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3377.436975][T10961] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3377.450621][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3377.458828][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3377.464032][T13035] usb 5-1: Manufacturer:  [ 3377.475235][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3377.745748][T10961] cdc_ncm 4-1:1.0: bind() failure [ 3377.757859][T10961] cdc_ncm 4-1:1.1: bind() failure [ 3377.771691][T10961] usb 4-1: USB disconnect, device number 77 [ 3377.779006][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3377.792019][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3377.825840][T13035] usb 5-1: USB disconnect, device number 97 17:02:13 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:13 executing program 2: socket(0x23, 0x0, 0x9) 17:02:13 executing program 5: openat$nullb(0xffffffffffffff9c, 0x0, 0xb81, 0x0) 17:02:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) 17:02:13 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16, @ANYBLOB="000828bd7000fedbdf250a00000008000400ff0f000008000600000000000c00028008000600f495000008000400ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:13 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) 17:02:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:13 executing program 2: socket(0x23, 0x0, 0x0) 17:02:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:13 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) [ 3378.615615][T13035] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 3378.622689][T23339] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 3378.856871][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3378.875625][T23339] usb 4-1: Using ep0 maxpacket: 8 [ 3378.975653][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3378.986676][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3378.999381][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3379.016176][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3379.027510][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3379.043163][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3379.166027][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3379.175289][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.183428][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3379.189318][T13035] usb 5-1: Manufacturer:  [ 3379.193921][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3379.236265][T23339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3379.245995][T23339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.254026][T23339] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3379.279765][T23339] usb 4-1: Manufacturer:  [ 3379.290175][T23339] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3379.485610][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3379.506155][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3379.514973][T13035] usb 5-1: USB disconnect, device number 98 [ 3379.585651][T23339] cdc_ncm 4-1:1.0: bind() failure [ 3379.604930][T23339] cdc_ncm 4-1:1.1: bind() failure [ 3379.614108][T23339] usb 4-1: USB disconnect, device number 78 17:02:14 executing program 2: socket(0x23, 0x0, 0x0) 17:02:14 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) 17:02:14 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x3) 17:02:14 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:15 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:15 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) 17:02:15 executing program 2: socket(0x23, 0x0, 0x0) 17:02:15 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x3) 17:02:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:15 executing program 5: socket(0x23, 0x0, 0x0) 17:02:15 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x3) 17:02:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3380.385486][T13035] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 3380.535539][T23339] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 3380.635403][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3380.757777][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3380.768841][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3380.781928][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3380.795476][T23339] usb 4-1: Using ep0 maxpacket: 8 [ 3380.916186][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3380.927486][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3380.941110][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3380.946094][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3380.961145][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3380.969280][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3380.975931][T13035] usb 5-1: Manufacturer:  [ 3380.980669][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3381.135524][T23339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3381.144574][T23339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3381.159835][T23339] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3381.165041][T23339] usb 4-1: Manufacturer:  [ 3381.177132][T23339] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3381.285558][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3381.292712][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3381.317449][T13035] usb 5-1: USB disconnect, device number 99 [ 3381.485546][T23339] cdc_ncm 4-1:1.0: bind() failure [ 3381.497887][T23339] cdc_ncm 4-1:1.1: bind() failure [ 3381.517116][T23339] usb 4-1: USB disconnect, device number 79 17:02:16 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:16 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:16 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:16 executing program 5: socket(0x23, 0x0, 0x0) 17:02:16 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x3) 17:02:16 executing program 5: socket(0x23, 0x0, 0x0) 17:02:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xb81, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) [ 3382.065566][T23339] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3382.088345][T13035] usb 5-1: new high-speed USB device number 100 using dummy_hcd 17:02:17 executing program 5: socket(0x0, 0x0, 0x0) 17:02:17 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e96d8e97f93bfc513d83ccc7096e2fb7035c51cc57dedf6d1cda43b30f46ab494c670b641e93a00750ad10344f5325c3399ca6265666a7af3b812673347268b876a2f7f75a32b80aeda3c6d4e1cea5e5f7f31ef9ed2db856c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3382.315633][T10506] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 3382.335518][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3382.345282][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3382.465425][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3382.465946][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3382.477341][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3382.495081][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3382.516215][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3382.518917][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3382.545445][T18982] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3382.575385][T10506] usb 4-1: Using ep0 maxpacket: 8 [ 3382.697329][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3382.706570][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.714538][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3382.721700][T13035] usb 5-1: Manufacturer:  [ 3382.726475][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3382.727387][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3382.735652][T10506] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3382.761100][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.769191][T23339] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3382.774568][T23339] usb 3-1: Manufacturer:  [ 3382.779524][T23339] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3382.793369][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3382.805857][T18982] usb 1-1: Using ep0 maxpacket: 8 [ 3382.826587][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3382.925996][T18982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3382.946761][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3382.965324][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3383.026054][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3383.037014][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3383.046324][T13035] usb 5-1: USB disconnect, device number 100 [ 3383.060756][T10506] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3383.082471][T10506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3383.113912][T10506] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3383.123465][T10506] usb 4-1: Manufacturer:  [ 3383.137151][T10506] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3383.166063][T18982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3383.175107][T18982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3383.186211][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3383.220180][T23339] cdc_ncm 3-1:1.1: bind() failure [ 3383.239768][T23339] usb 3-1: USB disconnect, device number 120 [ 3383.246630][T18982] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3383.251845][T18982] usb 1-1: Manufacturer:  [ 3383.282378][T18982] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3383.485355][T10506] cdc_ncm 4-1:1.0: bind() failure [ 3383.493124][T10506] cdc_ncm 4-1:1.1: bind() failure [ 3383.505081][T10506] usb 4-1: USB disconnect, device number 80 17:02:18 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3383.615619][T18982] cdc_ncm 1-1:1.0: bind() failure [ 3383.623055][T18982] cdc_ncm 1-1:1.1: bind() failure 17:02:18 executing program 5: socket(0x0, 0x0, 0x0) [ 3383.673675][T18982] usb 1-1: USB disconnect, device number 80 [ 3383.865213][T10961] usb 5-1: new high-speed USB device number 101 using dummy_hcd 17:02:18 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:18 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:18 executing program 5: socket(0x0, 0x0, 0x0) 17:02:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:18 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3384.105337][T10961] usb 5-1: Using ep0 maxpacket: 8 17:02:19 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3384.225997][T10961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3384.243023][T10961] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 17:02:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3384.277766][T10961] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 17:02:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3384.335226][T18982] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3384.365306][T22222] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 3384.445430][T10506] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3384.459247][T10961] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3384.469258][T10961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3384.484088][T10961] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3384.491323][T10961] usb 5-1: Manufacturer:  [ 3384.496160][T10961] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3384.575362][T26248] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3384.605246][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 3384.606010][T18982] usb 3-1: Using ep0 maxpacket: 8 [ 3384.715244][T10506] usb 6-1: Using ep0 maxpacket: 8 [ 3384.725957][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3384.737245][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3384.745829][T18982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3384.751224][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3384.784385][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3384.785310][T10961] cdc_ncm 5-1:1.0: bind() failure [ 3384.816844][T10961] cdc_ncm 5-1:1.1: bind() failure [ 3384.821812][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3384.831722][T10961] usb 5-1: USB disconnect, device number 101 [ 3384.838805][T26248] usb 1-1: Using ep0 maxpacket: 8 [ 3384.845498][T10506] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3384.872078][T10506] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3384.885953][T10506] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3384.935829][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3384.944973][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3384.958978][T22222] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3384.964182][T22222] usb 4-1: Manufacturer:  [ 3384.978972][T22222] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3384.986476][T26248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3385.025096][T26248] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3385.055985][T18982] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3385.065192][T26248] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3385.076811][T18982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3385.085925][T10506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3385.094979][T10506] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3385.106122][T18982] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3385.116372][T18982] usb 3-1: Manufacturer:  [ 3385.121040][T18982] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3385.137546][T10506] usb 6-1: Product: ⋼溷騣ꘉ뼐 [ 3385.143629][T10506] usb 6-1: Manufacturer:  [ 3385.149827][T10506] usb 6-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:02:20 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3385.280601][T26248] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3385.285235][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3385.289963][T26248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3385.303899][T26248] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3385.309586][T26248] usb 1-1: Manufacturer:  [ 3385.314338][T26248] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3385.347893][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3385.392397][T22222] usb 4-1: USB disconnect, device number 81 [ 3385.515314][T18982] cdc_ncm 3-1:1.0: bind() failure [ 3385.520745][T10506] cdc_ncm 6-1:1.0: bind() failure [ 3385.533135][T10506] cdc_ncm 6-1:1.1: bind() failure [ 3385.546686][T18982] cdc_ncm 3-1:1.1: bind() failure [ 3385.569748][T18982] usb 3-1: USB disconnect, device number 121 [ 3385.576309][T10506] usb 6-1: USB disconnect, device number 84 [ 3385.673031][T26248] cdc_ncm 1-1:1.0: bind() failure [ 3385.692103][T26248] cdc_ncm 1-1:1.1: bind() failure [ 3385.715140][T10961] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 3385.722463][T26248] usb 1-1: USB disconnect, device number 81 17:02:20 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3385.955064][T10961] usb 5-1: Using ep0 maxpacket: 8 17:02:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35cc7ce6f4845761ae357bf53ede9aaddb067acdeb4e69d90bfa15127ac127df06e5d7c636c01f0dd0a62760b8e"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:20 executing program 5: socket(0x0, 0x0, 0x0) 17:02:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3386.075902][T10961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3386.091420][T22222] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 3386.100735][T10961] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 17:02:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3386.130399][T10961] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 17:02:21 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) socket(0x23, 0x3, 0x9) 17:02:21 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x121000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e23, @empty}, @rc={0x1f, @any, 0x6}, @ethernet={0x0, @broadcast}, 0x8000, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ipvlan0\x00', 0x1ff, 0x10001, 0x6}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) socket(0x23, 0x3, 0x9) 17:02:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3386.335150][T10961] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3386.344353][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 3386.365827][T10961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3386.406891][T10961] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3386.421536][T10961] usb 5-1: Manufacturer:  [ 3386.437459][T10961] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3386.466260][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3386.477567][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3386.509932][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3386.675038][T18975] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 3386.688234][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3386.697975][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3386.708974][T22222] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3386.716342][T22222] usb 4-1: Manufacturer:  [ 3386.720951][T22222] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3386.775143][T10961] cdc_ncm 5-1:1.0: bind() failure [ 3386.783915][T10961] cdc_ncm 5-1:1.1: bind() failure [ 3386.804031][T10961] usb 5-1: USB disconnect, device number 102 [ 3386.915093][T18975] usb 1-1: Using ep0 maxpacket: 8 [ 3387.025120][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3387.045595][T18975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3387.057316][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3387.074965][T18975] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3387.085441][T22222] usb 4-1: USB disconnect, device number 82 [ 3387.093376][T18975] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 17:02:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x2, 0x80000, 0x10000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x22, 0x0, "a206c0a228318d507be1f5c8b5c8964b7d40e667e6e1c1e6c07e04f2df9c4f622da078a8fb5882b049270670a3363f2a9bbe4dcd876f029b8bf7626d4b2a0abe16535ad722374ffcdb77575d10f4ef04"}, 0xd8) 17:02:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x2, 0x80000, 0x10000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x22, 0x0, "a206c0a228318d507be1f5c8b5c8964b7d40e667e6e1c1e6c07e04f2df9c4f622da078a8fb5882b049270670a3363f2a9bbe4dcd876f029b8bf7626d4b2a0abe16535ad722374ffcdb77575d10f4ef04"}, 0xd8) [ 3387.265180][T18975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3387.274240][T18975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.286890][T18975] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3387.293353][T18975] usb 1-1: Manufacturer:  [ 3387.303619][T18975] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:02:22 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:22 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x2, 0x80000, 0x10000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x22, 0x0, "a206c0a228318d507be1f5c8b5c8964b7d40e667e6e1c1e6c07e04f2df9c4f622da078a8fb5882b049270670a3363f2a9bbe4dcd876f029b8bf7626d4b2a0abe16535ad722374ffcdb77575d10f4ef04"}, 0xd8) 17:02:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x2, 0x80000, 0x10000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x22, 0x0, "a206c0a228318d507be1f5c8b5c8964b7d40e667e6e1c1e6c07e04f2df9c4f622da078a8fb5882b049270670a3363f2a9bbe4dcd876f029b8bf7626d4b2a0abe16535ad722374ffcdb77575d10f4ef04"}, 0xd8) 17:02:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x2, 0x80000, 0x10000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x22, 0x0, "a206c0a228318d507be1f5c8b5c8964b7d40e667e6e1c1e6c07e04f2df9c4f622da078a8fb5882b049270670a3363f2a9bbe4dcd876f029b8bf7626d4b2a0abe16535ad722374ffcdb77575d10f4ef04"}, 0xd8) [ 3387.655136][T18975] cdc_ncm 1-1:1.0: bind() failure [ 3387.682142][T18975] cdc_ncm 1-1:1.1: bind() failure [ 3387.717891][T18975] usb 1-1: USB disconnect, device number 82 [ 3387.905011][T18982] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 3387.905057][T13035] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 3388.154900][T13035] usb 5-1: Using ep0 maxpacket: 8 17:02:23 executing program 0: 17:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:23 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x2, 0x80000, 0x10000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x22, 0x0, "a206c0a228318d507be1f5c8b5c8964b7d40e667e6e1c1e6c07e04f2df9c4f622da078a8fb5882b049270670a3363f2a9bbe4dcd876f029b8bf7626d4b2a0abe16535ad722374ffcdb77575d10f4ef04"}, 0xd8) 17:02:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket(0x2, 0x80000, 0x10000) [ 3388.194874][T18982] usb 4-1: Using ep0 maxpacket: 8 17:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3388.275762][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3388.295253][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3388.312673][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 17:02:23 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 3388.335606][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3388.360978][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3388.383724][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3388.525924][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3388.535652][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3388.543733][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3388.548981][T13035] usb 5-1: Manufacturer:  [ 3388.555487][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3388.575423][T18982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3388.588402][T18982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3388.600942][T18982] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3388.617339][T18982] usb 4-1: Manufacturer:  [ 3388.628596][T18982] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3388.855040][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3388.875641][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3388.899481][T13035] usb 5-1: USB disconnect, device number 103 [ 3388.937401][T18982] cdc_ncm 4-1:1.0: bind() failure [ 3388.950843][T18982] cdc_ncm 4-1:1.1: bind() failure [ 3388.968993][T18982] usb 4-1: USB disconnect, device number 83 17:02:24 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:24 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:24 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) r1 = socket(0x1e, 0x800, 0x1) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket(0x2, 0x80000, 0x10000) 17:02:24 executing program 0: 17:02:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:24 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) socket(0x1e, 0x800, 0x1) 17:02:24 executing program 0: 17:02:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:24 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x1e, 0x800, 0x1) 17:02:24 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) socket(0x1e, 0x800, 0x1) socket(0x2, 0x80000, 0x10000) 17:02:24 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:24 executing program 5: socket(0x1e, 0x800, 0x1) [ 3389.742724][T18975] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 3389.834828][T18982] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 3389.985361][T18975] usb 5-1: Using ep0 maxpacket: 8 [ 3390.094769][T18982] usb 4-1: Using ep0 maxpacket: 8 [ 3390.108008][T18975] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3390.119350][T18975] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3390.129900][T18975] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3390.225494][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3390.236515][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3390.249423][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3390.259854][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3390.294885][T18975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3390.303999][T18975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3390.314781][T18975] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3390.320236][T18975] usb 5-1: Manufacturer:  [ 3390.326416][T18975] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3390.465274][T18982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3390.474353][T18982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3390.491574][T18982] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3390.501059][T18982] usb 4-1: Manufacturer:  [ 3390.510019][T18982] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3390.615071][T18975] cdc_ncm 5-1:1.0: bind() failure [ 3390.628231][T18975] cdc_ncm 5-1:1.1: bind() failure [ 3390.648914][T18975] usb 5-1: USB disconnect, device number 104 [ 3390.805298][T18982] cdc_ncm 4-1:1.0: bind() failure [ 3390.812690][T18982] cdc_ncm 4-1:1.1: bind() failure [ 3390.838232][T18982] usb 4-1: USB disconnect, device number 84 17:02:26 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:26 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x0) socket(0x2, 0x80000, 0x10000) 17:02:26 executing program 5: socket(0x0, 0x800, 0x1) 17:02:26 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:26 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:26 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket(0x2, 0x80000, 0x10000) 17:02:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:26 executing program 5: socket(0x0, 0x800, 0x1) 17:02:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:26 executing program 2: socket(0x2, 0x80000, 0x10000) 17:02:26 executing program 5: socket(0x0, 0x800, 0x1) [ 3391.654692][T18975] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 3391.677227][T18982] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 3391.894663][T18975] usb 4-1: Using ep0 maxpacket: 8 [ 3391.944665][T18982] usb 5-1: Using ep0 maxpacket: 8 [ 3392.015351][T18975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3392.026262][T18975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3392.037392][T18975] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3392.047845][T18975] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3392.084786][T18982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3392.095907][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3392.105966][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3392.215027][T18975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3392.224079][T18975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.242869][T18975] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3392.249545][T18975] usb 4-1: Manufacturer:  [ 3392.261469][T18975] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3392.305435][T18982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3392.314482][T18982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.332815][T18982] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3392.342419][T18982] usb 5-1: Manufacturer:  [ 3392.353620][T18982] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3392.564660][T18975] cdc_ncm 4-1:1.0: bind() failure [ 3392.571966][T18975] cdc_ncm 4-1:1.1: bind() failure [ 3392.604061][T18975] usb 4-1: USB disconnect, device number 85 [ 3392.654805][T18982] cdc_ncm 5-1:1.0: bind() failure [ 3392.663345][T18982] cdc_ncm 5-1:1.1: bind() failure [ 3392.696635][T18982] usb 5-1: USB disconnect, device number 105 17:02:27 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:27 executing program 5: socket(0x1e, 0x0, 0x1) 17:02:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:27 executing program 2: socket(0x0, 0x80000, 0x10000) 17:02:27 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:28 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:28 executing program 2: socket(0x0, 0x80000, 0x10000) 17:02:28 executing program 5: socket(0x1e, 0x0, 0x0) 17:02:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:28 executing program 2: socket(0x0, 0x80000, 0x10000) 17:02:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:28 executing program 5: socket(0x1e, 0x0, 0x0) [ 3393.424603][T18982] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 3393.524580][T10506] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 3393.664564][T18982] usb 4-1: Using ep0 maxpacket: 8 [ 3393.764622][T10506] usb 5-1: Using ep0 maxpacket: 8 [ 3393.785203][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3393.796138][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3393.811603][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3393.824395][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3393.885019][T10506] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3393.896106][T10506] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3393.911769][T10506] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3394.005153][T18982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3394.014231][T18982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3394.031681][T18982] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3394.039499][T18982] usb 4-1: Manufacturer:  [ 3394.044083][T18982] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3394.115278][T10506] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3394.124383][T10506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3394.134119][T10506] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3394.139620][T10506] usb 5-1: Manufacturer:  [ 3394.144237][T10506] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3394.334563][T18982] cdc_ncm 4-1:1.0: bind() failure [ 3394.341701][T18982] cdc_ncm 4-1:1.1: bind() failure [ 3394.359072][T18982] usb 4-1: USB disconnect, device number 86 [ 3394.444848][T10506] cdc_ncm 5-1:1.0: bind() failure [ 3394.452204][T10506] cdc_ncm 5-1:1.1: bind() failure [ 3394.478819][T10506] usb 5-1: USB disconnect, device number 106 17:02:29 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:29 executing program 2: socket(0x2, 0x0, 0x10000) 17:02:29 executing program 5: socket(0x1e, 0x0, 0x0) 17:02:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:29 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:29 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:29 executing program 2: socket(0x2, 0x0, 0x0) 17:02:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U)'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:29 executing program 5: socket(0x1e, 0x0, 0x0) 17:02:29 executing program 2: socket(0x2, 0x0, 0x0) 17:02:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:30 executing program 5: socket(0x1e, 0x0, 0x0) [ 3395.165031][T18975] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 3395.244567][T22222] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 3395.374535][T13035] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 3395.388324][T18975] usb 1-1: device descriptor read/64, error 18 [ 3395.494429][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 3395.614524][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3395.626058][T13035] usb 5-1: Using ep0 maxpacket: 8 [ 3395.631431][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3395.654377][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3395.665257][T18975] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 3395.672855][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3395.744962][T13035] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3395.756415][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3395.766593][T13035] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3395.835068][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3395.844234][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.855243][T22222] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3395.856178][T18975] usb 1-1: device descriptor read/64, error 18 [ 3395.868976][T22222] usb 4-1: Manufacturer:  [ 3395.873672][T22222] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3395.950633][T13035] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3395.960311][T13035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.978871][T13035] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3395.984066][T13035] usb 5-1: Manufacturer:  [ 3395.995353][T13035] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3396.009336][T18975] usb usb1-port1: attempt power cycle [ 3396.164525][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3396.172760][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3396.183335][T22222] usb 4-1: USB disconnect, device number 87 [ 3396.294554][T13035] cdc_ncm 5-1:1.0: bind() failure [ 3396.302520][T13035] cdc_ncm 5-1:1.1: bind() failure [ 3396.312939][T13035] usb 5-1: USB disconnect, device number 107 17:02:31 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:31 executing program 5: socket(0x1e, 0x0, 0x0) 17:02:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:31 executing program 2: socket(0x2, 0x0, 0x0) [ 3396.724557][T18975] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 3396.825035][T18975] usb 1-1: Invalid ep0 maxpacket: 0 [ 3396.974329][T18975] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 3397.014319][T10506] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 3397.065164][T18975] usb 1-1: Invalid ep0 maxpacket: 0 [ 3397.070661][T18975] usb usb1-port1: unable to enumerate USB device [ 3397.254297][T10506] usb 4-1: Using ep0 maxpacket: 8 [ 3397.384752][T10506] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3397.395871][T10506] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3397.411662][T10506] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3397.424295][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3397.434024][T10506] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3397.654413][T10506] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3397.663467][T10506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3397.675162][T10506] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3397.680377][T10506] usb 4-1: Manufacturer:  [ 3397.686303][T10506] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:02:32 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:32 executing program 5: socket(0x0, 0x0, 0x0) 17:02:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:32 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:32 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:32 executing program 5: socket(0x0, 0x0, 0x0) [ 3397.986544][T10506] cdc_ncm 4-1:1.0: bind() failure [ 3398.004816][T10506] cdc_ncm 4-1:1.1: bind() failure [ 3398.047817][T10506] usb 4-1: USB disconnect, device number 88 17:02:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3398.234459][T20054] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3398.242252][T26248] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 3398.250135][T23339] usb 1-1: new high-speed USB device number 87 using dummy_hcd 17:02:33 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:33 executing program 5: socket(0x0, 0x0, 0x0) 17:02:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3398.464500][T23339] usb 1-1: device descriptor read/64, error 18 17:02:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3398.525695][T26248] usb 5-1: Using ep0 maxpacket: 8 [ 3398.530865][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3398.645805][T26248] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3398.657274][T26248] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3398.675362][T26248] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3398.685613][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3398.704567][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3398.714871][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3398.725284][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3398.754348][T23339] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 3398.834258][T13035] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 3398.914433][T26248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3398.923607][T26248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3398.936025][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3398.945364][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3398.953374][T20054] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3398.958687][T26248] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3398.965534][T23339] usb 1-1: device descriptor read/64, error 18 [ 3398.973047][T20054] usb 3-1: Manufacturer:  [ 3398.977747][T20054] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3398.992934][T26248] usb 5-1: Manufacturer:  [ 3398.998086][T26248] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3399.074269][T13035] usb 4-1: Using ep0 maxpacket: 8 [ 3399.092201][T23339] usb usb1-port1: attempt power cycle [ 3399.194788][T13035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3399.206173][T13035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3399.218651][T13035] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3399.228748][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3399.240225][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3399.304644][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3399.309830][T26248] cdc_ncm 5-1:1.0: bind() failure [ 3399.318791][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3399.331735][T26248] cdc_ncm 5-1:1.1: bind() failure [ 3399.344966][T20054] usb 3-1: USB disconnect, device number 122 [ 3399.368606][T26248] usb 5-1: USB disconnect, device number 108 [ 3399.404954][T13035] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3399.415510][T13035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3399.437784][T13035] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3399.448034][T13035] usb 4-1: Manufacturer:  [ 3399.461808][T13035] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3399.754250][T13035] cdc_ncm 4-1:1.0: bind() failure [ 3399.766194][T13035] cdc_ncm 4-1:1.1: bind() failure [ 3399.801385][T13035] usb 4-1: USB disconnect, device number 89 [ 3399.815824][T23339] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 3399.934284][T23339] usb 1-1: Invalid ep0 maxpacket: 0 [ 3400.094141][T23339] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 3400.214577][T23339] usb 1-1: Invalid ep0 maxpacket: 0 [ 3400.220099][T23339] usb usb1-port1: unable to enumerate USB device 17:02:35 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:35 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:35 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:35 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:36 executing program 5: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U)'], 0x38}}, 0x40000) 17:02:36 executing program 5: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3401.274093][T26248] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 3401.280329][T13035] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3401.354028][T18975] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 3401.384189][T20054] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 3401.534007][T13035] usb 3-1: Using ep0 maxpacket: 8 [ 3401.547246][T26248] usb 5-1: Using ep0 maxpacket: 8 [ 3401.594112][T18975] usb 4-1: Using ep0 maxpacket: 8 [ 3401.604227][T20054] usb 1-1: device descriptor read/64, error 18 [ 3401.654242][T13035] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3401.665670][T13035] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3401.681307][T13035] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3401.684730][T26248] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3401.699445][T13035] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3401.710698][T26248] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3401.716014][T18975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3401.728625][T26248] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3401.746242][T18975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3401.753087][T26248] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3401.764986][T18975] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3401.779857][T18975] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3401.792365][T18975] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3401.894172][T13035] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3401.903229][T13035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.914322][T20054] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 3401.923087][T13035] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3401.928678][T13035] usb 3-1: Manufacturer:  [ 3401.934448][T13035] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3401.935078][T26248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3401.964866][T18975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3401.978130][T18975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.990627][T18975] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3401.990651][T26248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.997809][T18975] usb 4-1: Manufacturer:  [ 3402.008806][T18975] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3402.032835][T26248] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3402.043516][T26248] usb 5-1: Manufacturer:  [ 3402.066182][T26248] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3402.105287][T20054] usb 1-1: device descriptor read/64, error 18 [ 3402.241345][T20054] usb usb1-port1: attempt power cycle [ 3402.256820][T13035] cdc_ncm 3-1:1.0: bind() failure [ 3402.268911][T13035] cdc_ncm 3-1:1.1: bind() failure [ 3402.288876][T13035] usb 3-1: USB disconnect, device number 123 [ 3402.333987][T18975] cdc_ncm 4-1:1.0: bind() failure [ 3402.361902][T18975] cdc_ncm 4-1:1.1: bind() failure [ 3402.401640][T18975] usb 4-1: USB disconnect, device number 90 [ 3402.404006][T26248] cdc_ncm 5-1:1.0: bind() failure [ 3402.439776][T26248] cdc_ncm 5-1:1.1: bind() failure [ 3402.468415][T26248] usb 5-1: USB disconnect, device number 109 [ 3402.963957][T20054] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 3403.064688][T20054] usb 1-1: Invalid ep0 maxpacket: 0 [ 3403.213953][T20054] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 3403.339638][T20054] usb 1-1: Invalid ep0 maxpacket: 0 [ 3403.345197][T20054] usb usb1-port1: unable to enumerate USB device 17:02:38 executing program 5: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U)'], 0x38}}, 0x0) 17:02:38 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd4b4, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:38 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:38 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:38 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:39 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0xff000000) 17:02:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x21000000) 17:02:39 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:39 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc34c14707000000281829efbbb59302f8db2d983ea35c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x21000000) 17:02:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x21000000) [ 3404.404090][T20054] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3404.411878][T23339] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3404.426186][T13035] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 3404.499110][T18982] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3404.663830][T23339] usb 5-1: Using ep0 maxpacket: 8 [ 3404.668995][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3404.713854][T13035] usb 4-1: Using ep0 maxpacket: 8 [ 3404.743806][T18982] usb 1-1: Using ep0 maxpacket: 8 [ 3404.793966][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3404.805188][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3404.816090][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3404.828742][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3404.839666][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3404.851173][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3404.862869][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3404.870035][T13035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3404.872887][T18982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3404.894676][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3404.901954][T13035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3404.904905][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3404.921810][T13035] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3404.935982][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3404.951103][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3404.967897][T13035] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3405.064004][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3405.073162][T23339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3405.082411][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3405.093674][T23339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3405.101918][T23339] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3405.107450][T20054] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3405.112652][T20054] usb 3-1: Manufacturer:  [ 3405.118716][T18982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3405.129914][T23339] usb 5-1: Manufacturer:  [ 3405.134903][T18982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3405.143361][T18982] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3405.149202][T23339] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3405.163108][T20054] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3405.172435][T13035] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3405.178601][T18982] usb 1-1: Manufacturer:  [ 3405.194274][T18982] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3405.205517][T13035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3405.278630][T13035] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3405.301652][T13035] usb 4-1: Manufacturer:  [ 3405.319819][T13035] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3405.484034][T23339] cdc_ncm 5-1:1.0: bind() failure [ 3405.493889][T18982] cdc_ncm 1-1:1.0: bind() failure [ 3405.503858][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3405.514120][T23339] cdc_ncm 5-1:1.1: bind() failure [ 3405.523102][T18982] cdc_ncm 1-1:1.1: bind() failure [ 3405.529947][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3405.558906][T20054] usb 3-1: USB disconnect, device number 124 [ 3405.571175][T23339] usb 5-1: USB disconnect, device number 110 [ 3405.578903][T18982] usb 1-1: USB disconnect, device number 95 [ 3405.645660][T13035] cdc_ncm 4-1:1.0: bind() failure [ 3405.664225][T13035] cdc_ncm 4-1:1.1: bind() failure [ 3405.701854][T13035] usb 4-1: USB disconnect, device number 91 17:02:40 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xb96f, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) 17:02:41 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:41 executing program 1: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x21000000) 17:02:41 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) 17:02:41 executing program 2: 17:02:41 executing program 2: 17:02:41 executing program 1: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x21000000) 17:02:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) [ 3406.285465][T13035] usb 1-1: new high-speed USB device number 96 using dummy_hcd 17:02:41 executing program 2: 17:02:41 executing program 1: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x21000000) [ 3406.493852][T19845] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 3406.524400][T18982] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3406.535455][T13035] usb 1-1: Using ep0 maxpacket: 8 [ 3406.693777][T13035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3406.704953][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3406.724783][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3406.753720][T19845] usb 5-1: Using ep0 maxpacket: 8 [ 3406.763797][T18982] usb 4-1: Using ep0 maxpacket: 8 [ 3406.883750][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3406.894715][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3406.904720][T18982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3406.914596][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3406.914668][T19845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3406.924443][T18982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3406.935517][T13035] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3406.955137][T13035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.963193][T19845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3406.969954][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3406.973123][T13035] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3406.988754][T19845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3407.010820][T19845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3407.024209][T13035] usb 1-1: Manufacturer:  [ 3407.035062][T13035] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3407.153946][T18982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3407.163001][T18982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3407.179291][T18982] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3407.189083][T18982] usb 4-1: Manufacturer:  [ 3407.196456][T18982] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3407.214365][T19845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3407.228612][T19845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3407.245599][T19845] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3407.251143][T19845] usb 5-1: Manufacturer:  [ 3407.263381][T19845] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3407.343835][T13035] cdc_ncm 1-1:1.0: bind() failure [ 3407.350898][T13035] cdc_ncm 1-1:1.1: bind() failure [ 3407.362257][T13035] usb 1-1: USB disconnect, device number 96 [ 3407.493781][T18982] cdc_ncm 4-1:1.0: bind() failure [ 3407.502906][T18982] cdc_ncm 4-1:1.1: bind() failure [ 3407.542173][T18982] usb 4-1: USB disconnect, device number 92 [ 3407.573832][T19845] cdc_ncm 5-1:1.0: bind() failure [ 3407.592709][T19845] cdc_ncm 5-1:1.1: bind() failure [ 3407.619325][T19845] usb 5-1: USB disconnect, device number 111 17:02:42 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:42 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x21000000) 17:02:42 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:42 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:42 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x21000000) 17:02:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3408.123647][T20054] usb 1-1: new high-speed USB device number 97 using dummy_hcd 17:02:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x21000000) 17:02:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:43 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x21000000) [ 3408.303654][T19845] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3408.383618][T20054] usb 1-1: Using ep0 maxpacket: 8 [ 3408.413574][T23339] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 3408.503591][T20054] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3408.514738][T20054] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3408.527966][T20054] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3408.563578][T19845] usb 4-1: Using ep0 maxpacket: 8 [ 3408.653719][T23339] usb 5-1: Using ep0 maxpacket: 8 [ 3408.694341][T20054] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3408.704014][T20054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3408.712020][T20054] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3408.720125][T20054] usb 1-1: Manufacturer:  [ 3408.724947][T19845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3408.724968][T19845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3408.724997][T19845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3408.725017][T19845] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3408.725037][T19845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3408.725062][T19845] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3408.785175][T20054] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3408.826001][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3408.836977][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3408.855266][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3408.878995][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3408.914296][T19845] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3408.923325][T19845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3408.934669][T19845] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3408.939914][T19845] usb 4-1: Manufacturer:  [ 3408.944623][T19845] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3409.043729][T23339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3409.052844][T23339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.074946][T23339] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3409.080265][T23339] usb 5-1: Manufacturer:  [ 3409.093311][T23339] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3409.109778][T20054] cdc_ncm 1-1:1.0: bind() failure [ 3409.118766][T20054] cdc_ncm 1-1:1.1: bind() failure [ 3409.159111][T20054] usb 1-1: USB disconnect, device number 97 [ 3409.253689][T19845] cdc_ncm 4-1:1.0: bind() failure [ 3409.266850][T19845] cdc_ncm 4-1:1.1: bind() failure [ 3409.292217][T19845] usb 4-1: USB disconnect, device number 93 [ 3409.413698][T23339] cdc_ncm 5-1:1.0: bind() failure [ 3409.421108][T23339] cdc_ncm 5-1:1.1: bind() failure [ 3409.459789][T23339] usb 5-1: USB disconnect, device number 112 17:02:44 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:44 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:44 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:44 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x21000000) 17:02:44 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3409.893488][T20054] usb 1-1: new high-speed USB device number 98 using dummy_hcd 17:02:44 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x21000000) 17:02:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:44 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3410.073466][T19845] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 3410.153579][T20054] usb 1-1: Using ep0 maxpacket: 8 [ 3410.263446][T18982] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 3410.276434][T20054] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3410.288350][T20054] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3410.299873][T20054] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3410.353477][T19845] usb 4-1: Using ep0 maxpacket: 8 [ 3410.413476][T23339] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 3410.463984][T20054] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3410.473119][T20054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.484201][T20054] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3410.490420][T20054] usb 1-1: Manufacturer:  [ 3410.495525][T20054] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3410.509506][T18982] usb 5-1: Using ep0 maxpacket: 8 [ 3410.516101][T19845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3410.548148][T19845] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3410.587558][T19845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3410.597533][T19845] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3410.607516][T19845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3410.617413][T19845] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3410.634334][T18982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3410.653407][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3410.658555][T18982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3410.671689][T18982] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3410.681891][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3410.692006][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3410.774702][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3410.785966][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3410.798553][T20054] cdc_ncm 1-1:1.0: bind() failure [ 3410.805155][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3410.815481][T19845] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3410.822100][T20054] cdc_ncm 1-1:1.1: bind() failure [ 3410.838003][T19845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.845283][T20054] usb 1-1: USB disconnect, device number 98 [ 3410.852640][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3410.864702][T18982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3410.872070][T19845] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3410.888011][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3410.893251][T19845] usb 4-1: Manufacturer:  [ 3410.901111][T18982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.909030][T19845] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3410.921930][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3410.934898][T18982] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3410.941160][T18982] usb 5-1: Manufacturer:  [ 3410.945885][T18982] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3411.123518][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3411.132739][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3411.148550][T23339] usb 2-1: Product: ⋼溷騣ꘉ뼐 [ 3411.156685][T23339] usb 2-1: Manufacturer:  [ 3411.161314][T23339] usb 2-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3411.223524][T19845] cdc_ncm 4-1:1.0: bind() failure [ 3411.248926][T19845] cdc_ncm 4-1:1.1: bind() failure [ 3411.273622][T18982] cdc_ncm 5-1:1.0: bind() failure [ 3411.288525][T18982] cdc_ncm 5-1:1.1: bind() failure [ 3411.290709][T19845] usb 4-1: USB disconnect, device number 94 17:02:46 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3411.336433][T18982] usb 5-1: USB disconnect, device number 113 [ 3411.484586][T23339] cdc_ncm 2-1:1.0: bind() failure [ 3411.510448][T23339] cdc_ncm 2-1:1.1: bind() failure [ 3411.519225][T23339] usb 2-1: USB disconnect, device number 89 17:02:46 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:46 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:46 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3411.755975][T18975] usb 1-1: new high-speed USB device number 99 using dummy_hcd 17:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c1bb4342799b421b8953cdc"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:46 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3412.025360][T18975] usb 1-1: Using ep0 maxpacket: 8 [ 3412.037275][T23339] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3412.135462][T19845] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 3412.164128][T18975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3412.175330][T18975] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3412.188637][T18975] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3412.283444][T23339] usb 4-1: Using ep0 maxpacket: 8 [ 3412.343371][T22222] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 3412.364175][T18975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3412.373363][T18975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.381334][T18975] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3412.393772][T18975] usb 1-1: Manufacturer:  [ 3412.398467][T18975] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3412.403937][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3412.412549][T19845] usb 5-1: Using ep0 maxpacket: 8 [ 3412.423615][T23339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3412.438771][T23339] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3412.450352][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3412.461065][T23339] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3412.480793][T23339] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3412.564247][T19845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3412.575415][T19845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3412.594251][T19845] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3412.604324][T22222] usb 2-1: Using ep0 maxpacket: 8 [ 3412.609619][T19845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3412.622660][T19845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3412.653955][T23339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3412.662983][T23339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.678824][T23339] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3412.688423][T23339] usb 4-1: Manufacturer:  [ 3412.693025][T23339] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3412.755526][T18975] cdc_ncm 1-1:1.0: bind() failure [ 3412.765621][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3412.781068][T18975] cdc_ncm 1-1:1.1: bind() failure [ 3412.797334][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3412.822150][T18975] usb 1-1: USB disconnect, device number 99 [ 3412.829094][T19845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3412.839573][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3412.853138][T19845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.868957][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3412.879066][T19845] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3412.892859][T19845] usb 5-1: Manufacturer:  [ 3412.899247][T19845] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3412.914222][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3412.925316][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3413.013410][T23339] cdc_ncm 4-1:1.0: bind() failure [ 3413.022400][T23339] cdc_ncm 4-1:1.1: bind() failure [ 3413.054278][T23339] usb 4-1: USB disconnect, device number 95 [ 3413.114048][T22222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3413.123082][T22222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3413.134347][T22222] usb 2-1: Product: ⋼溷騣ꘉ뼐 [ 3413.139597][T22222] usb 2-1: Manufacturer:  [ 3413.147477][T22222] usb 2-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:02:48 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003755296deb51fa4c"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3413.251678][T19845] cdc_ncm 5-1:1.0: bind() failure [ 3413.267953][T19845] cdc_ncm 5-1:1.1: bind() failure [ 3413.302489][T19845] usb 5-1: USB disconnect, device number 114 [ 3413.468698][T22222] cdc_ncm 2-1:1.0: bind() failure [ 3413.476180][T22222] cdc_ncm 2-1:1.1: bind() failure [ 3413.485311][T22222] usb 2-1: USB disconnect, device number 90 17:02:48 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:02:48 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:48 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3413.673277][T10961] usb 1-1: new high-speed USB device number 100 using dummy_hcd 17:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U)'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3413.853258][T23339] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3413.868470][T18982] usb 4-1: new high-speed USB device number 96 using dummy_hcd 17:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3413.964024][T10961] usb 1-1: Using ep0 maxpacket: 8 17:02:48 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3414.048761][T23339] usb 3-1: device descriptor read/64, error 18 [ 3414.067262][T20054] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 3414.085437][T10961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3414.101941][T10961] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3414.117182][T10961] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3414.128444][T18982] usb 4-1: Using ep0 maxpacket: 8 [ 3414.257246][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3414.268677][T18982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3414.281492][T18982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3414.292162][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3414.303651][T18982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3414.313475][T20054] usb 5-1: Using ep0 maxpacket: 8 [ 3414.319789][T18982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3414.334026][T23339] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3414.340822][T10961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3414.341740][T10506] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 3414.356820][T10961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.381604][T10961] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3414.389954][T10961] usb 1-1: Manufacturer:  [ 3414.398000][T10961] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3414.436063][T20054] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3414.453477][T20054] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3414.477973][T20054] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3414.490902][T18982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3414.500106][T20054] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3414.513365][T18982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.521358][T18982] usb 4-1: Product: syz [ 3414.525960][T23339] usb 3-1: device descriptor read/64, error 18 [ 3414.532840][T20054] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3414.543632][T18982] usb 4-1: Manufacturer: syz [ 3414.548236][T18982] usb 4-1: SerialNumber: syz [ 3414.594534][T10506] usb 2-1: Using ep0 maxpacket: 8 [ 3414.643618][T23339] usb usb3-port1: attempt power cycle [ 3414.693473][T10961] cdc_ncm 1-1:1.0: bind() failure [ 3414.713750][T10961] cdc_ncm 1-1:1.1: bind() failure [ 3414.718681][T20054] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3414.729010][T10506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3414.731022][T10961] usb 1-1: USB disconnect, device number 100 [ 3414.747913][T20054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.759053][T10506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3414.782530][T20054] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3414.790724][T10506] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3414.815601][T20054] usb 5-1: Manufacturer:  [ 3414.826981][T20054] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3414.841218][T18982] cdc_ncm 4-1:1.0: bind() failure [ 3414.855328][T18982] cdc_ncm 4-1:1.1: bind() failure [ 3414.861569][T10506] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3414.888240][T18982] usb 4-1: USB disconnect, device number 96 [ 3414.896742][T10506] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3414.927487][T10506] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3415.113820][T10506] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3415.122991][T10506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3415.136472][T10506] usb 2-1: Product: ⋼溷騣ꘉ뼐 [ 3415.141856][T10506] usb 2-1: Manufacturer:  [ 3415.147433][T10506] usb 2-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:02:50 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3415.193200][T20054] cdc_ncm 5-1:1.0: bind() failure [ 3415.209735][T20054] cdc_ncm 5-1:1.1: bind() failure [ 3415.254139][T20054] usb 5-1: USB disconnect, device number 115 17:02:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 3415.367258][T23339] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3415.463935][T10506] cdc_ncm 2-1:1.0: bind() failure [ 3415.483939][T23339] usb 3-1: Invalid ep0 maxpacket: 0 [ 3415.490900][T10506] cdc_ncm 2-1:1.1: bind() failure [ 3415.513366][T10506] usb 2-1: USB disconnect, device number 91 [ 3415.603140][T18982] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 3415.633100][T23339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3415.723276][T23339] usb 3-1: Invalid ep0 maxpacket: 0 [ 3415.729779][T23339] usb usb3-port1: unable to enumerate USB device [ 3415.843097][T18982] usb 1-1: Using ep0 maxpacket: 8 [ 3415.963364][T18982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3415.975057][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3415.988001][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3416.153806][T18982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3416.162942][T18982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3416.177450][T18982] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3416.182659][T18982] usb 1-1: Manufacturer:  [ 3416.194045][T18982] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3416.483140][T18982] cdc_ncm 1-1:1.0: bind() failure [ 3416.494852][T18982] cdc_ncm 1-1:1.1: bind() failure [ 3416.509193][T18982] usb 1-1: USB disconnect, device number 101 17:02:51 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:51 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0x6, 0xbd, 0x7, 0x1e}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:51 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:51 executing program 1: 17:02:51 executing program 1: 17:02:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:51 executing program 1: 17:02:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:51 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1b, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:51 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3416.923043][T10961] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 3416.930860][T22222] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 3417.033077][T23339] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3417.175104][T10961] usb 4-1: Using ep0 maxpacket: 8 [ 3417.203706][T22222] usb 5-1: Using ep0 maxpacket: 8 [ 3417.223068][T23339] usb 3-1: device descriptor read/64, error 18 [ 3417.283027][T18982] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 3417.313086][T10961] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3417.326136][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3417.339214][T22222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3417.351637][T10961] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3417.361791][T22222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3417.373251][T22222] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3417.383258][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3417.393289][T22222] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3417.493087][T23339] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3417.531344][T18982] usb 1-1: Using ep0 maxpacket: 8 [ 3417.545985][T10961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3417.556030][T10961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.566089][T10961] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3417.571462][T10961] usb 4-1: Manufacturer:  [ 3417.577162][T10961] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3417.613075][T22222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3417.622222][T22222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.637415][T22222] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3417.642686][T22222] usb 5-1: Manufacturer:  [ 3417.653612][T18982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3417.669076][T22222] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3417.671638][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3417.692983][T23339] usb 3-1: device descriptor read/64, error 18 [ 3417.722541][T18982] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3417.813886][T23339] usb usb3-port1: attempt power cycle [ 3417.893085][T10961] cdc_ncm 4-1:1.0: bind() failure [ 3417.893750][T18982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3417.907616][T18982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3417.915976][T18982] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3417.921385][T18982] usb 1-1: Manufacturer:  [ 3417.923452][T10961] cdc_ncm 4-1:1.1: bind() failure [ 3417.926380][T18982] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3417.935309][T10961] usb 4-1: USB disconnect, device number 97 [ 3418.013160][T22222] cdc_ncm 5-1:1.0: bind() failure [ 3418.031750][T22222] cdc_ncm 5-1:1.1: bind() failure [ 3418.059694][T22222] usb 5-1: USB disconnect, device number 116 [ 3418.283631][T18982] cdc_ncm 1-1:1.0: bind() failure [ 3418.290952][T18982] cdc_ncm 1-1:1.1: bind() failure [ 3418.311783][T18982] usb 1-1: USB disconnect, device number 102 [ 3418.524227][T23339] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3418.613418][T23339] usb 3-1: Invalid ep0 maxpacket: 0 [ 3418.771989][T23339] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3418.862951][T23339] usb 3-1: Invalid ep0 maxpacket: 0 [ 3418.868824][T23339] usb usb3-port1: unable to enumerate USB device 17:02:54 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U'], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 17:02:54 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:54 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:54 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:54 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U)'], 0x38}}, 0x40000) 17:02:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x007U)'], 0x38}}, 0x0) 17:02:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x747000) 17:02:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x747000) 17:02:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x747000) 17:02:54 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x747000) [ 3419.980235][T22222] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 3420.007937][T10961] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 3420.012823][T10506] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 3420.072953][T19845] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3420.252805][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 3420.272880][T10961] usb 1-1: Using ep0 maxpacket: 8 [ 3420.272887][T10506] usb 5-1: Using ep0 maxpacket: 8 [ 3420.285980][T19845] usb 3-1: device descriptor read/64, error 18 [ 3420.382854][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3420.393329][T10506] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3420.393838][T22222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3420.417525][T10961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3420.426368][T10506] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3420.429209][T10961] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3420.448632][T22222] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3420.459465][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3420.461739][T10506] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3420.469559][T10961] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3420.490082][T22222] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3420.500748][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3420.511942][T10506] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3420.533928][T10506] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3420.547430][T10506] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3420.572790][T19845] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3420.683472][T10961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3420.692512][T10961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.702058][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3420.713956][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.714041][T10506] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3420.721933][T22222] usb 4-1: Product: ⋼溷騣ꘉ뼐 [ 3420.721946][T22222] usb 4-1: Manufacturer:  [ 3420.721963][T22222] usb 4-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3420.722583][T10961] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3420.750613][T10506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.756753][T10961] usb 1-1: Manufacturer:  [ 3420.774205][T10961] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3420.785176][T10506] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3420.787904][T19845] usb 3-1: device descriptor read/64, error 18 [ 3420.813458][T10506] usb 5-1: Manufacturer:  [ 3420.831341][T10506] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3420.915421][T19845] usb usb3-port1: attempt power cycle [ 3421.043035][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3421.067067][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3421.085986][T22222] usb 4-1: USB disconnect, device number 98 [ 3421.113083][T10961] cdc_ncm 1-1:1.0: bind() failure [ 3421.121472][T10961] cdc_ncm 1-1:1.1: bind() failure [ 3421.163102][T10506] cdc_ncm 5-1:1.0: bind() failure [ 3421.168864][T10961] usb 1-1: USB disconnect, device number 103 [ 3421.179392][T10506] cdc_ncm 5-1:1.1: bind() failure [ 3421.219075][T10506] usb 5-1: USB disconnect, device number 117 [ 3421.632847][T19845] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3421.732760][T19845] usb 3-1: Invalid ep0 maxpacket: 0 [ 3421.892685][T19845] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3421.982768][T19845] usb 3-1: Invalid ep0 maxpacket: 0 [ 3421.988117][T19845] usb usb3-port1: unable to enumerate USB device 17:02:57 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:57 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x747000) 17:02:57 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:57 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x2000000) 17:02:57 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1590000) 17:02:57 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x747000) 17:02:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1590000) 17:02:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x747000) 17:02:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1590000) 17:02:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x747000) [ 3423.102686][T23339] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 3423.131607][T10506] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 3423.146971][T18982] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 3423.352638][T23339] usb 5-1: Using ep0 maxpacket: 8 [ 3423.373285][T10506] usb 1-1: Using ep0 maxpacket: 8 [ 3423.392672][T18982] usb 3-1: Using ep0 maxpacket: 8 [ 3423.473297][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3423.484329][T23339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3423.497046][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 3423.508235][T23339] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3423.518330][T18982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3423.529226][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3423.539031][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3423.549523][T18982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3423.559713][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3423.570227][T23339] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3423.580648][T18982] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3423.590489][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3423.600328][T23339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3423.610075][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3423.620196][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3423.773114][T10506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3423.782574][T23339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3423.791629][T23339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3423.801657][T18982] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3423.811882][T10506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3423.819996][T18982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3423.828515][T23339] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3423.833805][T10506] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3423.840406][T10506] usb 1-1: Manufacturer:  [ 3423.845111][T18982] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3423.850779][T18982] usb 3-1: Manufacturer:  [ 3423.856680][T23339] usb 5-1: Manufacturer:  [ 3423.861379][T23339] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3423.875052][T10506] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3423.889413][T18982] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3424.182891][T23339] cdc_ncm 5-1:1.0: bind() failure [ 3424.188483][T10506] cdc_ncm 1-1:1.0: bind() failure [ 3424.193867][T18982] cdc_ncm 3-1:1.0: bind() failure [ 3424.201008][T18982] cdc_ncm 3-1:1.1: bind() failure [ 3424.220094][T10506] cdc_ncm 1-1:1.1: bind() failure [ 3424.226194][T23339] cdc_ncm 5-1:1.1: bind() failure [ 3424.253110][T18982] usb 3-1: USB disconnect, device number 11 [ 3424.262991][T10506] usb 1-1: USB disconnect, device number 104 [ 3424.272956][T23339] usb 5-1: USB disconnect, device number 118 17:02:59 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:59 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4600, 0x747000) 17:02:59 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x1590000) 17:02:59 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:59 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:59 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:02:59 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x1590000) 17:02:59 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x747000) 17:02:59 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x1590000) 17:02:59 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x747000) 17:02:59 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x4600, 0x747000) 17:02:59 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1590000) [ 3425.072449][T19845] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 3425.072558][T18982] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 3425.088469][T10506] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3425.093088][T13035] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 3425.282605][T18982] usb 2-1: device descriptor read/64, error 18 [ 3425.332532][T10506] usb 5-1: Using ep0 maxpacket: 8 [ 3425.352446][T13035] usb 1-1: Using ep0 maxpacket: 8 [ 3425.357631][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3425.452792][T10506] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3425.468725][T10506] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3425.486008][T10506] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3425.499694][T10506] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3425.512146][T10506] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3425.512974][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3425.530684][T10506] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3425.534803][T13035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3425.552516][T18982] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 3425.564735][T13035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3425.579558][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3425.591303][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3425.605827][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3425.619449][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3425.629314][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3425.641065][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3425.723186][T10506] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3425.732865][T10506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.740952][T10506] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3425.753189][T18982] usb 2-1: device descriptor read/64, error 18 [ 3425.759372][T10506] usb 5-1: Manufacturer:  [ 3425.764045][T10506] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3425.840457][T13035] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3425.849830][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3425.859036][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.872602][T18982] usb usb2-port1: attempt power cycle [ 3425.880865][T13035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.892771][T19845] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3425.898114][T19845] usb 3-1: Manufacturer:  [ 3425.902865][T13035] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3425.908065][T13035] usb 1-1: Manufacturer:  [ 3425.924064][T19845] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3425.939747][T13035] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3426.062487][T10506] cdc_ncm 5-1:1.0: bind() failure [ 3426.069709][T10506] cdc_ncm 5-1:1.1: bind() failure [ 3426.101973][T10506] usb 5-1: USB disconnect, device number 119 [ 3426.242748][T13035] cdc_ncm 1-1:1.0: bind() failure [ 3426.248695][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3426.263756][T19845] cdc_ncm 3-1:1.1: bind() failure [ 3426.269629][T13035] cdc_ncm 1-1:1.1: bind() failure [ 3426.286184][T19845] usb 3-1: USB disconnect, device number 12 [ 3426.302545][T13035] usb 1-1: USB disconnect, device number 105 [ 3426.582375][T18982] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 3426.672812][T18982] usb 2-1: Invalid ep0 maxpacket: 0 17:03:01 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x460f, 0x1000000) 17:03:01 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1590000) 17:03:01 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3426.822376][T18982] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3426.942485][T18982] usb 2-1: Invalid ep0 maxpacket: 0 [ 3426.947927][T18982] usb usb2-port1: unable to enumerate USB device [ 3427.057260][T10506] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3427.102437][T13035] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 3427.302341][T10506] usb 3-1: Using ep0 maxpacket: 8 [ 3427.352277][T13035] usb 1-1: Using ep0 maxpacket: 8 [ 3427.422431][T10506] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3427.433419][T10506] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3427.449601][T10506] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3427.464443][T10506] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3427.478888][T10506] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3427.500734][T13035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3427.511636][T13035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3427.521462][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3427.531546][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3427.652443][T10506] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3427.661981][T10506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3427.673276][T10506] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3427.679574][T10506] usb 3-1: Manufacturer:  [ 3427.684316][T10506] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:03:02 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:02 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x747000) 17:03:02 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1590000) [ 3427.752893][T13035] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3427.761950][T13035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3427.782772][T13035] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3427.787991][T13035] usb 1-1: Manufacturer:  [ 3427.823135][T13035] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ 17:03:02 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x1590000) 17:03:02 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x747000) 17:03:02 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x1590000) [ 3427.985165][T10506] cdc_ncm 3-1:1.0: bind() failure [ 3427.999355][T10506] cdc_ncm 3-1:1.1: bind() failure [ 3428.020416][T10506] usb 3-1: USB disconnect, device number 13 17:03:03 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x1590000) [ 3428.179725][T19845] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 3428.192435][T13035] cdc_ncm 1-1:1.0: bind() failure [ 3428.199885][T13035] cdc_ncm 1-1:1.1: bind() failure [ 3428.237773][T13035] usb 1-1: USB disconnect, device number 106 [ 3428.402265][T22222] usb 2-1: new high-speed USB device number 96 using dummy_hcd 17:03:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x747000) 17:03:03 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:03 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x805400) [ 3428.473078][T19845] usb 5-1: Using ep0 maxpacket: 8 [ 3428.594921][T22222] usb 2-1: device descriptor read/64, error 18 [ 3428.623018][T19845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3428.634308][T19845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 17:03:03 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) [ 3428.649668][T19845] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3428.662810][T19845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3428.677537][T19845] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3428.699845][T19845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3428.802431][T10506] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3428.862433][T22222] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 3428.902447][T19845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3428.911507][T19845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3428.927070][T19845] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3428.936838][T19845] usb 5-1: Manufacturer:  [ 3428.941549][T19845] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3428.997639][T13035] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 3429.042366][T10506] usb 3-1: Using ep0 maxpacket: 8 [ 3429.072254][T22222] usb 2-1: device descriptor read/64, error 18 [ 3429.162874][T10506] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3429.173895][T10506] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3429.186751][T10506] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3429.196820][T10506] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3429.202407][T22222] usb usb2-port1: attempt power cycle [ 3429.216558][T10506] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3429.242247][T13035] usb 1-1: Using ep0 maxpacket: 8 [ 3429.252306][T19845] cdc_ncm 5-1:1.0: bind() failure [ 3429.255812][T19845] cdc_ncm 5-1:1.1: bind() failure [ 3429.277059][T19845] usb 5-1: USB disconnect, device number 120 [ 3429.392378][T13035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3429.402895][T10506] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3429.403455][T13035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3429.418448][T10506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3429.432676][T10506] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3429.438064][T10506] usb 3-1: Manufacturer:  [ 3429.442974][T10506] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3429.453453][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3429.488317][T13035] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3429.709478][T13035] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3429.720236][T13035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3429.735870][T13035] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3429.742911][T10506] cdc_ncm 3-1:1.0: bind() failure [ 3429.747246][T13035] usb 1-1: Manufacturer:  [ 3429.760526][T13035] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3429.760533][T10506] cdc_ncm 3-1:1.1: bind() failure [ 3429.783516][T10506] usb 3-1: USB disconnect, device number 14 [ 3429.952202][T22222] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3430.072277][T13035] cdc_ncm 1-1:1.0: bind() failure [ 3430.079472][T13035] cdc_ncm 1-1:1.1: bind() failure [ 3430.086195][T22222] usb 2-1: Invalid ep0 maxpacket: 0 [ 3430.097581][T13035] usb 1-1: USB disconnect, device number 107 [ 3430.242195][T22222] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3430.362247][T22222] usb 2-1: Invalid ep0 maxpacket: 0 [ 3430.367785][T22222] usb usb2-port1: unable to enumerate USB device 17:03:05 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:05 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x747000) 17:03:05 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x805400) 17:03:05 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:03:05 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:05 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:05 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x747000) 17:03:05 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x805400) 17:03:05 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x747000) 17:03:05 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x805400) 17:03:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x747000) [ 3431.172130][T10506] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 3431.209928][T13035] usb 3-1: new high-speed USB device number 15 using dummy_hcd 17:03:06 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x805400) [ 3431.227630][T18982] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 3431.242279][T23339] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3431.432090][T10506] usb 1-1: Using ep0 maxpacket: 8 [ 3431.445214][T23339] usb 2-1: device descriptor read/64, error 18 [ 3431.472084][T18982] usb 5-1: Using ep0 maxpacket: 8 [ 3431.492039][T13035] usb 3-1: Using ep0 maxpacket: 8 [ 3431.552146][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3431.564042][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3431.582104][T10506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3431.592160][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3431.603063][T18982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3431.614052][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3431.623912][T18982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3431.633807][T18982] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3431.637897][T13035] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3431.644028][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3431.666104][T18982] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3431.678337][T18982] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3431.678455][T13035] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3431.713785][T23339] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3431.718848][T13035] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3431.736092][T13035] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3431.750656][T13035] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3431.768223][T13035] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3431.792847][T10506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3431.801880][T10506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3431.813290][T10506] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3431.823497][T10506] usb 1-1: Manufacturer:  [ 3431.828111][T10506] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3431.852920][T18982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3431.862749][T18982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3431.871346][T18982] usb 5-1: Product: syz [ 3431.880593][T18982] usb 5-1: Manufacturer: syz [ 3431.889204][T18982] usb 5-1: SerialNumber: syz [ 3431.912184][T23339] usb 2-1: device descriptor read/64, error 18 [ 3431.972450][T13035] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3431.981534][T13035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3431.989782][T13035] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3431.995360][T13035] usb 3-1: Manufacturer:  [ 3432.001460][T13035] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3432.042282][T23339] usb usb2-port1: attempt power cycle [ 3432.122429][T10506] cdc_ncm 1-1:1.0: bind() failure [ 3432.129824][T10506] cdc_ncm 1-1:1.1: bind() failure [ 3432.162212][T10506] usb 1-1: USB disconnect, device number 108 [ 3432.182160][T18982] cdc_ncm 5-1:1.0: bind() failure [ 3432.216792][T18982] cdc_ncm 5-1:1.1: bind() failure [ 3432.242853][T18982] usb 5-1: USB disconnect, device number 121 [ 3432.302224][T13035] cdc_ncm 3-1:1.0: bind() failure [ 3432.317104][T13035] cdc_ncm 3-1:1.1: bind() failure [ 3432.343713][T13035] usb 3-1: USB disconnect, device number 15 [ 3432.751933][T23339] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3432.842948][T23339] usb 2-1: Invalid ep0 maxpacket: 0 [ 3432.991910][T23339] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3433.082357][T23339] usb 2-1: Invalid ep0 maxpacket: 0 [ 3433.087698][T23339] usb usb2-port1: unable to enumerate USB device 17:03:08 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:08 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x805400) 17:03:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x747000) 17:03:08 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:08 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:08 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:08 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x747000) 17:03:08 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x805400) 17:03:09 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x805400) 17:03:09 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x747000) 17:03:09 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x805400) 17:03:09 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x747000) [ 3434.262004][T23339] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 3434.280033][T18515] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3434.291935][T10961] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 3434.361959][T10506] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3434.551808][T10961] usb 5-1: Using ep0 maxpacket: 8 [ 3434.551897][T23339] usb 1-1: Using ep0 maxpacket: 8 [ 3434.564729][T18515] usb 3-1: Using ep0 maxpacket: 8 [ 3434.621964][T10506] usb 2-1: Using ep0 maxpacket: 8 [ 3434.671958][T10961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3434.687301][T10961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3434.692141][T18515] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3434.710774][T23339] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3434.718721][T10961] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 3434.724848][T23339] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3434.744580][T18515] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3434.754749][T18515] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3434.760779][T10961] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3434.765283][T10506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3434.788053][T23339] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3434.798221][T18515] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3434.810287][T23339] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3434.821102][T18515] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3434.832371][T10506] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3434.843971][T23339] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3434.854122][T18515] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3434.865451][T10506] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3434.875893][T10506] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3434.885748][T10506] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3434.897770][T10506] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3434.961965][T10961] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3434.971025][T10961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3434.988461][T10961] usb 5-1: Product: ⋼溷騣ꘉ뼐 [ 3434.996370][T10961] usb 5-1: Manufacturer:  [ 3435.000966][T10961] usb 5-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3435.045685][T23339] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3435.055054][T18515] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3435.064345][T18515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.072946][T23339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.091731][T18515] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3435.097237][T18515] usb 3-1: Manufacturer:  [ 3435.102253][T23339] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3435.107467][T23339] usb 1-1: Manufacturer:  [ 3435.112912][T10506] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3435.127747][T18515] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3435.142409][T10506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.151541][T10506] usb 2-1: Product: ⋼溷騣ꘉ뼐 [ 3435.162173][T10506] usb 2-1: Manufacturer:  [ 3435.167450][T10506] usb 2-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3435.182421][T23339] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3435.322519][T10961] cdc_ncm 5-1:1.0: bind() failure [ 3435.338427][T10961] cdc_ncm 5-1:1.1: bind() failure [ 3435.359134][T10961] usb 5-1: USB disconnect, device number 122 [ 3435.472001][T18515] cdc_ncm 3-1:1.0: bind() failure [ 3435.480056][T18515] cdc_ncm 3-1:1.1: bind() failure [ 3435.501839][T23339] cdc_ncm 1-1:1.0: bind() failure [ 3435.509920][T10506] cdc_ncm 2-1:1.0: bind() failure [ 3435.522345][T23339] cdc_ncm 1-1:1.1: bind() failure [ 3435.527888][T10506] cdc_ncm 2-1:1.1: bind() failure [ 3435.551794][T18515] usb 3-1: USB disconnect, device number 16 [ 3435.570437][T10506] usb 2-1: USB disconnect, device number 104 [ 3435.574511][T23339] usb 1-1: USB disconnect, device number 109 17:03:10 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:10 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x805400) 17:03:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:10 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:10 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x747000) 17:03:10 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:10 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x805400) 17:03:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:11 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:11 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x805400) 17:03:11 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:11 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) [ 3436.361799][T20054] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 3436.382405][T23339] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3436.387068][T22222] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 3436.601834][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3436.631744][T22222] usb 1-1: Using ep0 maxpacket: 8 [ 3436.632295][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3436.751802][T22222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3436.762777][T22222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3436.762868][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3436.772903][T22222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3436.791662][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3436.795298][T22222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3436.818909][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3436.820320][T22222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3436.837877][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3436.848507][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3436.858869][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3436.868833][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3436.880115][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3436.892029][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3436.902094][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3436.911937][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3436.921801][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3437.021767][T22222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3437.030939][T22222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3437.040568][T22222] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3437.046830][T22222] usb 1-1: Manufacturer:  [ 3437.052664][T22222] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3437.091918][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3437.100957][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3437.109047][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3437.123105][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3437.131100][T20054] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3437.152772][T23339] usb 2-1: Product: ⋼溷騣ꘉ뼐 [ 3437.157989][T23339] usb 2-1: Manufacturer:  [ 3437.162722][T20054] usb 3-1: Manufacturer:  [ 3437.168375][T20054] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3437.182140][T23339] usb 2-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3437.351927][T22222] cdc_ncm 1-1:1.0: bind() failure [ 3437.361347][T22222] cdc_ncm 1-1:1.1: bind() failure [ 3437.385003][T22222] usb 1-1: USB disconnect, device number 110 [ 3437.471813][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3437.476989][T23339] cdc_ncm 2-1:1.0: bind() failure [ 3437.488653][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3437.497137][T23339] cdc_ncm 2-1:1.1: bind() failure [ 3437.517494][T20054] usb 3-1: USB disconnect, device number 17 [ 3437.526457][T23339] usb 2-1: USB disconnect, device number 105 17:03:12 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:03:12 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:12 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:12 executing program 4: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) 17:03:12 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:12 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:13 executing program 4: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) 17:03:13 executing program 4: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) 17:03:13 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x400000) 17:03:13 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) [ 3438.331755][T10961] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 3438.351710][T22222] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3438.361886][T20054] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3438.571640][T10961] usb 1-1: Using ep0 maxpacket: 8 [ 3438.601577][T22222] usb 3-1: Using ep0 maxpacket: 8 [ 3438.621940][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3438.691943][T10961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3438.703539][T10961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3438.716226][T10961] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3438.727062][T22222] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3438.738221][T10961] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3438.748007][T22222] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3438.752950][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3438.757915][T10961] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3438.779428][T22222] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3438.789037][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3438.789312][T22222] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3438.808885][T22222] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3438.816750][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3438.818777][T22222] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3438.859908][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3438.874797][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3438.887476][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3438.961642][T10961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3438.970675][T10961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3438.981798][T10961] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3438.989121][T10961] usb 1-1: Manufacturer:  [ 3438.995660][T22222] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3439.005128][T10961] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3439.019001][T22222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3439.027318][T22222] usb 3-1: Product: ⋼溷騣ꘉ뼐 [ 3439.038672][T22222] usb 3-1: Manufacturer:  [ 3439.051604][T22222] usb 3-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3439.092447][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3439.108543][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3439.136429][T20054] usb 2-1: Product: syz [ 3439.140892][T20054] usb 2-1: Manufacturer: syz [ 3439.152916][T20054] usb 2-1: SerialNumber: syz [ 3439.311630][T10961] cdc_ncm 1-1:1.0: bind() failure [ 3439.321363][T10961] cdc_ncm 1-1:1.1: bind() failure [ 3439.356049][T10961] usb 1-1: USB disconnect, device number 111 [ 3439.362425][T22222] cdc_ncm 3-1:1.0: bind() failure [ 3439.382013][T22222] cdc_ncm 3-1:1.1: bind() failure [ 3439.394759][T22222] usb 3-1: USB disconnect, device number 18 [ 3439.441786][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3439.457392][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3439.477385][T20054] usb 2-1: USB disconnect, device number 106 17:03:14 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x400000) 17:03:14 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:14 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) 17:03:14 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:14 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:03:14 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x300) 17:03:14 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) 17:03:14 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x400000) 17:03:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x4) 17:03:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:15 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:15 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:15 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0189436, 0x0) 17:03:15 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:15 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3440.301585][T22222] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 3440.331642][T10506] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3440.551432][T22222] usb 1-1: Using ep0 maxpacket: 8 [ 3440.601563][T10506] usb 3-1: Using ep0 maxpacket: 8 [ 3440.671495][T22222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3440.682520][T22222] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3440.701749][T22222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3440.711864][T22222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3440.722048][T22222] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3440.732616][T22222] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3440.754984][T10506] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3440.765939][T10506] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3440.782340][T10506] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3440.792526][T10506] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3440.805650][T10506] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3440.815629][T10506] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3440.901512][T22222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3440.910719][T22222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3440.925717][T22222] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3440.930956][T22222] usb 1-1: Manufacturer:  [ 3440.943933][T22222] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3440.988132][T10506] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3440.997306][T10506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.020424][T10506] usb 3-1: Product: syz [ 3441.027530][T10506] usb 3-1: Manufacturer: syz [ 3441.039906][T10506] usb 3-1: SerialNumber: syz [ 3441.241508][T22222] cdc_ncm 1-1:1.0: bind() failure [ 3441.250884][T22222] cdc_ncm 1-1:1.1: bind() failure [ 3441.274905][T22222] usb 1-1: USB disconnect, device number 112 [ 3441.331574][T10506] cdc_ncm 3-1:1.0: bind() failure [ 3441.346229][T10506] cdc_ncm 3-1:1.1: bind() failure [ 3441.355728][T10506] usb 3-1: USB disconnect, device number 19 17:03:16 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7f, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:16 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4610, 0x0) 17:03:16 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) 17:03:16 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:16 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:03:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:16 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) 17:03:16 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) 17:03:16 executing program 1: read$fb(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000000)={&(0x7f00000001c0)="362c435d82ca743cfc175b5528b16f123ae6a99b07313b30d7019cfad305049b64f322d90e3bdacdeb63be3368da8097a39428c8cde7cfd7944d38b276c43675e984b977f64a69a5352a5c1d48728f85892335eeecf2f36cdc345e1fe8d6f547bff8169286de739c29f52302e36195c0fae6ccc2f3373ce502b9cb1140e99d42783887e79a89b263b498044ae4d70d0d33", 0x91}) read$fb(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:03:16 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x400000) [ 3442.011491][T10506] usb 1-1: new high-speed USB device number 113 using dummy_hcd 17:03:16 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) [ 3442.231815][T20054] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3442.292139][T10506] usb 1-1: Using ep0 maxpacket: 8 [ 3442.311338][T10961] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3442.431490][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3442.442568][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3442.455351][T10506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3442.465522][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3442.476187][T10506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3442.486254][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3442.511383][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3442.551331][T10961] usb 2-1: Using ep0 maxpacket: 8 [ 3442.641540][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3442.652566][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3442.671929][T10506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3442.672112][T10961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3442.680972][T10506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3442.680988][T10506] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3442.681003][T10506] usb 1-1: Manufacturer:  [ 3442.681021][T10506] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3442.681646][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3442.702862][T10961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3442.749706][T10961] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3442.759861][T10961] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3442.769973][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3442.772345][T10961] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3442.791637][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3442.797624][T10961] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3442.823776][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3442.971995][T10961] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3442.981102][T10961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3442.992930][T10506] cdc_ncm 1-1:1.0: bind() failure [ 3443.001227][T10961] usb 2-1: Product: syz [ 3443.004775][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3443.005505][T10961] usb 2-1: Manufacturer: syz [ 3443.005518][T10961] usb 2-1: SerialNumber: syz [ 3443.026257][T10506] cdc_ncm 1-1:1.1: bind() failure [ 3443.047610][T10506] usb 1-1: USB disconnect, device number 113 [ 3443.056260][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3443.084170][T20054] usb 3-1: Product: syz [ 3443.099994][T20054] usb 3-1: Manufacturer: syz [ 3443.105396][T20054] usb 3-1: SerialNumber: syz [ 3443.301331][T10961] cdc_ncm 2-1:1.0: bind() failure [ 3443.322103][T10961] cdc_ncm 2-1:1.1: bind() failure [ 3443.341888][T10961] usb 2-1: USB disconnect, device number 107 [ 3443.411499][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3443.418943][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3443.443634][T20054] usb 3-1: USB disconnect, device number 20 17:03:18 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x400000) 17:03:18 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) 17:03:18 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:18 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:18 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) [ 3443.571482][ T6987] FAULT_INJECTION: forcing a failure. [ 3443.571482][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 3443.618530][ T6987] CPU: 0 PID: 6987 Comm: syz-executor.4 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3443.628456][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3443.638518][ T6987] Call Trace: [ 3443.641898][ T6987] dump_stack+0x107/0x163 [ 3443.646239][ T6987] should_fail.cold+0x5/0xa [ 3443.650760][ T6987] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3443.656478][ T6987] should_failslab+0x5/0x10 [ 3443.660985][ T6987] __kmalloc+0x2e9/0x400 [ 3443.665246][ T6987] tomoyo_realpath_from_path+0xc3/0x620 [ 3443.670804][ T6987] ? tomoyo_profile+0x42/0x50 [ 3443.675505][ T6987] tomoyo_path_number_perm+0x1d5/0x590 [ 3443.681062][ T6987] ? tomoyo_path_number_perm+0x18d/0x590 [ 3443.686701][ T6987] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3443.692520][ T6987] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3443.698049][ T6987] ? __fget_files+0x294/0x400 [ 3443.702709][ T6987] security_file_ioctl+0x50/0xb0 [ 3443.707627][ T6987] __x64_sys_ioctl+0xb3/0x200 [ 3443.712286][ T6987] do_syscall_64+0x2d/0x70 [ 3443.716680][ T6987] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3443.722548][ T6987] RIP: 0033:0x45deb9 [ 3443.726503][ T6987] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3443.746084][ T6987] RSP: 002b:00007f92a8e26c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3443.754473][ T6987] RAX: ffffffffffffffda RBX: 000000000000e340 RCX: 000000000045deb9 [ 3443.762422][ T6987] RDX: 0000000000750000 RSI: 0000000000005421 RDI: 0000000000000003 [ 3443.770371][ T6987] RBP: 00007f92a8e26ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3443.778360][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3443.786309][ T6987] R13: 00007ffd6d17381f R14: 00007f92a8e279c0 R15: 000000000118bf2c [ 3443.808662][ T6987] ERROR: Out of memory at tomoyo_realpath_from_path. 17:03:18 executing program 2: read$fb(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000000)={&(0x7f00000001c0)="362c435d82ca743cfc175b5528b16f123ae6a99b07313b30d7019cfad305049b64f322d90e3bdacdeb63be3368da8097a39428c8cde7cfd7944d38b276c43675e984b977f64a69a5352a5c1d48728f85892335eeecf2f36cdc345e1fe8d6f547bff8169286de739c29f52302e36195c0fae6ccc2f3373ce502b9cb1140e99d42783887e79a89b263b498044ae4d70d0d33", 0x91}) read$fb(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:03:18 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x2, 0x400000) 17:03:18 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:18 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:18 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) accept$alg(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) [ 3443.951265][T10506] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 3444.031181][ T6999] FAULT_INJECTION: forcing a failure. [ 3444.031181][ T6999] name failslab, interval 1, probability 0, space 0, times 0 [ 3444.049284][ T7001] FAULT_INJECTION: forcing a failure. [ 3444.049284][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 3444.058987][ T6999] CPU: 1 PID: 6999 Comm: syz-executor.3 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3444.071896][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3444.071910][ T6999] Call Trace: [ 3444.085269][ T6999] dump_stack+0x107/0x163 [ 3444.089614][ T6999] should_fail.cold+0x5/0xa [ 3444.094128][ T6999] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3444.099845][ T6999] should_failslab+0x5/0x10 [ 3444.105209][ T6999] __kmalloc+0x2e9/0x400 [ 3444.109471][ T6999] tomoyo_realpath_from_path+0xc3/0x620 [ 3444.115029][ T6999] ? tomoyo_profile+0x42/0x50 [ 3444.119721][ T6999] tomoyo_path_number_perm+0x1d5/0x590 [ 3444.125187][ T6999] ? tomoyo_path_number_perm+0x18d/0x590 [ 3444.130823][ T6999] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3444.136669][ T6999] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3444.142220][ T6999] ? __fget_files+0x294/0x400 [ 3444.146901][ T6999] security_file_ioctl+0x50/0xb0 [ 3444.153361][ T6999] __x64_sys_ioctl+0xb3/0x200 [ 3444.158051][ T6999] do_syscall_64+0x2d/0x70 [ 3444.162471][ T6999] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3444.168356][ T6999] RIP: 0033:0x45deb9 [ 3444.172251][ T6999] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3444.191854][ T6999] RSP: 002b:00007fde0c2e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3444.200262][ T6999] RAX: ffffffffffffffda RBX: 000000000000e340 RCX: 000000000045deb9 [ 3444.208241][ T6999] RDX: 0000000000400000 RSI: 0000000000005421 RDI: 0000000000000003 [ 3444.216215][ T6999] RBP: 00007fde0c2e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3444.225561][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3444.233539][ T6999] R13: 00007fff324eaecf R14: 00007fde0c2e89c0 R15: 000000000118bf2c [ 3444.244902][ T7001] CPU: 0 PID: 7001 Comm: syz-executor.4 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3444.254810][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3444.264859][ T7001] Call Trace: [ 3444.268166][ T7001] dump_stack+0x107/0x163 [ 3444.268669][ T6999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3444.272493][ T7001] should_fail.cold+0x5/0xa [ 3444.272515][ T7001] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3444.272530][ T7001] should_failslab+0x5/0x10 [ 3444.272543][ T7001] __kmalloc+0x2e9/0x400 [ 3444.272561][ T7001] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3444.272579][ T7001] tomoyo_encode+0x28/0x50 [ 3444.307510][ T7001] tomoyo_realpath_from_path+0x186/0x620 [ 3444.313161][ T7001] tomoyo_path_number_perm+0x1d5/0x590 [ 3444.318624][ T7001] ? tomoyo_path_number_perm+0x18d/0x590 [ 3444.324270][ T7001] ? tomoyo_execute_permission+0x4a0/0x4a0 17:03:19 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3444.330112][ T7001] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3444.335680][ T7001] ? __fget_files+0x294/0x400 [ 3444.340394][ T7001] security_file_ioctl+0x50/0xb0 [ 3444.345356][ T7001] __x64_sys_ioctl+0xb3/0x200 [ 3444.350043][ T7001] do_syscall_64+0x2d/0x70 [ 3444.354480][ T7001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3444.355069][ T7011] FAULT_INJECTION: forcing a failure. [ 3444.355069][ T7011] name failslab, interval 1, probability 0, space 0, times 0 [ 3444.360363][ T7001] RIP: 0033:0x45deb9 [ 3444.360381][ T7001] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3444.360392][ T7001] RSP: 002b:00007f92a8e26c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3444.360426][ T7001] RAX: ffffffffffffffda RBX: 000000000000e340 RCX: 000000000045deb9 [ 3444.360435][ T7001] RDX: 0000000000750000 RSI: 0000000000005421 RDI: 0000000000000003 [ 3444.360446][ T7001] RBP: 00007f92a8e26ca0 R08: 0000000000000000 R09: 0000000000000000 17:03:19 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) [ 3444.360455][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3444.360466][ T7001] R13: 00007ffd6d17381f R14: 00007f92a8e279c0 R15: 000000000118bf2c [ 3444.398852][ T7001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3444.462492][T10506] usb 1-1: Using ep0 maxpacket: 8 17:03:19 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 3444.506959][ T7015] FAULT_INJECTION: forcing a failure. [ 3444.506959][ T7015] name failslab, interval 1, probability 0, space 0, times 0 [ 3444.531261][T10961] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3444.539374][ T7015] CPU: 0 PID: 7015 Comm: syz-executor.5 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3444.550506][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3444.561152][ T7015] Call Trace: [ 3444.564725][ T7015] dump_stack+0x107/0x163 [ 3444.569065][ T7015] should_fail.cold+0x5/0xa [ 3444.574804][ T7015] ? tomoyo_realpath_from_path+0xc3/0x620 [ 3444.581044][ T7015] should_failslab+0x5/0x10 [ 3444.585575][ T7015] __kmalloc+0x2e9/0x400 [ 3444.590938][ T7015] tomoyo_realpath_from_path+0xc3/0x620 [ 3444.596900][ T7015] ? tomoyo_profile+0x42/0x50 [ 3444.603027][ T7015] tomoyo_path_number_perm+0x1d5/0x590 [ 3444.608854][ T7015] ? tomoyo_path_number_perm+0x18d/0x590 [ 3444.614940][ T7015] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3444.620978][ T7015] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3444.626945][ T7015] ? __fget_files+0x294/0x400 [ 3444.632534][ T7015] security_file_ioctl+0x50/0xb0 [ 3444.638153][ T7015] __x64_sys_ioctl+0xb3/0x200 [ 3444.643955][ T7015] do_syscall_64+0x2d/0x70 [ 3444.648380][ T7015] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3444.654669][ T7015] RIP: 0033:0x45deb9 [ 3444.658860][ T7015] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3444.678976][ T7015] RSP: 002b:00007f5822bedc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3444.687398][ T7015] RAX: ffffffffffffffda RBX: 000000000000e340 RCX: 000000000045deb9 [ 3444.695813][ T7015] RDX: 0000000000400000 RSI: 0000000000000002 RDI: 0000000000000003 [ 3444.704281][ T7015] RBP: 00007f5822bedca0 R08: 0000000000000000 R09: 0000000000000000 [ 3444.712661][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3444.720748][ T7015] R13: 00007ffe024fb66f R14: 00007f5822bee9c0 R15: 000000000118bf2c [ 3444.755795][ T7015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3444.755842][ T7011] CPU: 1 PID: 7011 Comm: syz-executor.3 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3444.772496][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3444.782544][ T7011] Call Trace: [ 3444.785831][ T7011] dump_stack+0x107/0x163 [ 3444.790164][ T7011] should_fail.cold+0x5/0xa [ 3444.794661][ T7011] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3444.800034][ T7011] should_failslab+0x5/0x10 [ 3444.804527][ T7011] __kmalloc+0x2e9/0x400 [ 3444.809092][ T7011] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3444.816424][ T7011] tomoyo_encode+0x28/0x50 [ 3444.821883][ T7011] tomoyo_realpath_from_path+0x186/0x620 [ 3444.827532][ T7011] tomoyo_path_number_perm+0x1d5/0x590 [ 3444.834073][ T7011] ? tomoyo_path_number_perm+0x18d/0x590 [ 3444.840418][ T7011] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3444.847780][ T7011] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3444.854185][ T7011] ? __fget_files+0x294/0x400 [ 3444.861244][ T7011] security_file_ioctl+0x50/0xb0 [ 3444.866189][ T7011] __x64_sys_ioctl+0xb3/0x200 [ 3444.871988][ T7011] do_syscall_64+0x2d/0x70 [ 3444.877655][ T7011] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3444.885166][ T7011] RIP: 0033:0x45deb9 [ 3444.889088][ T7011] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3444.908702][ T7011] RSP: 002b:00007fde0c2e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3444.919358][ T7011] RAX: ffffffffffffffda RBX: 000000000000e340 RCX: 000000000045deb9 [ 3444.927350][ T7011] RDX: 0000000000400000 RSI: 0000000000005421 RDI: 0000000000000003 [ 3444.936627][ T7011] RBP: 00007fde0c2e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 3444.945989][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 17:03:19 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) [ 3444.954788][ T7011] R13: 00007fff324eaecf R14: 00007fde0c2e89c0 R15: 000000000118bf2c [ 3444.965509][T10961] usb 3-1: Using ep0 maxpacket: 8 [ 3444.982183][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3445.002365][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3445.013708][T10506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3445.031563][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3445.041746][T20054] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3445.054785][T10506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3445.059038][ T7021] FAULT_INJECTION: forcing a failure. [ 3445.059038][ T7021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3445.064761][ T7011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3445.064858][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3445.123598][T10961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3445.133461][ T7021] CPU: 1 PID: 7021 Comm: syz-executor.4 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3445.145307][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3445.147774][T10961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3445.155360][ T7021] Call Trace: [ 3445.155386][ T7021] dump_stack+0x107/0x163 [ 3445.155406][ T7021] should_fail.cold+0x5/0xa [ 3445.155430][ T7021] _copy_to_user+0x2c/0x150 [ 3445.155455][ T7021] simple_read_from_buffer+0xcc/0x160 [ 3445.155476][ T7021] proc_fail_nth_read+0x187/0x220 [ 3445.155496][ T7021] ? proc_fault_inject_read+0x220/0x220 [ 3445.155513][ T7021] ? security_file_permission+0x248/0x560 [ 3445.155535][ T7021] ? proc_fault_inject_read+0x220/0x220 [ 3445.155558][ T7021] vfs_read+0x1b5/0x570 [ 3445.206033][T10961] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3445.211371][ T7021] ksys_read+0x12d/0x250 [ 3445.211390][ T7021] ? vfs_write+0x700/0x700 [ 3445.211412][ T7021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3445.211432][ T7021] do_syscall_64+0x2d/0x70 [ 3445.211452][ T7021] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3445.211466][ T7021] RIP: 0033:0x4177b1 [ 3445.211482][ T7021] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3445.211498][ T7021] RSP: 002b:00007f92a8e26c80 EFLAGS: 00000293 [ 3445.230300][T10961] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3445.230469][ T7021] ORIG_RAX: 0000000000000000 [ 3445.247280][T10961] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3445.253041][ T7021] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004177b1 [ 3445.253053][ T7021] RDX: 000000000000000f RSI: 00007f92a8e26cb0 RDI: 0000000000000004 [ 3445.253064][ T7021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3445.253074][ T7021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3445.253085][ T7021] R13: 00007ffd6d17381f R14: 00007f92a8e279c0 R15: 000000000118bf2c [ 3445.371562][T10961] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3445.389500][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3445.433692][T10506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3445.451247][T10506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3445.459251][T10506] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3445.483981][T10506] usb 1-1: Manufacturer:  [ 3445.488578][T10506] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3445.531798][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3445.542975][T10961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3445.558726][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3445.558877][T10961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3445.602462][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3445.605356][T10961] usb 3-1: Product: syz [ 3445.618291][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3445.628289][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3445.634226][T10961] usb 3-1: Manufacturer: syz [ 3445.639320][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3445.649408][T10961] usb 3-1: SerialNumber: syz [ 3445.811493][T10506] cdc_ncm 1-1:1.0: bind() failure [ 3445.818737][T10506] cdc_ncm 1-1:1.1: bind() failure [ 3445.844436][T10506] usb 1-1: USB disconnect, device number 114 [ 3445.871804][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3445.880861][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3445.909601][T20054] usb 2-1: Product: syz [ 3445.925351][T20054] usb 2-1: Manufacturer: syz [ 3445.929970][T20054] usb 2-1: SerialNumber: syz [ 3445.961472][T10961] cdc_ncm 3-1:1.0: bind() failure [ 3445.974799][T10961] cdc_ncm 3-1:1.1: bind() failure [ 3445.995657][T10961] usb 3-1: USB disconnect, device number 21 [ 3446.231267][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3446.251276][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3446.269983][T20054] usb 2-1: USB disconnect, device number 108 17:03:21 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x1, 0x8f, 0x8, 0x81}, 0x50, &(0x7f0000000180)={0x5, 0xf, 0x50, 0x4, [@generic={0x22, 0x10, 0x1, "49220a822d205daf0dc0bf90e1e2b0048131b6ebda20a2f7531e8f01a418e1"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x83, 0x7, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e8a225fc30e4e123efdebdad012826c3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1f, 0x82f}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0xc, &(0x7f0000000280)=@string={0xc, 0x3, "fc22b76e239a09a610bf"}}, {0x51, &(0x7f00000002c0)=@string={0x51, 0x3, "3feb3bb48631fb5bea23601b7054b384d03e6668372069aac49acc93c32559a8b5135ea5d54a5f010fc69934555dc3a0b8d949f15cdc4aa872b7e7450306c6edf626a3e501ba4b4cc825fee876ddbe"}}]}) 17:03:21 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:21 executing program 3 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3446.351757][ T7067] FAULT_INJECTION: forcing a failure. [ 3446.351757][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 3446.365062][ T7067] CPU: 1 PID: 7067 Comm: syz-executor.5 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3446.374959][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3446.377664][ T7069] FAULT_INJECTION: forcing a failure. [ 3446.377664][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3446.385021][ T7067] Call Trace: [ 3446.385044][ T7067] dump_stack+0x107/0x163 [ 3446.385063][ T7067] should_fail.cold+0x5/0xa [ 3446.385083][ T7067] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3446.385097][ T7067] should_failslab+0x5/0x10 [ 3446.385113][ T7067] __kmalloc+0x2e9/0x400 [ 3446.385134][ T7067] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3446.385153][ T7067] tomoyo_encode+0x28/0x50 [ 3446.385169][ T7067] tomoyo_realpath_from_path+0x186/0x620 [ 3446.385196][ T7067] tomoyo_path_number_perm+0x1d5/0x590 [ 3446.385210][ T7067] ? tomoyo_path_number_perm+0x18d/0x590 [ 3446.385232][ T7067] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3446.456347][ T7067] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3446.461898][ T7067] ? __fget_files+0x294/0x400 [ 3446.466585][ T7067] security_file_ioctl+0x50/0xb0 [ 3446.471519][ T7067] __x64_sys_ioctl+0xb3/0x200 [ 3446.476190][ T7067] do_syscall_64+0x2d/0x70 [ 3446.480594][ T7067] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3446.486473][ T7067] RIP: 0033:0x45deb9 [ 3446.490358][ T7067] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3446.509957][ T7067] RSP: 002b:00007f5822bedc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3446.518377][ T7067] RAX: ffffffffffffffda RBX: 000000000000e340 RCX: 000000000045deb9 [ 3446.526343][ T7067] RDX: 0000000000400000 RSI: 0000000000000002 RDI: 0000000000000003 [ 3446.534309][ T7067] RBP: 00007f5822bedca0 R08: 0000000000000000 R09: 0000000000000000 [ 3446.542280][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3446.550247][ T7067] R13: 00007ffe024fb66f R14: 00007f5822bee9c0 R15: 000000000118bf2c [ 3446.558243][ T7069] CPU: 0 PID: 7069 Comm: syz-executor.3 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3446.568336][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3446.578384][ T7069] Call Trace: [ 3446.582565][ T7069] dump_stack+0x107/0x163 [ 3446.586903][ T7069] should_fail.cold+0x5/0xa [ 3446.591439][ T7069] _copy_to_user+0x2c/0x150 [ 3446.595965][ T7069] simple_read_from_buffer+0xcc/0x160 [ 3446.601353][ T7069] proc_fail_nth_read+0x187/0x220 [ 3446.606403][ T7069] ? proc_fault_inject_read+0x220/0x220 [ 3446.613426][ T7069] ? security_file_permission+0x248/0x560 [ 3446.619590][ T7069] ? proc_fault_inject_read+0x220/0x220 [ 3446.625935][ T7069] vfs_read+0x1b5/0x570 [ 3446.630203][ T7069] ksys_read+0x12d/0x250 [ 3446.634545][ T7069] ? vfs_write+0x700/0x700 [ 3446.638968][ T7069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3446.646779][ T7069] do_syscall_64+0x2d/0x70 [ 3446.652545][ T7069] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3446.659032][ T7069] RIP: 0033:0x4177b1 [ 3446.663333][ T7069] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3446.684128][ T7069] RSP: 002b:00007fde0c2e7c80 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 3446.692556][ T7069] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004177b1 17:03:21 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001b0c8e3138320565edda316566bea9cb505240000000d240f0100000000000000000006241a000000090581033be7443a5c00000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) 17:03:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3446.700534][ T7069] RDX: 000000000000000f RSI: 00007fde0c2e7cb0 RDI: 0000000000000004 [ 3446.708505][ T7069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3446.716478][ T7069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3446.724494][ T7069] R13: 00007fff324eaecf R14: 00007fde0c2e89c0 R15: 000000000118bf2c 17:03:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x750000) 17:03:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:21 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x10, 0x750000) [ 3446.973152][ T7067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3447.011482][T19845] usb 1-1: new high-speed USB device number 115 using dummy_hcd 17:03:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x10, 0x400000) [ 3447.081933][T10961] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3447.155288][T23339] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3447.251046][T19845] usb 1-1: Using ep0 maxpacket: 8 [ 3447.331402][T10961] usb 3-1: Using ep0 maxpacket: 8 [ 3447.371619][T19845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3447.382810][T19845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3447.392638][T19845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3447.404180][T19845] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3447.414012][T19845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3447.422413][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3447.424324][T19845] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3447.461070][T10961] usb 3-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 3447.471540][T10961] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3447.480446][T10961] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3447.571745][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3447.582848][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3447.592246][T19845] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3447.600911][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3447.606465][T19845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3447.621876][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3447.627683][T19845] usb 1-1: Product: ⋼溷騣ꘉ뼐 [ 3447.641051][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3447.649708][T19845] usb 1-1: Manufacturer:  [ 3447.650690][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3447.666365][T10961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3447.679874][T10961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3447.687960][T10961] usb 3-1: Product: syz [ 3447.699993][T19845] usb 1-1: SerialNumber: 됻ㆆ寻⏪᭠呰蒳㻐桦‷ꩩ髄鏌◃ꡙᎵꕞ䫕ş옏㒙嵕ꃃꡊ띲䗧؃⛶먁䱋◈ [ 3447.718106][T10961] usb 3-1: Manufacturer: syz [ 3447.722774][T10961] usb 3-1: SerialNumber: syz [ 3447.761928][T10961] cdc_ncm 3-1:1.0: bind() failure [ 3447.831116][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3447.840586][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3447.856433][T23339] usb 2-1: Product: syz [ 3447.860605][T23339] usb 2-1: Manufacturer: syz [ 3447.870275][T23339] usb 2-1: SerialNumber: syz 17:03:22 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000ff2505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009058101010102020d0000090582020000000000090503020000000000"], 0x0) 17:03:22 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) [ 3447.921400][T23339] usb 2-1: can't set config #1, error -71 [ 3447.946585][T23339] usb 2-1: USB disconnect, device number 109 [ 3447.967764][T13035] usb 3-1: USB disconnect, device number 22 [ 3447.989960][ T7104] FAULT_INJECTION: forcing a failure. [ 3447.989960][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3448.017247][ T7104] CPU: 0 PID: 7104 Comm: syz-executor.5 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3448.027160][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3448.037209][ T7104] Call Trace: [ 3448.040508][ T7104] dump_stack+0x107/0x163 [ 3448.045070][ T7104] should_fail.cold+0x5/0xa [ 3448.049581][ T7104] _copy_to_user+0x2c/0x150 [ 3448.054092][ T7104] simple_read_from_buffer+0xcc/0x160 [ 3448.059480][ T7104] proc_fail_nth_read+0x187/0x220 [ 3448.065489][ T7104] ? proc_fault_inject_read+0x220/0x220 [ 3448.071651][ T7104] ? security_file_permission+0x248/0x560 [ 3448.077659][ T7104] ? proc_fault_inject_read+0x220/0x220 [ 3448.084175][ T7104] vfs_read+0x1b5/0x570 [ 3448.088364][ T7104] ksys_read+0x12d/0x250 [ 3448.092610][ T7104] ? vfs_write+0x700/0x700 [ 3448.098480][ T7104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3448.104811][ T7104] do_syscall_64+0x2d/0x70 [ 3448.110383][ T7104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3448.116459][ T7104] RIP: 0033:0x4177b1 [ 3448.120407][ T7104] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3448.140015][ T7104] RSP: 002b:00007f5822bedc80 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 3448.148446][ T7104] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004177b1 [ 3448.156423][ T7104] RDX: 000000000000000f RSI: 00007f5822bedcb0 RDI: 0000000000000004 [ 3448.164402][ T7104] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000000 [ 3448.172373][ T7104] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 3448.180449][ T7104] R13: 00007ffe024fb66f R14: 00007f5822bee9c0 R15: 000000000118bf2c [ 3448.192531][T19845] cdc_ncm 1-1:1.0: bind() failure [ 3448.221459][T19845] cdc_ncm 1-1:1.1: bind() failure [ 3448.247983][T19845] usb 1-1: USB disconnect, device number 115 17:03:23 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:03:23 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4c01, 0x750000) 17:03:23 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4610, 0x400000) [ 3448.560971][T23339] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3448.841234][T23339] usb 2-1: Invalid ep0 maxpacket: 512 [ 3448.870972][T10506] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 3448.878770][T20054] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3449.003648][T23339] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3449.150878][T10506] usb 1-1: Using ep0 maxpacket: 8 [ 3449.156063][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3449.280947][T23339] usb 2-1: Invalid ep0 maxpacket: 512 [ 3449.286541][T23339] usb usb2-port1: attempt power cycle [ 3449.301605][T20054] usb 3-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 3449.311965][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3449.322949][T20054] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3449.333491][T10506] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3449.343521][T20054] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3449.356707][T10506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3449.367598][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3449.378058][T10506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3449.387802][T10506] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3449.541065][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3449.550123][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.565487][T20054] usb 3-1: Product: syz [ 3449.569655][T20054] usb 3-1: Manufacturer: syz [ 3449.582430][T10506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3449.591564][T20054] usb 3-1: SerialNumber: syz [ 3449.596748][T10506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.610923][T10506] usb 1-1: Product: syz [ 3449.615097][T10506] usb 1-1: Manufacturer: syz [ 3449.619704][T10506] usb 1-1: SerialNumber: syz [ 3449.642060][T20054] cdc_ncm 3-1:1.0: bind() failure 17:03:24 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x176, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x164, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9a, 0x100}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x6, 0x7, 0x9}, @mdlm_detail={0xea, 0x24, 0x13, 0x2, "dd2309cb4e1691f4801e1ac001f8894b79697fa2a2264ddd75b6ec0ef0b122aa558c92c6ceb6111e41049864999c58efbde9b4be9efed3397a0cd58672f9e85a04d58342ae2a8695f981144aff20b6fbd85b4462bab7f1137b53484ca5e777e8e4a45e5c42ce23097cf19113c7e7146e44e37880aaf650f93a765484ba426ecfb383e890dbe8e6e382ca5d19c30ed792019e8bf8d8ec55b5ed412d82e8ed53cc7b849821505f6f218122b712f7db8773f52bac46de76dc8e18bb18287d2e2450597cd22de0e583c1c36aecb48f5d0f5944785d994b8d0d0b515f4a49728bd845214d835ae991"}, @dmm={0x7, 0x24, 0x14, 0x4, 0x4}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x0, [0x1, 0x400, 0x7ff, 0xfb, 0x81]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2}}}}}}}]}}, 0x0) 17:03:24 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x750000) 17:03:24 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:03:24 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4611, 0x400000) [ 3449.774058][T19845] usb 3-1: USB disconnect, device number 23 17:03:24 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4c01, 0x400000) [ 3449.913584][T10506] cdc_ncm 1-1:1.0: bind() failure [ 3449.930859][T10506] cdc_ncm 1-1:1.1: bind() failure 17:03:24 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x750000) 17:03:24 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x3, 0x400000) [ 3449.958352][T10506] usb 1-1: USB disconnect, device number 116 [ 3450.020963][T23339] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3450.121688][T23339] usb 2-1: Invalid ep0 maxpacket: 512 [ 3450.280960][T23339] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3450.300830][T19845] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3450.381272][T23339] usb 2-1: Invalid ep0 maxpacket: 512 [ 3450.386826][T23339] usb usb2-port1: unable to enumerate USB device [ 3450.540728][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3450.660864][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3450.671903][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3450.681882][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3450.693265][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3450.705525][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3450.870874][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3450.879973][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3450.896886][T19845] usb 3-1: Product: syz [ 3450.903558][T19845] usb 3-1: Manufacturer: syz [ 3450.908143][T19845] usb 3-1: SerialNumber: syz 17:03:25 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') syz_usb_connect$cdc_ncm(0x0, 0x111, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x78, 0x24, 0x13, 0x2, "b27c9421029bb6ed8a01c04042f7b3473d910011fa0fdbd03599509a4e14a68e1c30742538ee73fea1c2bf8d476a2b0a785257257bd9c0923916188effa77c60798ba22f8e6b23138a161f982eb849b6b989fcbcb89333185509c7efe43a2b943c3297ed7007809293902990e5886008fe9abdd7"}, @dmm={0x7, 0x24, 0x14, 0x8, 0xfffd}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x20}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x4}]}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x4, 0x20, 0xeb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b5af"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0xffff, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3b7, 0x20, 0xd8, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x96, 0x20, 0x60}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x5, 0x81, 0x7, 0x20, 0xe3}, 0x25, &(0x7f0000000180)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x91c40a, 0x0, 0x1, [0x1fe3fc0, 0x0, 0xff3f07, 0xc0, 0x18]}]}, 0x7, [{0x4a, &(0x7f00000001c0)=@string={0x4a, 0x3, "dcc45c7b5d69015836a82b28863e1ead97a74e286c3ea4d35d0d3024d6463480100efa19f752061ce325b02d3d891968aa24515c401db583a6a570c7e6fe055e5ca2e08d46c54dbb"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x57, &(0x7f0000000500)=@string={0x57, 0x3, "b40ddba7875f51774e312140c2727f8afe4e6a8d694008234e3de20a58f84ea7404a0c5ba2404afe729880b2543ed6a2c5bb2ee05a2217e03bcdab9c2b953c5a205b77706898f83b66fed118fee845e4b9d26542ae"}}, {0xd0, &(0x7f00000002c0)=@string={0xd0, 0x3, "889a2d7d44826c077457bc72cca74de035fb3d52e80c90c289215d0042904c2c7691696eaeb628a1a1f1bc9242714c4e4b804d4de4afbf558fe8ef7f3ea832104f80b9d8019b3eb50e296c66cd19a5498ef04f3bae2c4a033f8515dc97e585d62231f9f977175863642c05196242ddc09617805ea98a8d2bd0a022576c87246bcec5f471a68e531ae73233f8d1201e41a87f2745e09aa84289733b531e499708366745874b28f233baee1912d32540ebfafaac9ea64acbf4cb21ce47ccf75586ed7156e4dfb6dba153fdd1124fc0"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2409}}]}) r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000bc0)=[@sack_perm, @mss={0x2, 0x1}, @window={0x3, 0x400, 0x200}], 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x7f, 0x40, 0x48, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d2"}, {0x5, 0x24, 0x0, 0xff12}, {0xd, 0x24, 0xf, 0x1, 0x753b, 0x7, 0x1, 0xff}, {0x6, 0x24, 0x1a, 0x3, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xeb, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x40, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x6, 0x3}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x11, 0x3, 0x2, 0x6, 0x10, 0x1f}, 0xee, &(0x7f0000000640)={0x5, 0xf, 0xee, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "5d16ba957134bebfc8fa0b423a58b03f"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b32b5c5cf8071ce23193d17d4292b268"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x1, 0x7a, 0x4, 0x53}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x5, 0x4}, @generic={0xac, 0x10, 0x4, "48132768217fded6887de420c645dc0f50b9ab25e7b985f39085b90f3a06a776b4f5dd47a1ea5ff056a8df4f700a30ac8519660450c9ac82a23e8541aaf0c023b8abe129acfac18c32ed778b8a0524ec32bc4cd373fa49892c364ec4020c2d29a670e2c96e85fbfbb46b8fde07aef95625027cf8ad917d1c5ca44071d481d5ef7c8bb18bc9c92fb0bede48e850050b8a975ed8b487b4c6f411febb136b8c2390d3c5420ffbc4b23311"}]}, 0x1, [{0x7d, &(0x7f0000000740)=@string={0x7d, 0x3, "c14ac8af447177009a75a584d4cb5b649e7726211f7c78a8650ccf997e3d1a5301edc93622615f048eabb84492e389c5e4e9fec53c8c6b152a3e0bc6c57d618bbde9fe28e0765f9570941e43fc6147852c33597f211b31b41eac502995b3fd69bcfb071da95f1dd0bb693ac211fbe3f15cb05efdb45f91adcdea17"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x20, 0x23, 0x9d, {0x9d, 0x11, "7d5e2d285b371b6bae4fc8886bf966ce64115a25eb41b24bf99c6d26d8b3f0314371b703261736770f411bb2882c2bab9b50bc428a90233ae4c9254f1ae3f23d21900a8ea86f261359f52a554bf550fd2eaf5a993f93474071e090bb9bb768a8bc461e29d0097b6a8728505dd23d99aac0605b4f5e79882e4b42dc95811b072cd7df734e1e5566151100d3d0e4c71af128b24534dcbca161dac893"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x20, 0x15, 0x2c, "737a0097f0f9435a551ebd84048677586597bc055394bffe3f9fc8b493a1bcf2699c3b252df418026fc60ce7"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000009c0)={0x0, 0x8, 0x1}, &(0x7f0000000a00)={0x20, 0x80, 0x1c, {0xe597, 0x1, 0x400, 0xf801, 0x20, 0x9, 0x52e, 0x7, 0x8, 0x9, 0x1ff, 0xe72}}, &(0x7f0000000a40)={0x20, 0x85, 0x4, 0x264882c5}, &(0x7f0000000a80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ac0)={0x20, 0x87, 0x2}, &(0x7f0000000b00)={0x20, 0x89, 0x2}}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000280)={0x5}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x1f, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "66ba"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x7ff, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x40, 0x5, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3f, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x310, 0x5, 0x3f, 0x80, 0x70, 0x8}, 0x19, &(0x7f0000000d80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "df99b9c6c76f4dcaf2bf50f381db2e46"}]}, 0x2, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x42d}}, {0x71, &(0x7f0000000e00)=@string={0x71, 0x3, "23ada930a7d489514f8e812e04b097fc8c084ad53f276cbafd44c19c580eee050d18314bf5d8337fe92161a37a23acf33123e67b5386e354d47115788735b676135f2ddeebff2415db37a1ead4a41624ebd62e1e7010e904f1096443a3cff0bf54552aaed8d0352bb38d3ac0f809e8"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000fc0)={0x14, &(0x7f0000000ec0)={0x0, 0x11, 0x8d, {0x8d, 0x4, "fd024a51baa6e56ba22ba53ac481662dbb7ce4267fe1b3e4667c69a8a06b7b548e51a757976ddb7707ec7ded8aac819e773a5dc0115571e1dc0212fa09ecb87f6f264cb37a1a512fa127fd835d588249526dccd8903b56812429d39f79c138b74d4c9f13c561a740b60ead41ab84572fda4731a052975b8886fc95351dc9c845d900aa20536c3a7a0a60e5"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000012c0)={0x44, &(0x7f0000001000)={0x40, 0x14, 0xe3, "26afe74d66518688c50368723fc1c3c433a6d683a32a37a406a253766ac61013b2462bdb2baa8eeffb3bcb37befff045e6a7a617b5f0a64370116ef9f45d784db74cfa59d8bad7041003f66b0fee26c4acde8fecea9f546424d5ec3fb8e8c64b1ffed45e4dcd3b237890a44991465e96a28c09bed321ded063d01aed222316d25db342eaa2e485f1941986f19b6f7e5121c51b670334f82548c157190de7733fca67a0b32f3a656572d9f9cc5a682f36d36fc88bb245fdf6096ad217defeab97bdbbe9b4dfdbbdf2123a6ac4036b6b1308a5fa6051578f2c419bbbb2acc0854a2cbd54"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001180)={0x20, 0x80, 0x1c, {0x3, 0x7fff, 0x100, 0x6a, 0x8, 0x4, 0x81, 0x1, 0x2, 0x20, 0x0, 0x1000}}, &(0x7f00000011c0)={0x20, 0x85, 0x4, 0xfffffffc}, &(0x7f0000001200)={0x20, 0x83, 0x2}, &(0x7f0000001240)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000001280)={0x20, 0x89, 0x2}}) 17:03:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4, 0x400000) 17:03:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x400000) 17:03:25 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5451, 0x750000) 17:03:25 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001b0c8e3138320565edda316566bea9cb505240000000d240f0100000000000000000006241a000000090581033be7443a5c00000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) [ 3451.190914][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3451.198290][T19845] cdc_ncm 3-1:1.1: bind() failure [ 3451.234624][T19845] usb 3-1: USB disconnect, device number 24 [ 3451.320970][T22222] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3451.400824][T20054] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3451.560723][T22222] usb 1-1: Using ep0 maxpacket: 8 [ 3451.671255][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3451.684380][T22222] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 3451.695328][T22222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3451.707302][T22222] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3451.801108][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3451.813036][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3451.829672][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3451.841952][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3451.853040][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3451.863198][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3451.881427][T22222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3451.890472][T22222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3451.905324][T22222] usb 1-1: Product: syz [ 3451.909603][T22222] usb 1-1: Manufacturer: syz [ 3451.921431][T22222] usb 1-1: SerialNumber: syz [ 3451.961998][T22222] cdc_ncm 1-1:1.0: bind() failure [ 3451.973985][T23339] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3452.051048][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3452.060151][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.069829][T20054] usb 2-1: Product: syz [ 3452.074099][T20054] usb 2-1: Manufacturer: syz [ 3452.079966][T20054] usb 2-1: SerialNumber: syz [ 3452.191662][T22222] usb 1-1: USB disconnect, device number 117 [ 3452.241178][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3452.329009][ T7196] udc-core: couldn't find an available UDC or it's busy [ 3452.336008][ T7196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3452.362734][ T7196] udc-core: couldn't find an available UDC or it's busy [ 3452.369691][ T7196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3452.382023][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3452.395161][ T7196] udc-core: couldn't find an available UDC or it's busy [ 3452.402324][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3452.412246][ T7196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3452.420122][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3452.430131][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3452.440097][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3452.470788][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3452.479623][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3452.490628][T20054] usb 2-1: USB disconnect, device number 114 [ 3452.620923][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3452.629983][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.645770][T23339] usb 3-1: Product: syz [ 3452.653886][T23339] usb 3-1: Manufacturer: syz [ 3452.658471][T23339] usb 3-1: SerialNumber: syz 17:03:27 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5452, 0x750000) 17:03:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x400000) 17:03:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5, 0x400000) 17:03:27 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000008250550a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x3f, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x81, 0x400, 0xb6}, {0x6, 0x24, 0x1a, 0x772a, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0xf70a0d9b47a38942, 0x2}, @acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xce, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3f, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0xf8, 0x40}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x9, 0x4, 0x72, 0x20, 0x6}, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="050026000100c3b2c4f84ac8df3b0414d2bfe4fc56fa9f4d15dcb0c887f16b5533bc22f79640917336eac33387d0f665b6bf8dfa4257d48fa8dc0ec1aeeb744fd4be6b5901d39c96a6a80e9c58f646d79616e955fbb59c8328a30accba2eec81154a39d96862ca9bff6b413094f816bf4144fdbe828c172ceeb3b87d7b6f21314dbccfa6dd8f0258903f8954ce94e3e2e4ff6c06"], 0x2, [{0x5b, &(0x7f0000000180)=@string={0x5b, 0x3, "bbf1e9901a144c8506144ce1fd9e4dc14618f7b835c4c85c0b860fd90632a4537f90803c26dfa19670348580ced813b07d9d8bb6e56dd2ac7b0e59330f1f4c91cc19d774839e46f82f356375f3735e3a23e073301e5cd99923"}}, {0xb, &(0x7f0000000200)=@string={0xb, 0x3, "b06edebc98a31dfc55"}}]}) 17:03:27 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001b0c8e3138320565edda316566bea9cb505240000000d240f0100000000000000000006241a000000090581033be7443a5c00000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) [ 3452.890901][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3452.917557][T23339] cdc_ncm 3-1:1.1: bind() failure 17:03:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x6, 0x400000) [ 3452.973000][ T7253] udc-core: couldn't find an available UDC or it's busy [ 3452.980986][T23339] usb 3-1: USB disconnect, device number 25 [ 3453.009297][ T7253] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 17:03:27 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5460, 0x750000) 17:03:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5451, 0x400000) 17:03:28 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x52a}, {0x6, 0x24, 0x1a, 0x0, 0xd}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0xf}}}}}}}]}}, 0x0) 17:03:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x6364, 0x750000) [ 3453.200612][T13035] usb 1-1: new high-speed USB device number 118 using dummy_hcd 17:03:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x7, 0x400000) 17:03:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5452, 0x400000) 17:03:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8913, 0x750000) 17:03:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5460, 0x400000) 17:03:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8, 0x400000) [ 3453.400821][T23339] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3453.460779][T13035] usb 1-1: Using ep0 maxpacket: 8 [ 3453.580618][T13035] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 3453.591104][T13035] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3453.600118][T13035] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3453.680605][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3453.731922][T22222] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3453.771209][T13035] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3453.781126][T13035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3453.789118][T13035] usb 1-1: Product: syz [ 3453.796251][T13035] usb 1-1: Manufacturer: syz [ 3453.802650][T13035] usb 1-1: SerialNumber: syz [ 3453.811482][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3453.841728][T13035] cdc_ncm 1-1:1.0: bind() failure [ 3453.850677][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3453.860438][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3453.885747][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3453.900173][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3453.914240][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3453.930948][T22222] usb 2-1: device descriptor read/64, error 18 [ 3454.069728][T20054] usb 1-1: USB disconnect, device number 118 [ 3454.091149][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a450, bcdDevice= 0.40 [ 3454.100219][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.110457][T23339] usb 3-1: Product: syz [ 3454.124200][T23339] usb 3-1: Manufacturer: syz [ 3454.128822][T23339] usb 3-1: SerialNumber: syz [ 3454.208559][T22222] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3454.400599][T22222] usb 2-1: device descriptor read/64, error 18 [ 3454.414477][ T7257] udc-core: couldn't find an available UDC or it's busy [ 3454.421617][ T7257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3454.460672][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3454.468250][T23339] cdc_ncm 3-1:1.1: bind() failure [ 3454.495802][T23339] usb 3-1: USB disconnect, device number 26 [ 3454.530295][T22222] usb usb2-port1: attempt power cycle [ 3455.210612][T23339] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3455.240458][T22222] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3455.330565][T22222] usb 2-1: Invalid ep0 maxpacket: 72 [ 3455.460422][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3455.482711][T22222] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3455.580777][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3455.591809][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3455.601020][T22222] usb 2-1: Invalid ep0 maxpacket: 72 [ 3455.601959][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3455.613335][T22222] usb usb2-port1: unable to enumerate USB device [ 3455.616875][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3455.633880][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3455.643993][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3455.810532][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a450, bcdDevice= 0.40 [ 3455.819598][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.830496][T23339] usb 3-1: Product: syz [ 3455.836117][T23339] usb 3-1: Manufacturer: syz [ 3455.842575][T23339] usb 3-1: SerialNumber: syz 17:03:30 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a020000090581030000e4ffff0804010000020d07000904e707a253ad01010202110000090582020000000000090503020000000200"], 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa51, 0x4, 0x4, 0x7, 0x5, 0x100, 0x7fffffff, 0x1}, &(0x7f0000000200)={0x1f, 0x6, 0x2, 0x100, 0x2, 0x40, 0x9, 0x1}, &(0x7f0000000240)={0xfff, 0x401, 0xef6, 0x7, 0x7, 0x2, 0x5eb, 0x5}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0xfffffffffffff0ff]}, 0x8}) r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="afafc370296c9f3f86f34c8d716bd152d6f952231ec0790701562305213649b0e7bd5b4273eac98059e2dc9190609c66dc017bee08474858bd0a1b6a89a46f8a35ffea827edea85a7dcc283080eca451cd3a59242e883f051b574f86ade6cc331b0e16a95bfdc463fdb938f1546b6a42592dff23d5cbc5e11e60f11c8ae0f72686072e03758aa13518236557865256740dc89ee3b2a4c11c922634196b98b0b67460432d7c5520179a1a140c9c08823294b32b9c83d3a51916796c86871a960451ff7db483937f", 0xc7, 0x1, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) write$dsp(r0, &(0x7f0000000540)="86be3c9c5d49241cb47a110453298683488131d39e18ad93c9744e3b1fb62980ec72e580384b2eede6af54c5839c491401ba962419197e56693b698636eaf0e03f8d6629cc1bdcd182b550f652aaf809a39e5c549512c0d87bb5da61f390e8de57b25ea114f87f1ae78ad737867e80934d2ea78734fd807a0a6e", 0x7a) waitid(0x0, 0xffffffffffffffff, &(0x7f00000003c0), 0x2, &(0x7f0000000440)) sendmsg$can_j1939(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x4}, 0xfd}, 0x18, &(0x7f0000000640)={&(0x7f0000000080)="e20299be6ea50801b80f81918652185daa7d36bf2bf71a33e4dbc4f0c204cda8d71c6e34b3e10564f3", 0x29}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000) 17:03:30 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8914, 0x750000) 17:03:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x10, 0x400000) 17:03:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x6364, 0x400000) 17:03:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001b0c8e3138320565edda316566bea9cb505240000000d240f0100000000000000000006241a000000090581033be7443a5c00000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) [ 3455.980546][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3456.008099][T23339] cdc_ncm 3-1:1.1: bind() failure [ 3456.065534][T23339] usb 3-1: USB disconnect, device number 27 17:03:31 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000082505a1a440c8d70f9a0109025c0002010000000904000001020d0000052406000105240000000c240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d10000905820200000000000905030200000000004701cd1ce0f9b35f7cedaf010b3ef088d43a3858fe049b4c499f75f482595c44d034e3fc9261c96c9821b6c58cd19ce52cda46"], 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfe, 0x88402) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) 17:03:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4c01, 0x400000) 17:03:31 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8913, 0x400000) 17:03:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8933, 0x750000) 17:03:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400448c9, 0x750000) 17:03:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x541b, 0x400000) [ 3456.310424][T22222] usb 1-1: new high-speed USB device number 119 using dummy_hcd 17:03:31 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8914, 0x400000) [ 3456.490559][T23339] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3456.600392][T22222] usb 1-1: Using ep0 maxpacket: 8 [ 3456.690348][T20054] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 3456.731182][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3456.761047][T22222] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 3456.771378][T22222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3456.788440][T22222] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3456.850812][T23339] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 3456.859707][T23339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3456.871419][T23339] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3456.881463][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 228, changing to 11 [ 3456.894460][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3456.930451][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3456.980489][T22222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3456.989565][T22222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3457.000672][T22222] usb 1-1: Product: syz [ 3457.005543][T22222] usb 1-1: Manufacturer: syz [ 3457.010205][T22222] usb 1-1: SerialNumber: syz [ 3457.051045][T20054] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3457.062236][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3457.072116][T22222] cdc_ncm 1-1:1.0: bind() failure [ 3457.079668][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3457.087789][T20054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3457.105052][T23339] usb 3-1: Product: syz [ 3457.109259][T23339] usb 3-1: Manufacturer: syz [ 3457.116709][T20054] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3457.138132][T23339] usb 3-1: SerialNumber: syz [ 3457.181654][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3457.293879][T13035] usb 1-1: USB disconnect, device number 119 [ 3457.302001][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=c8.40 [ 3457.330361][T20054] usb 2-1: New USB device strings: Mfr=215, Product=15, SerialNumber=154 [ 3457.346978][T20054] usb 2-1: Product: syz [ 3457.354875][T20054] usb 2-1: Manufacturer: syz [ 3457.361160][T20054] usb 2-1: SerialNumber: syz [ 3457.388262][T19845] usb 3-1: USB disconnect, device number 28 [ 3457.411659][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3457.628291][T20054] usb 2-1: USB disconnect, device number 119 [ 3458.190266][T19845] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3458.400327][T20054] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 3458.430225][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3458.570293][T19845] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 3458.579319][T19845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3458.593015][T19845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3458.602091][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 228, changing to 11 [ 3458.613342][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3458.650944][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3458.770629][T20054] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3458.780746][T20054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3458.789606][T20054] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3458.801120][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3458.818593][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.828528][T19845] usb 3-1: Product: syz [ 3458.836734][T19845] usb 3-1: Manufacturer: syz [ 3458.843808][T19845] usb 3-1: SerialNumber: syz [ 3458.906039][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3458.970425][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=c8.40 [ 3458.979520][T20054] usb 2-1: New USB device strings: Mfr=215, Product=15, SerialNumber=154 [ 3458.991225][T20054] usb 2-1: Product: syz [ 3458.996826][T20054] usb 2-1: Manufacturer: syz [ 3459.002495][T20054] usb 2-1: SerialNumber: syz 17:03:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400448dd, 0x750000) 17:03:33 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8921, 0x400000) 17:03:33 executing program 0: 17:03:33 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x30, 0x1}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0xfffffffe}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8}) syz_usb_connect$cdc_ncm(0x0, 0x1bc, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1aa, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "0e402cc7c29a"}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x4, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x7f, 0x7, 0x3f}, @mdlm_detail={0x45, 0x24, 0x13, 0x3, "05e0ecc2ce6554b3b1c1a691cc63df20f5e73ca67b02db5212e35b831d2f91258a5868b3bb3299232fa00bd4c01dce57ba860f3fa880e37fa462f6958444eca683"}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x800, [0x1, 0x62b2]}, @country_functional={0x8, 0x24, 0x7, 0x8, 0xff, [0x6]}, @mdlm_detail={0xe5, 0x24, 0x13, 0x3f, "3fdd07be58a5bcb44af0ecba64ea73285ea35932b1a17da28d820a3dd88dbd6ceccc83691c8915c1df25f5e7e70645aa614b058a09d7c14960e2f02dc23a2262607869d7dfe3e70542c03384360223867a727d380b64d1796460ac1d85d08fd79b37d09e1bddf0f63f2e584fc55fc6938c37c7d0182400aa752d592dfa2f95f826285a6481ab19392c44ae39609a608c0b75620a960b6951c8fbc436c66d62d4afaad508a8605adf217f32296cf1194516649817226d62d79eb828bdbd936ae1be6910da4c8c496271ec124d9e72c12479f7e010a24643f25ae4ce12bcc4032fc3"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfd, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf8}}}}}}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c4}, 0x4000800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r3, 0x2, 0x70bd2d, 0x6, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4821}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x793}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x402000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000004c0)={0x9, 0x0}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000500)={0x9, r5}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000600)={0xf00, 0x1e0, 0x690, 0x1000, 0xf9, 0x3, 0x1, 0x2, {0xffffffff, 0xfffffe01}, {0x9, 0x3, 0x1}, {0xfffffff7, 0x5}, {0x5, 0x101}, 0x3, 0x80, 0x7ff, 0x8, 0x1, 0x1, 0x8, 0x7, 0x7ff, 0x5, 0x6, 0x0, 0x22, 0x200, 0x0, 0x6}) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r4, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4004040) [ 3459.051805][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3459.060019][T10961] usb 3-1: USB disconnect, device number 29 17:03:34 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010c00020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/156, 0x9c) 17:03:34 executing program 0: [ 3459.276118][T19845] usb 2-1: USB disconnect, device number 120 17:03:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5450, 0x400000) 17:03:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400454ca, 0x750000) 17:03:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8933, 0x400000) 17:03:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40049409, 0x750000) 17:03:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5451, 0x400000) 17:03:34 executing program 0: 17:03:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400448c9, 0x400000) 17:03:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400448dd, 0x400000) 17:03:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5452, 0x400000) [ 3459.690239][T10961] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3459.790186][T19845] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 3459.952432][T10961] usb 3-1: Using ep0 maxpacket: 8 [ 3460.041123][T19845] usb 2-1: Using ep0 maxpacket: 8 [ 3460.090342][T10961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3460.101498][T10961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3460.120087][T10961] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3460.134952][T10961] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3460.147564][T10961] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3460.160598][T10961] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3460.210414][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3460.221404][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3460.240630][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3460.250444][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3460.261504][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3460.272133][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3460.360585][T10961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3460.369653][T10961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.386453][T10961] usb 3-1: Product: syz [ 3460.393388][T10961] usb 3-1: Manufacturer: syz [ 3460.397970][T10961] usb 3-1: SerialNumber: syz [ 3460.461418][T10961] cdc_ncm 3-1:1.0: bind() failure [ 3460.469235][T19845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3460.492470][T10961] cdc_ncm 3-1:1.1: bind() failure [ 3460.499927][T19845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3460.518640][T19845] usb 2-1: Product: syz [ 3460.527652][T19845] usb 2-1: Manufacturer: syz [ 3460.540888][T19845] usb 2-1: SerialNumber: syz [ 3460.695058][T23339] usb 3-1: USB disconnect, device number 30 [ 3460.830218][T19845] cdc_ncm 2-1:1.0: bind() failure [ 3460.842108][T19845] cdc_ncm 2-1:1.1: bind() failure [ 3460.851350][T19845] usb 2-1: USB disconnect, device number 121 17:03:36 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 3461.560314][T23339] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 3461.670009][T20054] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3461.800064][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3461.909998][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3461.924478][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3461.935425][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3461.951438][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3461.964139][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3461.982631][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3461.993877][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3462.030104][T20054] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3462.090026][T20054] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3462.097671][T20054] usb 3-1: can't read configurations, error -71 [ 3462.160101][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3462.169333][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3462.180338][T23339] usb 2-1: Product: syz [ 3462.185024][T23339] usb 2-1: Manufacturer: syz [ 3462.190453][T23339] usb 2-1: SerialNumber: syz 17:03:37 executing program 1: prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x5}}}}}}}]}}, 0x0) 17:03:37 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 17:03:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40186366, 0x750000) 17:03:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5460, 0x400000) 17:03:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400454ca, 0x400000) [ 3462.430071][T23339] cdc_ncm 2-1:1.0: bind() failure [ 3462.449155][T23339] cdc_ncm 2-1:1.1: bind() failure [ 3462.504237][T23339] usb 2-1: USB disconnect, device number 122 17:03:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4020940d, 0x750000) 17:03:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40049409, 0x400000) 17:03:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x6364, 0x400000) 17:03:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x80086301, 0x750000) 17:03:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40186366, 0x400000) 17:03:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8913, 0x400000) [ 3462.910016][T23339] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3462.989990][T20054] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3463.150017][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3463.230138][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3463.270145][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3463.281368][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3463.291190][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3463.301937][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 17:03:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4020940d, 0x400000) [ 3463.329871][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3463.360005][T20054] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3463.430099][T20054] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3463.437667][T20054] usb 3-1: can't read configurations, error -71 [ 3463.445639][T20054] usb usb3-port1: attempt power cycle [ 3463.490029][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3463.499065][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3463.510523][T23339] usb 2-1: Product: syz [ 3463.515191][T23339] usb 2-1: Manufacturer: syz [ 3463.520153][T23339] usb 2-1: SerialNumber: syz [ 3463.810071][T23339] cdc_ncm 2-1:1.0: bind() failure [ 3463.817960][T23339] cdc_ncm 2-1:1.1: bind() failure [ 3463.840799][T23339] usb 2-1: USB disconnect, device number 123 17:03:39 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x44}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x40}}}}}}}]}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xfff, 0x5}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3, 0x3, {0xa, 0x4e21, 0x80000001, @empty, 0x5}}}, 0x3a) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x8d51a647e4dc9682}, "8a80e3234fa0fd2b", "55bcf639f3ae97184a9ad4cc2ea22cb24011016293d967cd773b328252d3ac2c", "37deaeb9", "364f086e6d6328fb"}, 0x38) 17:03:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0045878, 0x750000) 17:03:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8914, 0x400000) 17:03:39 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 17:03:39 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440db000000000000000002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030000000000090401000002c6119195b8aa49c971eb470d00000904010102020d000009058202000004"], 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100001c, 0x20810, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000001, 0x4600) 17:03:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x80086301, 0x400000) 17:03:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x8933, 0x400000) 17:03:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0045878, 0x400000) 17:03:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0045878, 0x750000) 17:03:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0045878, 0x400000) 17:03:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400448c9, 0x400000) 17:03:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0189436, 0x750000) [ 3464.660008][T23339] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3464.681032][T20054] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3464.770023][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3464.809908][T20054] usb 3-1: no configurations [ 3464.814591][T20054] usb 3-1: can't read configurations, error -22 [ 3464.909807][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3464.969952][T20054] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3465.029833][T23339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3465.040963][T23339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3465.057149][T23339] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3465.070450][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3465.111490][T20054] usb 3-1: no configurations [ 3465.116258][T20054] usb 3-1: can't read configurations, error -22 [ 3465.128058][T20054] usb usb3-port1: unable to enumerate USB device [ 3465.230800][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3465.239954][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3465.248333][T23339] usb 2-1: Product: syz [ 3465.260931][T23339] usb 2-1: Manufacturer: syz [ 3465.265540][T23339] usb 2-1: SerialNumber: syz [ 3465.310970][T23339] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 3465.317600][T23339] cdc_ncm 2-1:1.0: bind() failure [ 3465.514727][T23339] usb 2-1: USB disconnect, device number 124 [ 3466.289771][T22222] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3466.529742][T22222] usb 2-1: Using ep0 maxpacket: 8 [ 3466.660374][T22222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3466.670620][T22222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3466.682810][T22222] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3466.869755][T22222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3466.878917][T22222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3466.891429][T22222] usb 2-1: Product: syz [ 3466.895604][T22222] usb 2-1: Manufacturer: syz [ 3466.900372][T22222] usb 2-1: SerialNumber: syz [ 3466.960911][T22222] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 3466.967567][T22222] cdc_ncm 2-1:1.0: bind() failure 17:03:42 executing program 1: prctl$PR_SET_TIMERSLACK(0x1d, 0xffff) syz_usb_connect$cdc_ncm(0x4, 0x6f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'T'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x2}}}}}}}]}}, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x82, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000007c0)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) 17:03:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400448dd, 0x400000) 17:03:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0189436, 0x400000) 17:03:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc020660b, 0x750000) [ 3467.161824][T22222] usb 2-1: USB disconnect, device number 125 17:03:42 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000271e065a73002bb22cdaf8b6f2136a383d39cd969d8f860c385d23ce2b5578eab18f06cc858fef546aa18e52ca941d4f206cfccba18c8bda4b804f165425b797e83294e258042bfe730fcf4db9e2e76f2b3af201801c7ce4868da0ca3e12727b9603317b4b1e7ea56bf914bd936c987c6705cba8c5f5f1"], 0x0) 17:03:42 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 17:03:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x400454ca, 0x400000) 17:03:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750002) 17:03:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc020660b, 0x400000) 17:03:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40049409, 0x400000) 17:03:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750003) 17:03:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400002) 17:03:42 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750004) 17:03:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40186366, 0x400000) 17:03:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400003) 17:03:42 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12eeffff010000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000040d00000904010102020d0000090582020000000000090503020000000000"], 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x430980, 0x0) connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000801) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000000)) [ 3467.809652][T20054] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3468.049678][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3468.189740][ T9774] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3468.198257][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3468.209241][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3468.222567][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3468.233577][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3468.243745][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3468.254710][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3468.420060][ T9774] usb 2-1: device descriptor read/64, error 18 [ 3468.460055][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3468.469152][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3468.480346][T20054] usb 3-1: Product: syz [ 3468.484943][T20054] usb 3-1: Manufacturer: syz [ 3468.489801][T20054] usb 3-1: SerialNumber: syz [ 3468.689758][ T9774] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3468.789693][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3468.797278][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3468.809089][T20054] usb 3-1: USB disconnect, device number 35 [ 3468.899501][ T9774] usb 2-1: device descriptor read/64, error 18 [ 3469.019663][ T9774] usb usb2-port1: attempt power cycle [ 3469.529493][T20054] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3469.729529][ T9774] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3469.769595][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3469.890159][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3469.901307][ T9774] usb 2-1: device descriptor read/8, error -61 [ 3469.907512][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3469.920300][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3469.930442][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3469.940782][T20054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3469.950841][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3470.120390][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3470.129648][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3470.137721][T20054] usb 3-1: Product: syz [ 3470.141965][T20054] usb 3-1: Manufacturer: syz [ 3470.149238][T20054] usb 3-1: SerialNumber: syz [ 3470.171907][ T9774] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3470.350007][ T9774] usb 2-1: device descriptor read/8, error -61 17:03:45 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202008c27c4b887231a9e0000000000"], 0x0) 17:03:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x4020940d, 0x400000) 17:03:45 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400004) 17:03:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750005) 17:03:45 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) [ 3470.429672][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3470.456629][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3470.469839][ T9774] usb usb2-port1: unable to enumerate USB device [ 3470.513116][T20054] usb 3-1: USB disconnect, device number 36 17:03:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x80086301, 0x400000) 17:03:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750006) 17:03:45 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400005) 17:03:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750007) 17:03:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0045878, 0x400000) 17:03:45 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400006) [ 3470.799438][T19845] usb 1-1: new high-speed USB device number 120 using dummy_hcd 17:03:45 executing program 1: syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x137, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x2, 0x1, 0x6, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xf75}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x0, 0x1f}, {0x6, 0x24, 0x1a, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xff00, 0xff, 0xfff9}, @dmm={0x7, 0x24, 0x14, 0xfd7e, 0x2}, @mdlm_detail={0xa8, 0x24, 0x13, 0x0, "339bc5c927489f57cbfd6ad8a1f05a96f31f44c5b2d4dffdf1637e2d578561193ac3657c9f6e1d629dc8c565f5ebf3772717c35cde003c411b9d85f5998c200c811376e0526ba60df69727688891d4f47a0392a9396581c5e129ab48e85daf3dec7286f58fc5a810da683f95f9f80144908a3aee9862235e7550bf9add923ea80e3b5a85b7c86c958376fa89827fa724a66febfeb297f2d7c4e6a803ee59e844fb9d6432"}, @obex={0x5, 0x24, 0x15, 0x3f}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x68, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x40, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x81, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0xda41608d680e23d5, 0x3, 0x1, 0xe1}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x6, 0x5, 0x7f, 0x10, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x740b}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "23c0f1195dda17c47bf1c7b177830107dc10e3b689a201f68a9f58fe22559947c675a7973c2e4687caa4cf0ae49f45ef5d9acd94c2d11df3d8"}}, {0x46, &(0x7f0000000240)=@string={0x46, 0x3, "a8667357817c6b587943243494b760e614bcb4e13bb21624018aec97dc620af7d5362bda8177b25f09b7964d2eb73438652d8c2a7cf2e6efec950b830ea1a0e3b1a71747"}}, {0xf1, &(0x7f00000002c0)=@string={0xf1, 0x3, "ea16c00fa7ed7afa2839783eab632b574abe04bc4373bdfd96258db5a104d9410338ae1a6112703f01e8f0d4db32ce7d189c6e2b07aa43d9eb5f0a16a4d71b3c265defa2efc578bbc7c2ecdde9bae129a1a3070727e286f7a41f8eff26a02265f2255d6173f10a97376d1c90d8c7ffca1e04b0620204bdd041290c262e9d0a2cf9edc5234cb823459b6764a450e734c49081540d8cb090a744a942ab5dea2467ca1ed33fb0ca1fc072e8b6cf3d8b5b730c399f83ccfc471e7346e2fbe7ce8537999347abd43e54d10d5c5f4af8a3821cd6212570d6d2fe6c095541014734299be1dd583de959a21e3dbebdaf76f2b6"}}, {0x81, &(0x7f00000003c0)=@string={0x81, 0x3, "f4995ee4ad15ead9bade5976e124d12b1f7b082346a0104992829069848379e46d1c3e399505ccb6e6ba9f86dc01867051c6eab88719a434d94874c53fb5cfa0f226f91943f042d918d7cf32b0e0c284238445c621ec91e37e1ae53035fc63e8c9b92b96c74975097f3a6fb62e5e4c0cf8926c8e58e2d0d670689bd3a789de"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "ac6ad2fffd254d0bd549536b8e2fa4dfec9568cce332b15a3ad262c919f32b9209f37366cb7c4ce88c90b242c1774b4074c7b6663703dbfd6de5dd940babdedb062144e262469726a4230ed60b7d6187076d3b27a70d382f74aef4ce4e78a7d3bb4798c7e8d7e759d4"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x300a}}]}) [ 3470.909526][T20054] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3471.029430][T19845] usb 1-1: device descriptor read/64, error 18 [ 3471.179415][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3471.299466][T19845] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 3471.329469][T20054] usb 3-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 3471.339440][T22222] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3471.346224][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3471.358752][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3471.375034][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3471.385146][T20054] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3471.489398][T19845] usb 1-1: device descriptor read/64, error 18 [ 3471.529423][T22222] usb 2-1: device descriptor read/64, error 18 [ 3471.560089][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3471.569130][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.585462][T20054] usb 3-1: Product: syz [ 3471.595907][T20054] usb 3-1: Manufacturer: syz [ 3471.600637][T20054] usb 3-1: SerialNumber: syz [ 3471.614647][T19845] usb usb1-port1: attempt power cycle [ 3471.799459][T22222] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3471.889459][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3471.903262][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3471.917082][T20054] usb 3-1: USB disconnect, device number 37 [ 3471.989332][T22222] usb 2-1: device descriptor read/64, error 18 [ 3472.110650][T22222] usb usb2-port1: attempt power cycle [ 3472.329384][T19845] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 3472.499707][T19845] usb 1-1: device descriptor read/8, error -61 [ 3472.659396][T20054] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3472.770726][T19845] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 3472.819401][T22222] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3472.899306][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3472.959525][T19845] usb 1-1: device descriptor read/8, error -61 [ 3473.019311][T20054] usb 3-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 3473.019352][T22222] usb 2-1: device descriptor read/8, error -61 [ 3473.031261][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3473.056029][T20054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3473.068594][T20054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3473.083417][T20054] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3473.089509][T19845] usb usb1-port1: unable to enumerate USB device [ 3473.259326][T20054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3473.268396][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3473.279701][T20054] usb 3-1: Product: syz [ 3473.284781][T20054] usb 3-1: Manufacturer: syz [ 3473.289595][T20054] usb 3-1: SerialNumber: syz [ 3473.311407][T22222] usb 2-1: new high-speed USB device number 7 using dummy_hcd 17:03:48 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000200000825f3a1a440000102030109025c000201002713cd158b07243b2001503583b3361c3d0f0100000000000000000006241a0100000905810300200000000904010000020d00000904010102020d000009058202000000790000000000000000000055db04775d044378174766510be64a17380f4882c00a0c88e922c75dfb0048c1dea64bc2a16b74a2c2477b07005c4d0a6877184fb98cf8aaf9f079e5a716eb91b27804a9b1a8fa5596589083b65a335c9a8f4fbf25"], 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f0000000000)=@ret_unlink={{0x4, 0x1, 0x0, 0x1, 0x1000}}, 0x30) 17:03:48 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750008) 17:03:48 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400007) 17:03:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0045878, 0x400000) 17:03:48 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) [ 3473.499460][T20054] cdc_ncm 3-1:1.0: bind() failure [ 3473.512828][T22222] usb 2-1: device descriptor read/8, error -61 [ 3473.525820][T20054] cdc_ncm 3-1:1.1: bind() failure [ 3473.574879][T20054] usb 3-1: USB disconnect, device number 38 17:03:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc0189436, 0x400000) 17:03:48 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750300) 17:03:48 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400008) [ 3473.661230][T22222] usb usb2-port1: unable to enumerate USB device 17:03:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0xc020660b, 0x400000) 17:03:48 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750500) 17:03:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400002) 17:03:48 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902750002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00000905820200000000000905030200000000006bf21fcd580f6bbe991bc2799636a4e198e41cb5f38b5179b87400aa0c7b6b763762cbc0f228ddb564e98fbbf698188a942deb56bf023570e7fbbc39471a"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x500, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) connect$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0xfff, @empty, 0x3f, 0x1}, 0x20) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/87, 0x57) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x7, 0x1}) [ 3473.989188][T23339] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3474.039521][T20054] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3474.179232][T23339] usb 1-1: device descriptor read/64, error 18 [ 3474.279214][T20054] usb 3-1: Using ep0 maxpacket: 8 [ 3474.399271][T20054] usb 3-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 3474.409597][T20054] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3474.419284][T19845] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 3474.449393][T23339] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 3474.569820][T20054] usb 3-1: New USB device found, idVendor=f325, idProduct=a4a1, bcdDevice= 0.40 [ 3474.578876][T20054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3474.595717][T20054] usb 3-1: Product: syz [ 3474.601254][T20054] usb 3-1: Manufacturer: syz [ 3474.605837][T20054] usb 3-1: SerialNumber: syz [ 3474.649253][T23339] usb 1-1: device descriptor read/64, error 18 [ 3474.679196][T19845] usb 2-1: Using ep0 maxpacket: 8 [ 3474.769298][T23339] usb usb1-port1: attempt power cycle [ 3474.829784][T19845] usb 2-1: config index 0 descriptor too short (expected 117, got 92) [ 3474.837985][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3474.851726][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3474.861799][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3474.888972][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3474.901819][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3474.913119][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3474.924806][T13035] usb 3-1: USB disconnect, device number 39 [ 3475.099802][T19845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3475.108861][T19845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3475.118437][T19845] usb 2-1: Product: syz [ 3475.122767][T19845] usb 2-1: Manufacturer: syz [ 3475.127359][T19845] usb 2-1: SerialNumber: syz [ 3475.429335][T19845] cdc_ncm 2-1:1.0: bind() failure [ 3475.438354][T19845] cdc_ncm 2-1:1.1: bind() failure [ 3475.464177][T19845] usb 2-1: USB disconnect, device number 8 [ 3475.485473][T23339] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 3475.649289][ T9774] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3475.669817][T23339] usb 1-1: device descriptor read/8, error -61 [ 3475.889050][ T9774] usb 3-1: Using ep0 maxpacket: 8 [ 3475.939136][T23339] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3476.009126][ T9774] usb 3-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 3476.019435][ T9774] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3476.120087][T23339] usb 1-1: device descriptor read/8, error -61 [ 3476.181322][ T9774] usb 3-1: New USB device found, idVendor=f325, idProduct=a4a1, bcdDevice= 0.40 [ 3476.190402][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3476.198374][ T9774] usb 3-1: Product: syz [ 3476.199032][T19845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3476.220387][ T9774] usb 3-1: Manufacturer: syz [ 3476.226181][ T9774] usb 3-1: SerialNumber: syz [ 3476.248565][T23339] usb usb1-port1: unable to enumerate USB device 17:03:51 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) [ 3476.479055][T19845] usb 2-1: Using ep0 maxpacket: 8 [ 3476.484737][T13035] usb 3-1: USB disconnect, device number 40 17:03:51 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400300) 17:03:51 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750600) 17:03:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400003) 17:03:51 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) 17:03:51 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750700) [ 3476.619662][T19845] usb 2-1: config index 0 descriptor too short (expected 117, got 92) [ 3476.627887][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 17:03:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400004) 17:03:51 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400500) [ 3476.682517][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3476.739107][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3476.748862][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 17:03:51 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400005) 17:03:51 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x75ff00) [ 3476.799335][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3476.826096][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:03:51 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400600) 17:03:51 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}}}}}]}}, 0x0) [ 3477.079161][T13035] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3477.119067][T19845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3477.128823][T19845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3477.140121][T22222] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3477.177018][T19845] usb 2-1: can't set config #1, error -71 [ 3477.185333][T19845] usb 2-1: USB disconnect, device number 9 [ 3477.339019][T13035] usb 3-1: Using ep0 maxpacket: 8 [ 3477.344195][T22222] usb 1-1: device descriptor read/64, error 18 [ 3477.479209][T13035] usb 3-1: config 1 has an invalid descriptor of length 26, skipping remainder of the config [ 3477.489856][T13035] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3477.506989][T13035] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3477.520593][T13035] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3477.535610][T13035] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3477.569091][T19845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3477.620305][T22222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3477.739686][T13035] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3477.748732][T13035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3477.759705][T13035] usb 3-1: Product: syz [ 3477.764326][T13035] usb 3-1: Manufacturer: syz [ 3477.769230][T13035] usb 3-1: SerialNumber: syz [ 3477.810065][T13035] cdc_ncm 3-1:1.0: skipping garbage [ 3477.815307][T13035] cdc_ncm 3-1:1.0: bind() failure [ 3477.820777][T19845] usb 2-1: Using ep0 maxpacket: 8 [ 3477.825906][T22222] usb 1-1: device descriptor read/64, error 18 [ 3477.854566][T13035] cdc_ncm 3-1:1.1: bind() failure [ 3477.959534][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3477.970920][T22222] usb usb1-port1: attempt power cycle [ 3477.976403][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3477.989249][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3477.999223][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3478.009131][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3478.027397][T23339] usb 3-1: USB disconnect, device number 41 [ 3478.038933][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3478.238999][T19845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3478.253610][T19845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3478.266885][T19845] usb 2-1: Product: syz [ 3478.274953][T19845] usb 2-1: Manufacturer: syz [ 3478.283072][T19845] usb 2-1: SerialNumber: syz [ 3478.578987][T19845] cdc_ncm 2-1:1.0: bind() failure [ 3478.599465][T19845] cdc_ncm 2-1:1.1: bind() failure [ 3478.619444][T19845] usb 2-1: USB disconnect, device number 10 [ 3478.688877][T22222] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3478.819061][T10961] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3478.879055][T22222] usb 1-1: device descriptor read/8, error -61 [ 3479.068847][T10961] usb 3-1: Using ep0 maxpacket: 8 [ 3479.159661][T22222] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3479.198968][T10961] usb 3-1: config 1 has an invalid descriptor of length 26, skipping remainder of the config [ 3479.209406][T10961] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3479.222982][T10961] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3479.233794][T10961] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3479.243900][T10961] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3479.338920][T23339] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3479.359013][T22222] usb 1-1: device descriptor read/8, error -61 [ 3479.439269][T10961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3479.448358][T10961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3479.456477][T10961] usb 3-1: Product: syz [ 3479.462873][T10961] usb 3-1: Manufacturer: syz [ 3479.467472][T10961] usb 3-1: SerialNumber: syz [ 3479.479478][T22222] usb usb1-port1: unable to enumerate USB device [ 3479.510061][T10961] cdc_ncm 3-1:1.0: skipping garbage [ 3479.515299][T10961] cdc_ncm 3-1:1.0: bind() failure [ 3479.536347][T10961] cdc_ncm 3-1:1.1: bind() failure [ 3479.579375][T23339] usb 2-1: Using ep0 maxpacket: 8 17:03:54 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250c00000005003500430008003b0002000000050038000000000008002b0034b6895e050004000000000005002a0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 17:03:54 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x531000, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000140)={0x0, 0x100000000}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048002}, 0x24040000) prctl$PR_GET_CHILD_SUBREAPER(0x25) 17:03:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400006) 17:03:54 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400700) [ 3479.614120][T10961] usb 3-1: USB disconnect, device number 42 17:03:54 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 17:03:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400007) [ 3479.709776][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3479.742469][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 17:03:54 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0xff) 17:03:54 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x40ff00) [ 3479.793079][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 17:03:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400008) [ 3479.863908][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 17:03:54 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x2010, r1, 0x44000) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3479.908900][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 17:03:54 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400300) [ 3479.950058][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:03:54 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105248555fb8dce45abc9f0dec476611ef90000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000909010102020d0000090582020000000000090503020000000000"], 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 3480.178909][T10961] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3480.199009][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3480.208197][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3480.238977][T23339] usb 2-1: can't set config #1, error -71 [ 3480.246406][T23339] usb 2-1: USB disconnect, device number 11 [ 3480.260623][T22222] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3480.438916][T10961] usb 3-1: Using ep0 maxpacket: 8 [ 3480.469464][T22222] usb 1-1: device descriptor read/64, error 18 [ 3480.588862][T10961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3480.600286][T10961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3480.608784][T23339] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3480.611080][T10961] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3480.629888][T10961] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3480.640661][T10961] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3480.651416][T10961] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3480.778767][T22222] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 3480.828855][T10961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3480.838077][T10961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3480.848827][T10961] usb 3-1: Product: syz [ 3480.849012][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3480.858285][T10961] usb 3-1: Manufacturer: syz [ 3480.863233][T10961] usb 3-1: SerialNumber: syz [ 3480.968789][T23339] usb 2-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 3480.968967][T22222] usb 1-1: device descriptor read/64, error 18 [ 3480.979887][T23339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3481.004384][T23339] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3481.110122][T22222] usb usb1-port1: attempt power cycle [ 3481.178891][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3481.179041][T10961] cdc_ncm 3-1:1.0: bind() failure [ 3481.188532][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3481.197063][T10961] cdc_ncm 3-1:1.1: bind() failure [ 3481.213331][T10961] usb 3-1: USB disconnect, device number 43 [ 3481.243616][T23339] usb 2-1: Product: syz [ 3481.247819][T23339] usb 2-1: Manufacturer: syz [ 3481.273683][T23339] usb 2-1: SerialNumber: syz [ 3481.320665][T23339] cdc_ncm 2-1:1.0: bind() failure [ 3481.540930][T23339] usb 2-1: USB disconnect, device number 12 [ 3481.818697][T22222] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3481.908679][ T9774] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3482.029184][T22222] usb 1-1: device descriptor read/8, error -61 [ 3482.148664][ T9774] usb 3-1: Using ep0 maxpacket: 8 [ 3482.268758][ T9774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3482.280410][ T9774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3482.296635][ T9774] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3482.309420][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3482.324054][ T9774] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3482.328653][T22222] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3482.341655][T19845] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3482.346423][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3482.518855][ T9774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3482.527915][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3482.540077][T22222] usb 1-1: device descriptor read/8, error -61 [ 3482.549612][ T9774] usb 3-1: Product: syz [ 3482.553785][ T9774] usb 3-1: Manufacturer: syz [ 3482.561396][ T9774] usb 3-1: SerialNumber: syz [ 3482.598825][T19845] usb 2-1: Using ep0 maxpacket: 8 17:03:57 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x20}}}}}}]}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="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"/294], 0x12c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008000) 17:03:57 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000080)=0x20) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) waitid(0x1, 0x0, &(0x7f0000000100), 0x8, &(0x7f0000000180)) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6, 0x1}, 0x20) 17:03:57 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x40, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x8, 0x4) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio1\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000140)={0x5, 0x2}) read$fb(r1, 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000000)=[0x0, 0x7fff, 0x7], &(0x7f0000000040)=[0x5, 0x4, 0x5], &(0x7f0000000080)=[0x1, 0x800, 0x23], &(0x7f00000000c0)=[0x3, 0x4, 0x1400, 0x9, 0x4, 0xb5c, 0x9, 0x400, 0x9]}) [ 3482.669193][T22222] usb usb1-port1: unable to enumerate USB device 17:03:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400500) [ 3482.738856][ T9774] cdc_ncm 3-1:1.0: bind() failure [ 3482.739304][T19845] usb 2-1: config 1 has an invalid descriptor of length 141, skipping remainder of the config [ 3482.759988][ T9774] cdc_ncm 3-1:1.1: bind() failure [ 3482.787164][T19845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3482.805615][ T9774] usb 3-1: USB disconnect, device number 44 [ 3482.856035][T19845] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 17:03:57 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 17:03:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400600) 17:03:57 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x7a3002, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:57 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x183801) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/115) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:03:57 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x270b00, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:03:57 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400700) 17:03:58 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = geteuid() setfsuid(r1) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3483.109330][T19845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3483.119141][T19845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:03:58 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xa8e, 0x4) [ 3483.152177][T19845] usb 2-1: Product: syz [ 3483.187788][T19845] usb 2-1: Manufacturer: syz [ 3483.205825][T19845] usb 2-1: SerialNumber: syz [ 3483.206526][ T9774] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3483.249087][T19845] usb 2-1: can't set config #1, error -71 [ 3483.269589][T19845] usb 2-1: USB disconnect, device number 13 [ 3483.468859][T22222] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3483.482009][ T9774] usb 3-1: Using ep0 maxpacket: 8 [ 3483.598686][ T9774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3483.614426][ T9774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3483.634820][ T9774] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3483.647103][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3483.663406][ T9774] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3483.673259][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3483.678696][T19845] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3483.690582][T22222] usb 1-1: device descriptor read/64, error 18 [ 3483.848611][ T9774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3483.857666][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3483.868686][ T9774] usb 3-1: Product: syz [ 3483.873161][ T9774] usb 3-1: Manufacturer: syz [ 3483.877798][ T9774] usb 3-1: SerialNumber: syz [ 3483.948590][T19845] usb 2-1: Using ep0 maxpacket: 8 [ 3483.962366][T22222] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3484.099224][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3484.110390][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3484.133084][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3484.156198][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3484.168687][ T9774] cdc_ncm 3-1:1.0: bind() failure [ 3484.170405][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3484.183541][T22222] usb 1-1: device descriptor read/64, error 18 [ 3484.190437][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3484.191452][ T9774] cdc_ncm 3-1:1.1: bind() failure [ 3484.240416][ T9774] usb 3-1: USB disconnect, device number 45 [ 3484.321397][T22222] usb usb1-port1: attempt power cycle [ 3484.389094][T19845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3484.400126][T19845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3484.408171][T19845] usb 2-1: Product: syz [ 3484.415242][T19845] usb 2-1: Manufacturer: syz [ 3484.420013][T19845] usb 2-1: SerialNumber: syz [ 3484.728598][T19845] cdc_ncm 2-1:1.0: bind() failure [ 3484.747778][T19845] cdc_ncm 2-1:1.1: bind() failure [ 3484.756880][T19845] usb 2-1: USB disconnect, device number 14 [ 3484.908511][ T9774] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3485.048552][T22222] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3485.149079][ T9774] usb 3-1: Using ep0 maxpacket: 8 [ 3485.238828][T22222] usb 1-1: device descriptor read/8, error -61 [ 3485.268548][ T9774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3485.279622][ T9774] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3485.298287][ T9774] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3485.311014][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3485.325969][ T9774] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3485.338863][ T9774] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3485.478485][T19845] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 3485.508425][T22222] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3485.508970][ T9774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3485.528005][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3485.539133][ T9774] usb 3-1: Product: syz [ 3485.550552][ T9774] usb 3-1: Manufacturer: syz [ 3485.555136][ T9774] usb 3-1: SerialNumber: syz [ 3485.718537][T22222] usb 1-1: device descriptor read/8, error -61 [ 3485.725254][T19845] usb 2-1: Using ep0 maxpacket: 8 17:04:00 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0xd9, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902c70002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000004b24130232cf2fb3280ed27982e564b8d7293f91fb8e49ac2da44c7cebda9e2458635536e480a406bfa0296209d48c034e7e45b1f07b70da3f5c8f28fe9be3cf976386c41cfe55fceda49f0424020d0424020407241407000800c6ff030905241509000905810300000000010904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 17:04:00 executing program 4: keyctl$session_to_parent(0x12) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x40ff00) 17:04:00 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x1017c2, 0x0) read$fb(r1, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) read$fb(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x8, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x3, 0x4, 0x1, 0x2}}, 0x26) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x80000, 0x0) read$fb(r5, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) r6 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r6, 0x4606, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000000)={0x0, 0x3, 0x7fff, 0x0, 0x8}) prctl$PR_SET_PDEATHSIG(0x1, 0x26) [ 3485.808505][ T9774] cdc_ncm 3-1:1.0: bind() failure [ 3485.827709][ T9774] cdc_ncm 3-1:1.1: bind() failure [ 3485.848643][T22222] usb usb1-port1: unable to enumerate USB device [ 3485.858798][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3485.862871][ T9774] usb 3-1: USB disconnect, device number 46 [ 3485.888502][T19845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 17:04:00 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 17:04:00 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x100010, r0, 0xc1000) 17:04:00 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x548000) [ 3485.975348][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 17:04:00 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x78d500, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r4, 0x0, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x2200, 0x0) read$fb(r5, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x5, 0x103102) openat$fb1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb1\x00', 0x20000, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000280)={0x5, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)}) ioctl$FBIO_WAITFORVSYNC(r6, 0x5421, 0x400000) [ 3486.034331][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3486.068271][T19845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 17:04:01 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x24400, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) [ 3486.102522][T19845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:04:01 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x747000) 17:04:01 executing program 3: write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @link_key_reply={{0x40b, 0x16}, {@fixed={[], 0x10}, "cc4e950581a651a4657a093d8dac75b2"}}}, 0x1a) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x400000, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x8, 0x200100) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000180)=0x3ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) [ 3486.338475][T19845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3486.338486][ T9774] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3486.377521][T19845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3486.391430][T19845] usb 2-1: Product: syz [ 3486.428669][T19845] usb 2-1: can't set config #1, error -71 [ 3486.436183][T19845] usb 2-1: USB disconnect, device number 15 [ 3486.519039][T20054] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3486.578415][ T9774] usb 3-1: Using ep0 maxpacket: 8 [ 3486.698451][ T9774] usb 3-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 3486.708874][T20054] usb 1-1: device descriptor read/64, error 18 [ 3486.715041][ T9774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3486.727041][ T9774] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3486.898450][ T9774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3486.907583][ T9774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3486.917332][ T9774] usb 3-1: Product: syz [ 3486.923296][ T9774] usb 3-1: Manufacturer: syz [ 3486.929459][ T9774] usb 3-1: SerialNumber: syz [ 3486.979605][ T9774] cdc_ncm 3-1:1.0: bind() failure [ 3486.987035][T20054] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3487.178491][T20054] usb 1-1: device descriptor read/64, error 18 [ 3487.190568][T19845] usb 3-1: USB disconnect, device number 47 [ 3487.308579][T20054] usb usb1-port1: attempt power cycle [ 3487.968317][T19845] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3488.018344][T20054] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3488.188316][T20054] usb 1-1: device descriptor read/8, error -61 [ 3488.228255][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3488.358808][T19845] usb 3-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 3488.369262][T19845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3488.381370][T19845] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3488.458321][T20054] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3488.568333][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3488.577376][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3488.588454][T19845] usb 3-1: Product: syz [ 3488.593979][T19845] usb 3-1: Manufacturer: syz [ 3488.606697][T19845] usb 3-1: SerialNumber: syz [ 3488.630387][T20054] usb 1-1: device descriptor read/8, error -61 [ 3488.649554][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3488.748915][T20054] usb usb1-port1: unable to enumerate USB device 17:04:03 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 17:04:03 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x750000) 17:04:03 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000)) [ 3488.868458][T19845] usb 3-1: USB disconnect, device number 48 17:04:03 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001b0c8e3138320565edda316566bea9cb505240000000d"], 0x0) 17:04:03 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x28100) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x1f, 0xff, 0x11, @remote, @mcast1, 0x8, 0x80, 0x9, 0x7}}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040080) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x45e) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = socket(0x28, 0x5, 0x3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) 17:04:03 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1190000) 17:04:03 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x191c6) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:03 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x1b12c1, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:04 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109025c0002010080000904000001020d0000052406000105240000000d240f0100000000000000000006241a8000140905810300000100000904010000020d00000904010102020d0000090582020000000000090503020000060000"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 17:04:04 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0xd80, 0x800, 0x60, 0x14c0, 0x4f, 0x3f94, 0x1, 0x1, {0x46d, 0x956b, 0x7f}, {0x2, 0x3, 0x1}, {0x0, 0x4c}, {0x6, 0x6, 0x1}, 0x1, 0x100, 0x2, 0x0, 0x0, 0x4, 0xff, 0x659, 0x7fffffff, 0x40, 0xc6, 0x4, 0x12, 0x200, 0x2, 0x1}) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @remote}}, 0x1e) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5421, 0x400000) 17:04:04 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x1590000) [ 3489.398323][T19845] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3489.518225][T22222] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3489.578225][T10961] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3489.658142][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3489.768174][T22222] usb 1-1: Using ep0 maxpacket: 8 [ 3489.781561][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3489.793284][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3489.810301][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3489.821349][T10961] usb 2-1: Using ep0 maxpacket: 8 [ 3489.826490][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3489.842433][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3489.854581][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3489.913794][T22222] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 3489.924619][T22222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3489.933663][T22222] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3489.958317][T10961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3490.019012][T10961] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3490.027084][T10961] usb 2-1: can't read configurations, error -71 [ 3490.039914][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3490.049436][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.057784][T19845] usb 3-1: Product: syz [ 3490.062649][T19845] usb 3-1: Manufacturer: syz [ 3490.067522][T19845] usb 3-1: SerialNumber: syz [ 3490.118830][T22222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3490.133777][T22222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.144905][T22222] usb 1-1: Product: syz [ 3490.158409][T22222] usb 1-1: Manufacturer: syz [ 3490.163013][T22222] usb 1-1: SerialNumber: syz [ 3490.229772][T22222] cdc_ncm 1-1:1.0: bind() failure [ 3490.367472][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3490.377469][T19845] cdc_ncm 3-1:1.1: bind() failure [ 3490.408294][T19845] usb 3-1: USB disconnect, device number 49 [ 3490.455830][T22222] usb 1-1: USB disconnect, device number 18 [ 3490.728092][T10961] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 3491.018085][T10961] usb 2-1: Using ep0 maxpacket: 8 [ 3491.117712][T18982] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 3491.151203][T10961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3491.228114][T10961] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3491.235790][T10961] usb 2-1: can't read configurations, error -71 [ 3491.248084][T10961] usb usb2-port1: attempt power cycle [ 3491.358067][T18982] usb 3-1: Using ep0 maxpacket: 8 [ 3491.478240][T18982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3491.489320][T18982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3491.502440][T18982] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3491.512541][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3491.522727][T18982] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3491.532532][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3491.698678][T18982] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3491.707746][T18982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3491.718892][T18982] usb 3-1: Product: syz [ 3491.724198][T18982] usb 3-1: Manufacturer: syz [ 3491.729011][T18982] usb 3-1: SerialNumber: syz 17:04:06 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x91, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x3, 0x800}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x15}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4040000) 17:04:06 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0xfffffff9) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0x1b0, 0x3}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)={0x800, 0x360, 0x356, 0x280, 0x1, 0x3, 0x2, 0x2, {0x8, 0x6}, {0xffff0001, 0x1000, 0x1}, {0x2, 0x5, 0x1}, {0x4, 0x1000}, 0x3, 0x140, 0x4, 0x9, 0x1, 0x8, 0x2, 0x7fc00000, 0x5e8, 0x8, 0xfffff800, 0x6, 0x8, 0x201, 0x1, 0x5}) write$dsp(r2, &(0x7f0000000180)="448ddce86d6982140495d0bb7116285f2bebc1b839ea61cc265975189147d3375c7c780fe10e76104e880183b5db0482ae323f5ffd6a648ada6192a4081faf31738f99f16066118efc290b5287c7a0dbf611504ce3b0fa92b26849d240c233dd6e81220c9f0f9a94fb28b685398da421378695ce5a30c84157bd3325b879f7f55ee78485c55bc36fc25aca5bf1c130565526e7bf092b3489582d6c8c69de17c25d9e2204fe187c66ce223b165638be05ee271ab87d9c32178a9257c9437feccf8245a39e", 0xc4) 17:04:06 executing program 3: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @isdn={0x22, 0x1, 0x9, 0x1, 0x7f}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000}, @ipx={0x4, 0x8, 0xff, "b9ad7dada6ff", 0x80}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='veth0_to_bond\x00', 0x0, 0x7}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5421, 0x400000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2e00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) 17:04:06 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x20000000) 17:04:06 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 17:04:06 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582070000000000090503020000000000"], 0x0) syz_usbip_server_init(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf250800000005000500000000000c000f00060000000000020005002100010000001400200000000000000000000000ffffe00000020500220000000000050005000000000008001800ac14140e0c001600070000000000000005000d0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x1ee64bb9a3f98f31}, 0x4020) [ 3491.998111][T18982] cdc_ncm 3-1:1.0: bind() failure [ 3492.017230][T18982] cdc_ncm 3-1:1.1: bind() failure [ 3492.065696][T18982] usb 3-1: USB disconnect, device number 50 17:04:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x21000000) 17:04:07 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x1a91, 0x1, &(0x7f0000000040)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'veth0_vlan\x00', @ifru_hwaddr=@dev}}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x60080, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) getpeername(0xffffffffffffffff, &(0x7f000000d300)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000d380)=0x80) sendmsg$can_j1939(r1, &(0x7f000000d4c0)={&(0x7f000000d3c0)={0x1d, r2, 0x2, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f000000d480)={&(0x7f000000d400)="0b01ce40dbaac2df0df018b08e542edbc52a16790fa9e7356336b15fb617fc792c24747cffb92b08a33bf788db1a0ad46b7cb275e4daea269e6fcc82cc6a5b13e467158a858c687aa8dffb708729ef5877c7ee", 0x53}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 17:04:07 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0xff600000) 17:04:07 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000002c0)={0x60, 0x280, 0x556, 0x0, 0x6, 0xffff, 0x6, 0x1, {0x1, 0x2, 0x1}, {0x5, 0x9}, {0x25e, 0x4}, {0x101, 0x9}, 0x3, 0x1, 0x80, 0x4, 0x1, 0x5, 0x7, 0x9, 0x200, 0x5, 0x200, 0xbac, 0x1, 0x2, 0x0, 0x7}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xa4, 0x5, 0x1, 0x1, 0x1}, 0x8) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) write$fb(r0, &(0x7f0000000240)="422a12d645f5c50abc8abacf7a2b36044fb5c004a0dc21e9ffaf455726fd3e018ba120a18545cfa328ab5ce32c7ef171f6c618aa03ef483e2a047065dd0e24e6299d0a8a309b8dd3ec62bfc3bd63fa48e2472e5f06afaa7b11df5fef7b38639144e5a9870b665a112d7e77bffe837d1519ff7b", 0x73) syz_usb_connect$cdc_ncm(0x6, 0x70, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xf7e158f1a1d6e2fe, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d4eb"}, {0x5, 0x24, 0x0, 0x65ad}, {0xd, 0x24, 0xf, 0x1, 0xcfd, 0xd46b, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x8000, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf8, 0x39}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x3, 0x64, 0x4, 0x8, 0x7}, 0xb0, &(0x7f0000000100)={0x5, 0xf, 0xb0, 0x4, [@wireless={0xb, 0x10, 0x1, 0xa, 0x8, 0x7f, 0x91, 0x100, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x15, 0xc, 0x9, 0x7}, @ptm_cap={0x3}, @generic={0x96, 0x10, 0x2, "d5fa3355daf2379d989bc57392b7a05357eda016a2e178e6daaf6af4d6aaee2f06ee2ebbb8a261736fbf816b0911c841ae12df98c0482b270de1973c6c5a35c955c3bee3fd5b775e7f8839157443a19061d56963499652b3513d52812395b8401de68193ced0be1d3a616f66166aea328c25f94eccf0384de8c4876e659ac565953f5eedbbcaa0ece73a58bb818848ce22c738"}]}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 17:04:07 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm], 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x3e401, 0x0) socket$pptp(0x18, 0x1, 0x2) [ 3492.328000][T22222] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 3492.498065][T10961] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 3492.538058][T18982] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3492.547956][T22222] usb 1-1: device descriptor read/64, error 18 [ 3492.598704][T10961] usb 2-1: Using ep0 maxpacket: 8 [ 3492.727954][T18982] usb 3-1: device descriptor read/64, error 18 [ 3492.739729][T10961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3492.751660][T10961] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3492.762988][T10961] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3492.775510][T10961] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3492.786825][T10961] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3492.799017][T10961] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3492.828011][T22222] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 3492.978175][T10961] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3492.987390][T10961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3492.998522][T10961] usb 2-1: Product: syz [ 3492.998745][T18982] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3493.003052][T10961] usb 2-1: Manufacturer: syz [ 3493.015053][T10961] usb 2-1: SerialNumber: syz [ 3493.038018][T22222] usb 1-1: device descriptor read/64, error 18 [ 3493.159590][T22222] usb usb1-port1: attempt power cycle [ 3493.218010][T18982] usb 3-1: device descriptor read/64, error 18 [ 3493.273691][ T8229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 3493.280266][ T8229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3493.301726][ T8270] vhci_hcd: connection closed [ 3493.303507][T29850] vhci_hcd: stop threads [ 3493.319314][T29850] vhci_hcd: release socket [ 3493.323844][T29850] vhci_hcd: disconnect device [ 3493.328914][T10961] cdc_ncm 2-1:1.0: bind() failure [ 3493.337241][T10961] cdc_ncm 2-1:1.1: bind() failure [ 3493.340611][T18982] usb usb3-port1: attempt power cycle [ 3493.368318][T10961] usb 2-1: USB disconnect, device number 18 [ 3493.888896][T22222] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 3494.067927][T18982] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3494.078111][T20054] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3494.097994][T22222] usb 1-1: device descriptor read/8, error -61 [ 3494.238010][T18982] usb 3-1: device descriptor read/8, error -61 [ 3494.317896][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3494.367952][T22222] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 3494.437944][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3494.449124][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3494.461792][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3494.472996][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3494.483093][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3494.492818][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3494.518015][T18982] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3494.568019][T22222] usb 1-1: device descriptor read/8, error -61 [ 3494.658423][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3494.667581][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3494.678692][T20054] usb 2-1: Product: syz [ 3494.683993][T20054] usb 2-1: Manufacturer: syz [ 3494.689433][T18982] usb 3-1: device descriptor read/8, error -61 [ 3494.696714][T20054] usb 2-1: SerialNumber: syz [ 3494.698036][T22222] usb usb1-port1: unable to enumerate USB device [ 3494.817981][T18982] usb usb3-port1: unable to enumerate USB device [ 3494.955295][ T8229] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(4) [ 3494.961832][ T8229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3494.988009][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3495.008785][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3495.049384][T20054] usb 2-1: USB disconnect, device number 19 17:04:10 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300010000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x89, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x7f, 0xf0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "7a9b67f2"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x75}, [@obex={0x5, 0x24, 0x15, 0x81}, @acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x6, 0x0, 0x71}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3f, 0x80, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x450, 0x1a, 0x7f, 0xf0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x7, 0x8f}}, {{0x9, 0x5, 0x3, 0x2, 0x1f7, 0x5, 0xf9, 0xeb}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x80, 0xe5, 0x5, 0x8, 0xc2}, 0xa1, &(0x7f00000001c0)={0x5, 0xf, 0xa1, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x81, 0x52, 0x8000}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x1ff, 0xf01e, 0x9, [0xff0030, 0xc0, 0x1e3f, 0xc180]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "6361d39bba5b5c9f670cd5e88bbe4068"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "1022feb8e39d70a11602e32fbdcfd777"}, @generic={0x4d, 0x10, 0x3, "99ff1980b6a091923e986aa9003f7cad3ae557a8d2b83ca7bd09b56028ef47b5c5553979db610352b743f59f5e30dc15ed979f16ecc131667ffc79c6478072944c70269cfdc4d188f3bb"}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x7cb6177cbc473f56}}, {0x96, &(0x7f00000002c0)=@string={0x96, 0x3, "f4f68c2c7f48a20dddd5e1842dc0bc4fee91758f6037b8c8074c459c1d13137528588f2cab9b4d2265b2f1d20db7c58ee14bb6e50277e55fff5eaa7165d8ea14c4b7e489f0fac4cc666d85825db600dbda5ec42d2fd73fbf03f0320a8f0f1f2707689e6ef587b0e68c97443bf4c7d17fb35e6f41fafcdf9c61f7d52ac2793cc88f2bf81563cd38a7960f25cd19de1f91271ef5ad"}}, {0x72, &(0x7f0000000380)=@string={0x72, 0x3, "1caf47fa85dd252b5a6feadca5e2738678d15f25954d8d6886dc658e5f5b6e6735e68fad517f11bf99d9ea61287297424ea14635006f2a90de61023bcfdfa29d62b96a08d257f96e6020060608f391ec98f00e5ce760bd614521c9378302d3bc2a50ecdab02651cfcf3a8aa1555e1e2b"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "92214aeb978384eef587e312aa"}}, {0x51, &(0x7f0000000440)=ANY=[@ANYBLOB="5103ed28289bfa0c31423d5d4064db0a1140bb02000000ea62257025181a00e0000d1af45ddca21e2fb76d8d119226cb37d107e865310f6764065d91f0975414bd78b95b9fe42bbcd3c288000000000000"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x407}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r3, 0x20, 0x3ff, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x58}}, 0x4004800) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c800000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fedbdf2503000000080005000100000008000500070000001c000280080008001f00000006000e004e23000005000d000000000008000500070000000400038008000500200000000800060005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) 17:04:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x7fffffffefff) 17:04:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x40b00, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x98a}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48010}, 0x20000010) r3 = syz_open_dev$vcsu(&(0x7f000000b740)='/dev/vcsu#\x00', 0x7f, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f000000b880)={&(0x7f000000b780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000b840)={&(0x7f000000b7c0)={0x4c, 0x0, 0x220, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9610}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:10 executing program 1: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/33, 0x21}], 0x4, &(0x7f0000000280)=""/64, 0x40}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d1a3e052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904efffff010d00000904010102020d005af9af2ebcb1f57f0000090503020000000000"], 0x0) 17:04:10 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 17:04:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000000)={0x2000, 0x140, 0x780, 0x1e0, 0x1f, 0x5c, 0x18, 0x0, {0x3, 0x211}, {0x8000, 0x6}, {0x5, 0x5}, {0xff, 0x1f}, 0x0, 0x10, 0x4, 0x3, 0x0, 0x8000, 0x800000, 0x7, 0x1, 0x4, 0x1e75, 0x795c, 0xa, 0x2, 0x1, 0xa}) 17:04:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) write$fb(r0, &(0x7f0000000000)="a675f0b835cfffd99e23afbbe2e31fd59471f41006ab2748ac8ad1b2415aa2eaeb9a8fca48444fec417ee3b2adb819145aada7b8eeadccb8abf1b31b31a1567090069fa558208ce4183fa5c1c7b5f9b0fcc75c3cbd274c56a70d6b839c4e59146be645456f97031798a8c22af3f6ab51c6efb1f3ef8c95d6075d2e83b0a973ef61b5d259c8d2c0ef3b8f996272edc92b13796502c9d5bf7e1eb31867916dea82bba998fc768e4f6ab175baf8923047b6d7a512cd024b44fc7297037a184d970e00d3210a8028d0ddcf902a127bc85e0432fbcec268336d1d9641c497cfb9f6c2cd0e1c4b", 0xe4) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb1\x00', 0x80140, 0x0) read$fb(r1, &(0x7f0000000180)=""/55, 0x37) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40040, 0x0) 17:04:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0xffffffffff600000) [ 3495.248039][T18975] usb 11-2: new low-speed USB device number 2 using vhci_hcd 17:04:10 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x40) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:10 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0xc0000) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000080)) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f00000000c0)) 17:04:10 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x1}, 0x1}, 0x18, &(0x7f0000000100)={&(0x7f0000000040)="a67d3d60fe5ca9b6ff161e441d42a3513d1c3aba8f8232c466156ed254cd408acdbbce10a01e2f15cab694053eee8104e128a505a29e8243152f235cbd9a9e31cf6fb3e215b2cf642671b6ae2cae4f01f4414b56d21f87113189327e0b718446a6a6b8fef9d9eba6949cded421e9ce77cdbf80ce078262746d70d65ccd761c8cccf9aa5799cbd0a621030cb285870beaae2587deb61e53cbc9cd06f9c4b15d3d718fccf55231778c589f290216ccc6c48176e22713335bb202446e2de40936", 0xbf}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x2, {0x1, 0x1}}, 0x18) [ 3495.537929][T22222] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 3495.577978][T19845] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 3495.590507][T20054] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3495.737781][T22222] usb 1-1: device descriptor read/64, error 18 [ 3495.837827][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3495.851129][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3495.960112][T20054] usb 2-1: config 1 has an invalid interface number: 239 but max is 1 [ 3495.968774][T20054] usb 2-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 3495.978349][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3495.979409][T20054] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 3496.000274][T20054] usb 2-1: config 1 has no interface number 2 [ 3496.006392][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3496.008870][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3496.017578][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3496.027292][T22222] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 3496.047801][T20054] usb 2-1: too many endpoints for config 1 interface 239 altsetting 255: 255, using maximum allowed: 30 [ 3496.061211][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3496.071983][T20054] usb 2-1: config 1 interface 239 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 3496.079943][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3496.099581][T20054] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3496.103703][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3496.127371][T20054] usb 2-1: config 1 interface 239 has no altsetting 0 [ 3496.142906][T20054] usb 2-1: config 1 interface 1 has no altsetting 0 [ 3496.277867][T22222] usb 1-1: device descriptor read/64, error 18 [ 3496.297843][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3496.306970][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.308202][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3496.315313][T19845] usb 3-1: Product: syz [ 3496.331219][T19845] usb 3-1: Manufacturer: syz [ 3496.335997][T19845] usb 3-1: SerialNumber: syz [ 3496.351807][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.379516][T20054] usb 2-1: Product: syz [ 3496.399100][T20054] usb 2-1: Manufacturer: syz [ 3496.403705][T20054] usb 2-1: SerialNumber: syz [ 3496.412630][T22222] usb usb1-port1: attempt power cycle [ 3496.603415][ T8324] udc-core: couldn't find an available UDC or it's busy [ 3496.615686][ T8324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3496.667824][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3496.685437][T19845] cdc_ncm 3-1:1.1: bind() failure [ 3496.716109][T19845] usb 3-1: USB disconnect, device number 55 [ 3496.749445][T20054] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 3496.782090][T20054] usb 2-1: USB disconnect, device number 20 [ 3497.137700][T22222] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 3497.338077][T22222] usb 1-1: device descriptor read/8, error -61 [ 3497.427655][T19136] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3497.627668][T22222] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 3497.677709][T19136] usb 3-1: Using ep0 maxpacket: 8 [ 3497.797838][T22222] usb 1-1: device descriptor read/8, error -61 [ 3497.804103][T19136] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3497.815898][T19136] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3497.826005][T19136] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3497.838691][T19136] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3497.848752][T19136] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3497.917868][T22222] usb usb1-port1: unable to enumerate USB device [ 3498.017689][T19136] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3498.026806][T19136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3498.037940][T19136] usb 3-1: Product: syz [ 3498.042770][T19136] usb 3-1: Manufacturer: syz [ 3498.047444][T19136] usb 3-1: SerialNumber: syz 17:04:13 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 17:04:13 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7fff, 0x2000) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x41}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x76aa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x5c}}, 0x200000c0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x5421, 0x750000) socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000180)=0x5, 0x0) 17:04:13 executing program 5: connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000080)="d87d19e6bb03740146646a180141063eab2849b0c3001f3b1efaf5fac853b459"}}) 17:04:13 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1}, {0x6}, [@acm={0x4, 0x24, 0x2, 0x8}]}}}}}]}}, 0x0) 17:04:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0xc, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000018) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:13 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 3498.231471][T19136] cdc_ncm 3-1:1.0: bind() failure [ 3498.263756][T19136] cdc_ncm 3-1:1.1: bind() failure 17:04:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x4c4080, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x101) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000140)={0x55bb, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x4, 0x800000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x7f, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) [ 3498.343206][T19136] usb 3-1: USB disconnect, device number 56 17:04:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000100)={0x200, 0x5, &(0x7f0000000000)=[0x4, 0x3d0, 0xac57, 0x3f, 0x5], &(0x7f0000000040)=[0xf76, 0x74a6, 0x1], &(0x7f0000000080)=[0x4, 0x5, 0x8, 0x5, 0x4, 0x3f, 0x8000, 0x4a], &(0x7f00000000c0)=[0x5ae, 0x9, 0x80, 0x800, 0x6, 0x3, 0x9, 0x4, 0x1, 0x400]}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7d3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @private=0xa010102}}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'veth1_vlan\x00'}) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:13 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x80000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:13 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000040)) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) setgid(0xee01) 17:04:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x103e02, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3498.527645][T23339] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 3498.548357][T20054] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 3498.737731][T20054] usb 1-1: device descriptor read/64, error 18 [ 3498.757711][T19136] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3498.768478][T23339] usb 2-1: Using ep0 maxpacket: 8 [ 3498.898018][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3498.909090][T23339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3498.924957][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3498.939429][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3498.955715][T23339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3498.957567][T19136] usb 3-1: device descriptor read/64, error 18 [ 3498.965775][T23339] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3499.008678][T20054] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 3499.167839][T23339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3499.177083][T23339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3499.192733][T23339] usb 2-1: Product: syz [ 3499.196945][T23339] usb 2-1: Manufacturer: syz [ 3499.206905][T23339] usb 2-1: SerialNumber: syz [ 3499.215851][T20054] usb 1-1: device descriptor read/64, error 18 [ 3499.247521][T19136] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 3499.337847][T20054] usb usb1-port1: attempt power cycle [ 3499.437544][T19136] usb 3-1: device descriptor read/64, error 18 [ 3499.497703][T23339] cdc_ncm 2-1:1.0: bind() failure [ 3499.512036][T23339] cdc_ncm 2-1:1.1: bind() failure [ 3499.531333][T23339] usb 2-1: USB disconnect, device number 21 [ 3499.564654][T19136] usb usb3-port1: attempt power cycle [ 3500.057985][T20054] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3500.237539][T22222] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 3500.251008][T20054] usb 1-1: device descriptor read/8, error -61 [ 3500.278897][T19136] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3500.447644][T19136] usb 3-1: device descriptor read/8, error -61 [ 3500.477460][T22222] usb 2-1: Using ep0 maxpacket: 8 [ 3500.527507][T20054] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 3500.597880][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3500.608932][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3500.621706][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3500.632615][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3500.642682][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3500.652786][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3500.707507][T20054] usb 1-1: device descriptor read/8, error -61 [ 3500.720656][T19136] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 3500.817658][T22222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3500.826697][T22222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3500.837912][T20054] usb usb1-port1: unable to enumerate USB device [ 3500.845598][T22222] usb 2-1: Product: syz [ 3500.854640][T22222] usb 2-1: Manufacturer: syz [ 3500.862435][T22222] usb 2-1: SerialNumber: syz [ 3500.907578][T19136] usb 3-1: device descriptor read/8, error -61 [ 3501.028376][T19136] usb usb3-port1: unable to enumerate USB device [ 3501.147571][T22222] cdc_ncm 2-1:1.0: bind() failure [ 3501.154943][T22222] cdc_ncm 2-1:1.1: bind() failure [ 3501.166970][T22222] usb 2-1: USB disconnect, device number 22 17:04:16 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x200}, {0x6}}}}}}]}}, 0x0) keyctl$session_to_parent(0x12) 17:04:16 executing program 4: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) 17:04:16 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000001400)=""/146, 0x92}, {&(0x7f00000014c0)=""/196, 0xc4}, {&(0x7f00000015c0)=""/252, 0xfc}, {&(0x7f00000016c0)=""/139, 0x8b}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000001780)=""/225, 0xe1}, {&(0x7f0000001880)=""/27, 0x1b}], 0x8, &(0x7f0000001940)=""/42, 0x2a}, 0x1}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001a00)=""/83, 0x53}, {&(0x7f0000001a80)=""/70, 0x46}, {&(0x7f0000001b00)=""/152, 0x98}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/31, 0x1f}], 0x5, &(0x7f0000002c80)=""/40, 0x28}, 0x1}, {{&(0x7f0000002cc0)=@ipx, 0x80, &(0x7f00000050c0)=[{&(0x7f0000002d40)=""/46, 0x2e}, {&(0x7f0000002d80)=""/148, 0x94}, {&(0x7f0000002e40)=""/140, 0x8c}, {&(0x7f0000002f00)=""/42, 0x2a}, {&(0x7f0000002f40)=""/35, 0x23}, {&(0x7f0000002f80)=""/16, 0x10}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/141, 0x8d}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/48, 0x30}], 0xa, &(0x7f0000005180)=""/113, 0x71}}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000005200)=""/121, 0x79}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/63, 0x3f}, {&(0x7f00000062c0)=""/198, 0xc6}], 0x4, &(0x7f0000006400)=""/89, 0x59}, 0x81}], 0x4, 0x2000, &(0x7f0000006580)={0x77359400}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006600)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000006780)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006740)={&(0x7f0000006640)={0xf0, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc0}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x2, 0x400000) 17:04:16 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xe81, 0x14dc43) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x478}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b, 0x12122, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) ioctl$FBIO_WAITFORVSYNC(r1, 0x5421, 0x400000) 17:04:16 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0xf0, 0x300, 0x578, 0x4b0, 0x7, 0x80000001, 0xf, 0x2, {0x20, 0x6}, {0xa6, 0x800}, {0x3, 0x5}, {0x0, 0x101, 0x1}, 0x3, 0x0, 0x0, 0x8, 0x1, 0x0, 0x100, 0x100, 0x0, 0x6, 0x4801, 0x520, 0x4, 0x4, 0x1}) read$dsp(r0, &(0x7f00000000c0)=""/184, 0xb8) 17:04:16 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001"], 0x0) 17:04:16 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xfffffffffffffff9, 0xc040) ioctl$FBIOBLANK(r0, 0x4611, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x8000, 0x0) syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xbd0, 0x400000) ioctl$FBIO_WAITFORVSYNC(r1, 0x5421, 0x750000) ioprio_get$uid(0x3, 0xee01) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) 17:04:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x4c, 0x18, 0x2, 0x70bd2a, 0x25dfdbfc, {0xa, 0x20, 0x80, 0x4, 0x0, 0xb, 0xf1022e15e9b4d5f1, 0x0, 0x100}, [@RTA_UID={0x8, 0x19, 0xee00}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1, 0x57, r2}}, @RTA_GATEWAY={0x14, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008851) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:16 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x100, 0x4) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x303080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:16 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000900)='/dev/vcsu#\x00', 0x800, 0x50400) setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000940)="be765beefb313392da5d7cc7d9b6748f265eac7f6439dc41ae4e7fff539392825c221c509390bb54acd21d5053ed119a66dea6e3d790a60ee63dabe5cd7bf8b819fb3a947e8a35b587662a8c210a70b4e5f5e7abd06ec660a7c0bfceabf040c9b8c770", 0x63) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r2 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000100)={&(0x7f0000000140)="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", 0x199}) 17:04:16 executing program 4: setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x40) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x543400, 0x0) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r1, 0x28000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "21e08830ed3b7dc5", "d15be736b96a5d4cfd76097c6f56ad4d", "a8bf4208", "88838b0d16776ce7"}, 0x28) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r3, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000002c0)=0x3, 0x4) [ 3501.697436][T18982] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 3501.727384][T22222] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 3501.735093][T10961] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 3501.977384][T22222] usb 2-1: Using ep0 maxpacket: 8 [ 3501.977437][T18982] usb 3-1: Using ep0 maxpacket: 8 [ 3501.982539][T10961] usb 1-1: Using ep0 maxpacket: 8 [ 3502.107450][T10961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3502.117753][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3502.128688][T10961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3502.137989][T18982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3502.138055][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3502.158964][T10961] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3502.167013][T18982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3502.172219][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3502.199007][T18982] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3502.200819][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3502.218761][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3502.228614][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3502.239560][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3502.247401][T18982] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3502.267515][T18982] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3502.358058][T10961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3502.367141][T10961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3502.384025][T10961] usb 1-1: Product: syz [ 3502.391559][T10961] usb 1-1: Manufacturer: syz [ 3502.396148][T10961] usb 1-1: SerialNumber: syz [ 3502.407436][T22222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3502.421860][T22222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3502.436303][T22222] usb 2-1: Product: syz [ 3502.445330][T22222] usb 2-1: Manufacturer: syz [ 3502.456240][T22222] usb 2-1: SerialNumber: syz [ 3502.460659][T18982] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3502.475402][T18982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3502.503213][T18982] usb 3-1: Product: syz [ 3502.527340][T18982] usb 3-1: Manufacturer: syz [ 3502.531997][T18982] usb 3-1: SerialNumber: syz [ 3502.674416][T23339] usb 1-1: USB disconnect, device number 31 [ 3502.767354][T22222] cdc_ncm 2-1:1.0: bind() failure [ 3502.777138][T22222] cdc_ncm 2-1:1.1: bind() failure [ 3502.808523][T22222] usb 2-1: USB disconnect, device number 23 [ 3502.827385][T18982] cdc_ncm 3-1:1.0: bind() failure [ 3502.846431][T18982] cdc_ncm 3-1:1.1: bind() failure [ 3502.885128][T18982] usb 3-1: USB disconnect, device number 61 [ 3503.507382][T22222] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3503.587284][T23339] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3503.747226][T22222] usb 2-1: Using ep0 maxpacket: 8 [ 3503.847237][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3503.867890][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3503.878830][T22222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3503.894790][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3503.908424][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3503.922872][T22222] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3503.935467][T22222] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3503.977666][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3503.994736][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3504.008057][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3504.019573][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3504.029908][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3504.040179][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3504.107642][T22222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3504.116675][T22222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.132906][T22222] usb 2-1: Product: syz [ 3504.137058][T22222] usb 2-1: Manufacturer: syz [ 3504.146466][T22222] usb 2-1: SerialNumber: syz [ 3504.227868][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3504.236908][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3504.248074][T23339] usb 3-1: Product: syz [ 3504.252701][T23339] usb 3-1: Manufacturer: syz [ 3504.258356][T23339] usb 3-1: SerialNumber: syz [ 3504.337273][T22222] cdc_ncm 2-1:1.0: bind() failure [ 3504.368308][T22222] cdc_ncm 2-1:1.1: bind() failure 17:04:19 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000001440)=0x1, 0x4) 17:04:19 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000007c0)) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x7, 0x7}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) read$fb(r2, &(0x7f0000000000)=""/126, 0x7e) 17:04:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x200, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x1a9e80, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000000)) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:19 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001"], 0x0) 17:04:19 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0) [ 3504.403143][T22222] usb 2-1: USB disconnect, device number 24 [ 3504.419510][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3504.444500][T23339] cdc_ncm 3-1:1.1: bind() failure [ 3504.502859][T23339] usb 3-1: USB disconnect, device number 62 17:04:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 17:04:19 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x1, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x202700, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x5421, 0x400000) 17:04:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) write$fb(r0, &(0x7f0000000400)="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", 0x1000) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0x13, 0x2}) 17:04:19 executing program 4: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000480)={0x8, 0x4, 0x1000, 0xc2, 0x0, 0x9, 0x7, 0x4000000000000007}, &(0x7f00000002c0)={0x7, 0x4, 0x408, 0x57, 0x7, 0x7, 0x1000}, &(0x7f0000000300)={0x1, 0xb, 0x5, 0x3c, 0x71, 0x3, 0x7fffffff0, 0x100000001}, &(0x7f0000000380)={r0, r1+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0xffff]}, 0x8}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x1}, 0x8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x8002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000180)={0x3, 0x11, &(0x7f0000000080)=[0x7f], &(0x7f00000000c0)=[0x40, 0x400], &(0x7f0000000100)=[0x7, 0x0, 0xfeff, 0xff], &(0x7f00000001c0)=[0x3ca8, 0x81, 0xbffe, 0x8, 0xfffb, 0x3, 0x600, 0x2]}) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000200)) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x4400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x5421, 0x750000) 17:04:19 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x210000, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x10000) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x50100, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) 17:04:19 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x10a82, 0x0) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000100)) read$fb(r1, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000000)={0x190, 0x960, 0x40, 0x40, 0x4, 0x3, 0x18, 0x2, {0x0, 0x3f, 0x1}, {0x7f}, {0x3f, 0x6}, {0x6, 0x9d}, 0x0, 0x10, 0x6, 0x1, 0x0, 0x0, 0xfffffffb, 0x80, 0x9, 0x8000, 0x81, 0x0, 0x2, 0x4, 0x0, 0x8}) [ 3504.794699][T19845] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 3504.927206][T22222] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3504.987242][T23339] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3505.037171][T19845] usb 1-1: Using ep0 maxpacket: 8 [ 3505.117211][T22222] usb 2-1: device descriptor read/64, error 18 [ 3505.157769][T19845] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3505.167974][T19845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3505.176825][T19845] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3505.247592][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3505.347255][T19845] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3505.356394][T19845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3505.367166][T19845] usb 1-1: Product: syz [ 3505.372717][T19845] usb 1-1: Manufacturer: syz [ 3505.378034][T19845] usb 1-1: SerialNumber: syz [ 3505.387206][T22222] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 3505.390845][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3505.417210][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3505.447954][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3505.473460][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3505.487704][T23339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3505.502061][T23339] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3505.577149][T22222] usb 2-1: device descriptor read/64, error 18 [ 3505.633008][T10961] usb 1-1: USB disconnect, device number 32 [ 3505.697548][T22222] usb usb2-port1: attempt power cycle [ 3505.697757][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3505.714301][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3505.724841][T23339] usb 3-1: Product: syz [ 3505.729614][T23339] usb 3-1: Manufacturer: syz [ 3505.734331][T23339] usb 3-1: SerialNumber: syz [ 3506.027247][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3506.035124][T23339] cdc_ncm 3-1:1.1: bind() failure [ 3506.046740][T23339] usb 3-1: USB disconnect, device number 63 [ 3506.427142][T22222] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 3506.598564][T22222] usb 2-1: device descriptor read/8, error -61 [ 3506.767078][T19136] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 3506.887023][T22222] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 3507.017158][T19136] usb 3-1: Using ep0 maxpacket: 8 [ 3507.077152][T22222] usb 2-1: device descriptor read/8, error -61 [ 3507.157186][T19136] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3507.168193][T19136] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3507.181062][T19136] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3507.191158][T19136] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3507.202172][T22222] usb usb2-port1: unable to enumerate USB device [ 3507.209523][T19136] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3507.222293][T19136] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3507.417368][T19136] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3507.426418][T19136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.437755][T19136] usb 3-1: Product: syz [ 3507.443160][T19136] usb 3-1: Manufacturer: syz [ 3507.447853][T19136] usb 3-1: SerialNumber: syz 17:04:22 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x5, 0x101}, @sack_perm, @sack_perm, @mss={0x2, 0x7f}, @window={0x3, 0x6, 0x1}, @sack_perm], 0x6) r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x80, 0x458cf188db4ce194) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x8}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x3}}}}}}]}}, 0x0) 17:04:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x104000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2ec2c0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:22 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001"], 0x0) 17:04:22 executing program 3: ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10001, 0x80000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x0, 0x3, 0x6, 0x1, 0x3f}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:22 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x2a}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x5}}}}}}]}}, 0x0) [ 3507.577080][T19136] cdc_ncm 3-1:1.0: bind() failure [ 3507.604099][T19136] cdc_ncm 3-1:1.1: bind() failure [ 3507.653193][T19136] usb 3-1: USB disconnect, device number 64 17:04:22 executing program 5: ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80) 17:04:22 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4200, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) r2 = socket(0x19, 0x1, 0xac) write$fb(r1, &(0x7f0000000100)="415c0d88ff38cc1425658393d89ba7e110bfa627ff501dac0dfc69ad304d8b1374ddd5612fca197c6f", 0x29) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x5b, 0xff, 0x909, 0x51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x80, 0x80, 0x0, 0x6}}) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) 17:04:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000900)={0x1f, 0x0, 0x2}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000380)={0x2, 0x1, "a01e06", 0x3, 0xe1}) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x1000, [0x80, 0x80000000], 0x3}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e001200", @ANYRES16=r1, @ANYBLOB="00042abd7000fbdbdf25040000000800040000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dri/renderD128\x00', 0x2000, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x5421, 0x400000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0xffffffffffffff35, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}]}]}, 0xb4}}, 0x1) 17:04:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x238501, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x80c02) 17:04:22 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x90140) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000880) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x543182, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x5421, 0x750000) 17:04:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) select(0x40, &(0x7f0000000000)={0x50, 0x1ffc000000, 0x7, 0x4, 0x81, 0x100, 0x4800000000000000, 0x1}, &(0x7f0000000040)={0x2, 0x0, 0x1, 0xfffffffffffffffa, 0xf2, 0x1, 0x100000000, 0x7}, &(0x7f0000000080)={0x6, 0x100000001, 0x1, 0x7f, 0xffff, 0x268, 0x7, 0xffffffff80000001}, &(0x7f00000000c0)={0x77359400}) [ 3507.944367][T18982] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 3507.952362][T20054] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 3508.136911][T19136] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3508.197055][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3508.202207][T18982] usb 1-1: Using ep0 maxpacket: 8 [ 3508.327078][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3508.338617][T18982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3508.348728][T18982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3508.369060][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3508.379228][T18982] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3508.392229][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3508.402262][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3508.406954][T19136] usb 3-1: Using ep0 maxpacket: 8 [ 3508.412290][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3508.428219][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3508.557564][T19136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3508.567543][T18982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3508.567797][T19136] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3508.576661][T18982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3508.576676][T18982] usb 1-1: Product: syz [ 3508.576697][T18982] usb 1-1: Manufacturer: syz [ 3508.601037][T19136] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3508.614341][T18982] usb 1-1: SerialNumber: syz [ 3508.625108][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3508.650298][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3508.668607][T20054] usb 2-1: Product: syz [ 3508.674232][T20054] usb 2-1: Manufacturer: syz [ 3508.685764][T20054] usb 2-1: SerialNumber: syz [ 3508.817151][T19136] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3508.826194][T19136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3508.842627][T19136] usb 3-1: Product: syz [ 3508.850059][T19136] usb 3-1: Manufacturer: syz [ 3508.854654][T19136] usb 3-1: SerialNumber: syz [ 3508.903322][T18982] usb 1-1: USB disconnect, device number 33 [ 3508.922394][T19136] cdc_ncm 3-1:1.0: bind() failure [ 3508.987041][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3509.000280][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3509.022814][T20054] usb 2-1: USB disconnect, device number 29 [ 3509.121454][T19136] usb 3-1: USB disconnect, device number 65 17:04:24 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) ioprio_get$uid(0x0, 0xffffffffffffffff) 17:04:24 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x4080c1, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0xb4081, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x80) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x10000, 0x0) read$fb(r3, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) shmdt(0x0) 17:04:24 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x1, &(0x7f0000000100)={&(0x7f0000000000)="55d150a33f676e8c2ebaef938b1684e25be110baa32a3dbb50df9f4acdbec066f8d8748d6599bcc5ff010c7d75a10d4deedb6658d2a6d4a0d33b5c07f5ffb281a427fa59690a704443b0fd32815c3fff91776bf59bd5d9e320d581a5fa7323035273b29022ca3aa8984d5d5624ff2b004481ff0b61308beab9f4c10aeae99abc36a4bac38139609ba9026612577e3cfd71e193a1c514e4d3589ac05af8bb2cf3690823400bbd10ac17465382c1f71dbb02950f1d9d8b67c32331c5c03e2f3e81b58a5fad56d359e23118f97fef8ce353f83d85d6", 0xd4}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:24 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x101002, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x105001, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000140)={0x1d, 0x1}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x301e00, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f00000000c0)) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$session_to_parent(0x12) 17:04:24 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001b0c8e313832056"], 0x0) [ 3509.726957][T20054] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 3509.886855][T22222] Bluetooth: hci2: command 0x0401 tx timeout [ 3509.966832][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3509.986868][T19136] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 3510.016840][T19845] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3510.087236][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3510.098728][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3510.111504][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3510.121529][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3510.131401][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3510.142116][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3510.246817][T19136] usb 1-1: Using ep0 maxpacket: 8 [ 3510.261040][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3510.307544][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3510.316595][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.327577][T20054] usb 2-1: Product: syz [ 3510.340910][T20054] usb 2-1: Manufacturer: syz [ 3510.345508][T20054] usb 2-1: SerialNumber: syz [ 3510.388083][T19136] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 3510.398886][T19136] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3510.418447][T19845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3510.434072][T19845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3510.443667][T19136] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3510.457266][T19845] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 17:04:25 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x28, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4d, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xe000, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x80, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x40, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x2, 0x4, 0x8}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x58, 0x1f, 0x9, 0x8, 0x1}]}, 0x7, [{0x9d, &(0x7f0000000180)=@string={0x9d, 0x3, "324756963c6d27f71a5941e85f0d13c067feb1bd88f829f7b59074da53e2696a32446e9adcaea124dd49f3ddefd550f797189c424feb054f040872beacffed0471f228941ba8af9531b31e8fab2db2b08c69fa15009620e7de6a26c5ce9966846bb3a809b9f5a84486387a91c9a0846b529a7e0a5f541f97c21bf5b6b58b8c7ee746ba84eae3c3ca51d0d903c10dc446756523d5fafde71dff0651"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41b}}, {0x9d, &(0x7f0000000280)=@string={0x9d, 0x3, "69ee5afb2f4cb5d9655c6230dadc90b03af24a1fd2e47e514c2685b3a487d9415c1b5b3f80ad0356b042c44c6940418884aeab682b680866288c3d8fc8ea1b8a8313e0304cc5b0fe026e4cdfcc679e50b6bcacd125b73fdc89af42f56d569781f91291253896a5ea0828d142997ad618aaee812e38045f77ac2318925a6a34a7ef9ae7e64fe670196901821b9bd23d082495bf4f670c2b0a31bb96"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x81d}}, {0x34, &(0x7f00000003c0)=@string={0x34, 0x3, "5bb77e1fbf976e4ca3d8d83759f6056553bfe525788368ec1010ad43fc467d0ec8aca9cf847d200a8dcd133a67093979fd41"}}, {0x21, &(0x7f0000000400)=@string={0x21, 0x3, "2bf6d7b34f5f3c582366892e38f7e917ecd78355d2905e4ae9165b08d5bd74"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x447}}]}) 17:04:25 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x6229c0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x40003, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000140)) read$fb(r1, &(0x7f0000000040)=""/236, 0xec) 17:04:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x9810}, 0x4040000) 17:04:25 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@ipv6_delroute={0x10c, 0x19, 0x8, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x10, 0xa3, 0xfd, 0x4, 0xff, 0x0, 0x3000}, [@RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_METRICS={0x9a, 0x8, 0x0, 0x1, "24ece65815530e8f8e18de732bf842b2039bf72e951644c4a30dccd56a9c82d6ad5a0653cf117eb6a8f42c6015e1b3756dbbe9407356ba7bbc1362a5737675df1b674bed59d0d47f13234c5faf8c17e00606a8305622a073e4baa01db189e3754b8f1f85f182d2577c4c74ede2409961d6c50dc4422ae957efde9bdc781dbd96d0dc0b50ddb4e2722b69954bceb41a734a6b463a26dc"}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_GATEWAY={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}, @RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1000, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000140)={0xd1e, 0x4, &(0x7f0000000040)=[0x5, 0x9, 0xaa4, 0xfffe], &(0x7f0000000080)=[0x76, 0xff, 0x6, 0x4, 0x7, 0x8], &(0x7f00000000c0)=[0xffff], &(0x7f0000000100)=[0x9, 0x7452, 0x6, 0x2a, 0x3, 0xffc0]}) ioctl$FBIO_WAITFORVSYNC(r1, 0x5421, 0x400000) [ 3510.616954][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3510.627968][T19136] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3510.647434][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3510.656480][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.661493][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3510.675847][T19136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.716535][T19136] usb 1-1: Product: syz [ 3510.723432][T19845] usb 3-1: Product: syz [ 3510.729661][T20054] usb 2-1: USB disconnect, device number 30 [ 3510.747899][T19136] usb 1-1: Manufacturer: syz [ 3510.755980][T19845] usb 3-1: Manufacturer: syz 17:04:25 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1, 0x41) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x7fff, 0xa, &(0x7f0000000040)=[0x4c, 0x5, 0x8, 0x9, 0x3, 0x2, 0x11, 0x7, 0x0, 0x200], &(0x7f0000000080)=[0x1, 0x0, 0x8], &(0x7f00000000c0)=[0xfff9, 0x7, 0x3f, 0x8], &(0x7f0000000100)=[0x4f, 0xfff, 0xfff, 0x0, 0x7f, 0x9a, 0x1000, 0x4]}) 17:04:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) r1 = socket(0x1e, 0x2, 0x3) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setlink={0x3c, 0x13, 0x30d, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x562e}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) [ 3510.774687][T19136] usb 1-1: SerialNumber: syz 17:04:25 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x40000) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/133) r1 = getpid() ptrace$setregset(0x4205, r1, 0x0, 0x0) ptrace$getenv(0x4201, r1, 0x9, &(0x7f0000000100)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x5421, 0x750000) [ 3510.801361][T19845] usb 3-1: SerialNumber: syz [ 3510.898601][T19136] cdc_ncm 1-1:1.0: bind() failure [ 3511.103960][T19136] usb 1-1: USB disconnect, device number 34 [ 3511.136876][T20054] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 3511.153107][T19845] usb 3-1: USB disconnect, device number 66 [ 3511.376775][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3511.497350][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3511.508301][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3511.523992][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3511.538559][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3511.553052][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3511.567353][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3511.736770][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3511.745858][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3511.757605][T20054] usb 2-1: Product: syz [ 3511.761848][T20054] usb 2-1: Manufacturer: syz [ 3511.766512][T20054] usb 2-1: SerialNumber: syz [ 3511.906731][T19845] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3511.966705][T10961] Bluetooth: hci2: command 0x0401 tx timeout [ 3512.022770][ T8794] udc-core: couldn't find an available UDC or it's busy [ 3512.029883][ T8794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3512.076931][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3512.088734][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3512.108432][T20054] usb 2-1: USB disconnect, device number 31 [ 3512.156923][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3512.284889][T19845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3512.295103][T19845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3512.306904][T19845] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3512.487049][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3512.496177][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.513468][T19845] usb 3-1: Product: syz [ 3512.523000][T19845] usb 3-1: Manufacturer: syz [ 3512.533850][T19845] usb 3-1: SerialNumber: syz 17:04:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000040)=0x20) 17:04:27 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x50000, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x2) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x18}) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x0, 0x400000) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) 17:04:27 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x80000000, 0x4) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x31, 0x2}) 17:04:27 executing program 2: connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0xca6d}}}, 0x3a) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x8000, 0x3, 0x4}) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@profile={'changeprofile ', '#\x00'}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000001e40)=""/188, 0xbc, 0x40012000, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x0, 0x1}, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000002000009050302000000004d5d4861de71ef7340c5c293bfcda1e317fc7326cc6586bcf2d53842e5294b6798f479e9b433db1a33b7d375b735c8b69457d2d8022ddcd5972b057b5084e4f68c72cc26bfc79963a417534b387128a80db89c74a557d2740320f033b71df56a0ea2dcc30cdd967d45fb243bc198fbd4af7b92cb3a374bdc989debd609ead095"], 0x0) 17:04:27 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000201000000090400000102"], 0x0) [ 3512.733720][T19845] usb 3-1: USB disconnect, device number 67 [ 3512.816803][T20054] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 3512.852663][ T34] audit: type=1400 audit(1605114267.737:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="#" pid=8867 comm="syz-executor.2" [ 3513.026757][T23339] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3513.067041][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3513.186996][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3513.197987][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3513.216707][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3513.226434][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3513.238056][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3513.248645][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3513.266710][T23339] usb 1-1: Using ep0 maxpacket: 8 [ 3513.346545][T19845] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3513.386671][T23339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3513.397494][T23339] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3513.406368][T23339] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3513.422497][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3513.432022][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3513.440546][T20054] usb 2-1: Product: syz [ 3513.445828][T20054] usb 2-1: Manufacturer: syz [ 3513.451744][T20054] usb 2-1: SerialNumber: syz [ 3513.587276][T23339] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3513.596362][T23339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3513.604457][T23339] usb 1-1: Product: syz [ 3513.608893][T23339] usb 1-1: Manufacturer: syz [ 3513.614730][T23339] usb 1-1: SerialNumber: syz [ 3513.626643][T19845] usb 3-1: Using ep0 maxpacket: 8 17:04:28 executing program 1: getpgrp(0xffffffffffffffff) 17:04:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x13c, 0x19, 0x300, 0x70bd28, 0x25dfdbfb, {0x1c, 0x80, 0x20, 0x3f, 0xfd, 0x1, 0xff, 0x5, 0x900}, [@RTA_NEWDST={0x84, 0x13, [{0x7d, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x2}, {0xcb}, {0x9}, {0x800, 0x0, 0x1}, {0x519, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0xffeba, 0x0, 0x1}, {0x400}, {0x9}, {0x4}, {0x8001}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x200, 0x0, 0x1}, {0x6, 0x0, 0x1}, {}, {0x80}, {0x76}, {0x9}, {0x81}, {0x8}, {0x8}, {0x3f}, {0xfffc0, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0xb19}, {0x7}, {0x6}]}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}, @RTA_NEWDST={0x84, 0x13, [{0xce}, {0xd62}, {0x9, 0x0, 0x1}, {0x5}, {0x7}, {0x800, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7ae2}, {0x364, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1d5d}, {0x3}, {0x0, 0x0, 0x1}, {0x1}, {0x1}, {0x13}, {0x1065}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6}, {0x3df, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x131, 0x0, 0x1}, {0xffff9, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x10000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xb45c) write$fb(r1, &(0x7f0000000100)="faa49510de4ce17e3f6d13a58a44be01192c6f92631b9d2bd880b5ca476c5afab593d970e1545709e636b2625f950c5b52b20322951d1bd984b252a071bbdb55cc40681994c03bd7243d8baec3004cb66724f2dd6483959c53412e33f656b92312c7b426dbb2cf32cc171c3845c7f823ec5453a1e6c9faac42c860784064d29c3c7d3bee941747d52b30efb1124e98c3534147d0dce278e3aba458a8cadea6c96ab1230b005455d714dbfae000b027bb06c1e799912a3d68563b1e6c4de27884dfc717c2a07b86", 0xc7) 17:04:28 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x2, 0x400000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x501000, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000180)) [ 3513.736716][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3513.744839][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3513.757314][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3513.789308][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3513.794653][T20054] usb 2-1: USB disconnect, device number 32 17:04:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000007c0)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000240)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000340)={0x3f, [0x3, 0x3], 0x9}, 0x10) getegid() r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x5421, 0x400000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5f19f6aa", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf6286269d904f8c230005000000050029000100000008003200070000000600280000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000280)) 17:04:28 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01007eb500000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@alg, &(0x7f0000000000)=0x80) [ 3513.833262][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3513.867294][T23339] usb 1-1: USB disconnect, device number 35 17:04:28 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x1, 0x90001) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, 0xffffffffffffffff) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x402000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r3, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x4, 0x4, 0x9, 0x9, 0x0, 0x7, 0x20, 0x0, 0x7, 0x5, 0x20, 0x80, 0x9}, 0xe) 17:04:28 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) r1 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x9, 0x4100) getpeername$l2tp(r1, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) [ 3513.910992][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3513.980168][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 17:04:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x1ed700, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3514.030801][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:04:29 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x3c00, 0x600, 0x40, 0x1e0, 0x44c, 0x3, 0x1, 0x1, {0x5, 0x4d}, {0x800, 0x1, 0x1}, {0x6, 0x9}, {0x10000, 0x80000001}, 0x2, 0x80, 0x6, 0x1f, 0x1, 0x7, 0x2, 0x2, 0x25c, 0x8c8, 0x1f, 0x39, 0x10, 0x302, 0x0, 0x6}) clock_gettime(0x1, &(0x7f0000000000)) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="78010020", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf25030000001800018014000300fe8000000000000000000000000000aa2c000180060002002b000000060002000000000008000b0073697000080005000400000008000800ff03000008000600000000003400018014000300fc000000000000000000000000000000080009000a000000090006006e6f6e6500000000060001000a0000005c00018008000b00736970000600020033000000060001000200000008000500010000000c000700210000003600000014000300fe880000000000000000000000000101080009006f0000000800080000000000060001000a00000018000280140001000000000000000000000000000000000008000400000200003800038008000500e00000021400060000000000000000000000000000000000060007004e21000008000100000000000800030000000000080006000200000028000280140001000000000000000000000000000000000105000d000100000006000b0002000000"], 0x178}}, 0x4000) r1 = getpid() ptrace$setregset(0x4205, r1, 0x0, 0x0) waitid(0x3, r1, &(0x7f0000000340), 0x2, &(0x7f0000000400)) [ 3514.247144][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3514.256308][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3514.271247][T19845] usb 3-1: Product: syz [ 3514.280811][T19845] usb 3-1: Manufacturer: syz [ 3514.285393][T19845] usb 3-1: SerialNumber: syz [ 3514.357017][T20054] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3514.596541][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3514.716605][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3514.732151][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3514.742110][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3514.763158][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3514.779433][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3514.793051][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3514.956584][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3514.965807][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3514.975474][T20054] usb 2-1: Product: syz [ 3514.981278][T20054] usb 2-1: Manufacturer: syz [ 3514.987248][T20054] usb 2-1: SerialNumber: syz [ 3515.266631][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3515.281073][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3515.293522][T20054] usb 2-1: USB disconnect, device number 33 17:04:30 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x1, 0x0, 0x9}}) syz_usb_connect$cdc_ncm(0x5, 0x10b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x2, 0x1, 0x7, 0x88, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "dc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x6}, [@mdlm_detail={0x9c, 0x24, 0x13, 0x1, "6504b02be8e6fdbdc3e33e1933a797715e8529a8c00bc4bbb1e72ed044f20951a09d7b99ff15ceae531853cd3c36f73bdcd268e296349c666244b302c46180524fb15a52ae6a9db63f110aaaa572c361856f736259a276c4159393d0032e73c488055f9673f49b8fefaec1b19690c30683ab76c9434cb3f543599762e2a2b1e849b3e710255e785150204446410c4e2cd6da6b68821a847e"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x92, 0x19}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x1, 0x72}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xff}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x31, 0xff, 0x0, 0x10, 0xf3}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0xc, 0xd1e}]}, 0x1, [{0xc9, &(0x7f0000000280)=@string={0xc9, 0x3, "4d30cedab94c1097b1ca5cbfd9d1bacb2f0c9768236e26e627f8b4bc4a5117dccd0d7bd83fc860bcf5223eae4949c5495b4c0b0d6213bb6f28f47b4bb930e107316d6d0e59c94f8c402d534242ce5c0f5cc2e7b74028fcea017bdd8a8bc9b74a0b40ae066944019ac8d0de947fba4af4d761fb3caf726b491ec091c97f323554303db48570a4bc07f4d540835848beaa9a2745579c8b9cc4770516b366d5d27aa507ee3ed0e7a9175a5f99370a46d6559752b020cbd5f8af33fa99104b6751b82564a33767cbd4"}}]}) 17:04:30 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x200, 0x400) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000100)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0xa0, 0x360, 0x0, 0x4b0, 0x4, 0x0, 0x20, 0x2, {0x7, 0x8}, {0x2, 0xff}, {0x4, 0xffffffc0}, {0x1000, 0x2, 0x1}, 0x0, 0x1, 0x6, 0x6, 0x1, 0xc3d, 0x523, 0xfdc, 0xdffa, 0x7ff, 0x0, 0x6, 0x6, 0x0, 0x0, 0x8}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) read$fb(0xffffffffffffffff, &(0x7f0000000300)=""/16, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x523200, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x100, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x5421, 0x400000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={r4, r5+60000000}, &(0x7f00000002c0)) 17:04:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000100)={0xfffffffc, 0x2, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)}) 17:04:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000201000000090400000102"], 0x0) [ 3515.796665][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3515.827788][T19845] cdc_ncm 3-1:1.1: bind() failure 17:04:30 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000)) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1800, 0x4) [ 3515.883580][T19845] usb 3-1: USB disconnect, device number 68 17:04:30 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) write$fb(r0, &(0x7f0000000000)="e398f299c0afa6fd0b846456aff588d50be3586652136d6ea81d71f8f3f2472d927be23203054c7bb78dc60221189c60e24c532a7609e7a758888064963ee77e98f3e2dfc8860b9e36fdc794bd1c954fc09fc9b29618cf1374757ac5e7526f9dfbdbfd06119bf56a9ff572e9ef82eb5e4401bdb981d4969c544c3395ff9cbf6f932817e6c8d2c6bcab23c4137c08a62df6c5f674f0bc209450284e3343a30378ddc6f406fc3e7334eb9d3d29c3716ae65819fe1daf0013e34ad52a45636c452445d453bcd2a55b", 0xc7) [ 3516.066573][T19136] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3516.166489][T20054] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 3516.296545][T19845] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3516.326444][T19136] usb 2-1: Using ep0 maxpacket: 8 [ 3516.406414][T20054] usb 1-1: Using ep0 maxpacket: 8 [ 3516.456484][T19136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3516.467992][T19136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3516.480443][T19136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3516.491059][T19136] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3516.502548][T19136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3516.513076][T19136] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3516.526565][T20054] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3516.545191][T20054] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3516.554308][T20054] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3516.556655][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3516.697053][T19136] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3516.706093][T19136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3516.718484][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3516.728770][T20054] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3516.736316][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3516.744169][T20054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3516.757806][T19136] usb 2-1: Product: syz [ 3516.764470][T20054] usb 1-1: Product: syz [ 3516.764586][T19136] usb 2-1: Manufacturer: syz [ 3516.768865][T20054] usb 1-1: Manufacturer: syz [ 3516.775650][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3516.784936][T20054] usb 1-1: SerialNumber: syz [ 3516.790627][T19136] usb 2-1: SerialNumber: syz [ 3516.798306][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3516.812888][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3516.842997][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:04:31 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x9, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x9}}}}}}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 17:04:31 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4000, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) write$apparmor_current(r1, &(0x7f00000001c0)=@profile={'stack ', '/dev/fb1\x00'}, 0xf) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) socket$pppl2tp(0x18, 0x1, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x40, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb1\x00', 0x200982, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x40840, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000080)) 17:04:31 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0xe00, 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:31 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x30, 0xd18, 0xf00, 0xf0, 0x7ff, 0x3c, 0x20, 0x2, {0x4, 0x7}, {0x7fffffff, 0x1}, {0x4, 0x20, 0x2}, {0xe62a, 0x7, 0x1}, 0x7, 0x51, 0x0, 0x7ff, 0x1, 0xb2, 0x6, 0x7, 0x7f, 0x100, 0x46eb, 0x2, 0x23, 0x2, 0x1}) [ 3516.997088][T19136] cdc_ncm 2-1:1.0: bind() failure 17:04:31 executing program 3: syz_usb_connect$cdc_ncm(0x3, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0xff, 0xc0, 0x65, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1f, 0x3ff, 0x80}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0x3b00}, @dmm={0x7, 0x24, 0x14, 0x4, 0xff09}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x54}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2b, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x44, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1f, 0x2}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x4, 0x2, 0x3, 0x8, 0xff}, 0x6d, &(0x7f0000000100)={0x5, 0xf, 0x6d, 0x2, [@generic={0x5d, 0x10, 0x2, "68d28a03404334d2251cb0a9d7a6e43831ab5a82368937671054da757b2ee8cf10ca3a76773ff08d5c6995e827147e2026fe284fd7570a9586ca00b55c57db412272009de9c9c50f2509e964b661dfc005ecf893997cb45cc057"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x40, 0xff, 0x2, 0x6}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x816}}, {0x90, &(0x7f0000000200)=@string={0x90, 0x3, "df18397d24050e08a222e280c54598d7ae4ea02f4c50772244d8dbeb604b7875965e3fa7a7934161987eb383016eb0b1f1f706685f0af6c68430baf1e48f7aa918e7ad3c82cd1c593a547800c7966fbe2a3b00d4ff75a1fc8d0408d35a2db8a4fbb03f303462e10895bd273bfd364faf66287c42753ee39b73c79b4f6fe6403e20b0a2b497530ee45753d0672ebd"}}]}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3517.027946][T19136] cdc_ncm 2-1:1.1: bind() failure [ 3517.070145][T19136] usb 2-1: USB disconnect, device number 34 [ 3517.078394][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3517.102404][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3517.155426][T19845] usb 3-1: Product: syz [ 3517.180169][T19845] usb 3-1: Manufacturer: syz [ 3517.206606][T19845] usb 3-1: SerialNumber: syz [ 3517.220974][T10961] usb 1-1: USB disconnect, device number 36 [ 3517.473333][ T8977] udc-core: couldn't find an available UDC or it's busy [ 3517.480733][ T8977] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3517.496722][T19136] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3517.516650][T22222] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3517.547124][T19845] cdc_ncm 3-1:1.0: bind() failure [ 3517.569802][T19845] cdc_ncm 3-1:1.1: bind() failure [ 3517.587121][T19845] usb 3-1: USB disconnect, device number 69 [ 3517.756434][T19136] usb 2-1: Using ep0 maxpacket: 8 [ 3517.907067][T19136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3517.918080][T19136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3517.929722][T19136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3517.941208][T19136] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3517.952596][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 3517.962792][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3518.137098][T19136] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3518.146150][T19136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.157250][T19136] usb 2-1: Product: syz [ 3518.159452][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3518.173905][T19136] usb 2-1: Manufacturer: syz [ 3518.178852][T19136] usb 2-1: SerialNumber: syz [ 3518.187285][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.195593][T22222] usb 4-1: Product: ᣟ紹Ԥࠎ⊢胢䗅힘亮⾠偌≷䭠畸庖ꜿ鎧慁纘莳渁놰栆੟웶や迤ꥺ㲭춂夜吺x雇빯㬪퐀痿ﲡҍ팈ⵚ꒸냻〿戴࣡붕㬧㛽꽏⡦䉼㹵鯣읳供㹀뀠뒢厗南某봮 [ 3518.220266][T22222] usb 4-1: Manufacturer: ࠖ [ 3518.225204][T22222] usb 4-1: SerialNumber: syz [ 3518.286395][T19845] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3518.527698][T19136] cdc_ncm 2-1:1.0: bind() failure [ 3518.540628][T19136] cdc_ncm 2-1:1.1: bind() failure [ 3518.552868][T19136] usb 2-1: USB disconnect, device number 35 [ 3518.559163][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3518.569431][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3518.589857][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3518.621864][T22222] usb 4-1: USB disconnect, device number 99 [ 3518.676521][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3518.688287][T19845] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3518.702012][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3518.715902][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3518.726293][T19845] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3518.735925][T19845] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:04:33 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030000025c0002010000000919000001020d00000524060001052400ea000d240f0100000000000000000006241a0018000905817f759abde249972916a52af0bf2c6347030004010000020d00000904010102020d00000905820200000000000905030200000000000ad00e17fef23c3357ad78799518c75330dcd6e0c18561270686847c0a26aa256590"], 0x0) geteuid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000800) 17:04:33 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:33 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x5b0, 0x10, 0xb56, 0x2000, 0x6, 0x101, 0x2, 0x1, {0x9, 0x1}, {0x1ff, 0x1f}, {0x4, 0x4185}, {0xf7ba, 0x52e}, 0x0, 0x2, 0x673, 0x6, 0x0, 0xfffff90b, 0x4, 0xdb9, 0x7, 0x1000, 0x4, 0x9, 0x24, 0x2, 0x0, 0xb}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:33 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c000201000000090400000102"], 0x0) [ 3518.956468][T19845] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3518.965532][T19845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3519.002294][T19845] usb 3-1: Product: syz [ 3519.013572][T19845] usb 3-1: Manufacturer: syz 17:04:34 executing program 5: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) [ 3519.056319][T19845] usb 3-1: can't set config #1, error -71 [ 3519.076657][T19845] usb 3-1: USB disconnect, device number 70 17:04:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) write$fb(r1, &(0x7f0000000080)="8a16bafc0c7280c6a8089a770626e74548c7b8c380a882b812317781ea639c64ce7e2f604ec1d1222719223db3550d5b4fa547acedefadafc80a722a3be3d713a98f4214015f281c62f76893446db73067765f7981df004f71a925360e74fb69a4fa7f1c6de16442adf0c3278972006bbb5c4184052716f5c0fba0fd61cc3e78ab14d5f729b4440e3e9d79f96684037058810f638c6966b1d667db6e3d75e097574629b393e599c1b1f87a85f6a8700f67e1e1759d9f6dd05db139726a4cbb19d9689acf7021f1cdc2beb1ce525898e26a7fd74bb2ff", 0xd6) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000081c0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000008040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010023, &(0x7f0000008200)={0x0, r4+10000000}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_delroute={0x24, 0x19, 0x200, 0x70bd25, 0x25dfdbff, {0x1c, 0x80, 0x10, 0x3, 0xfc, 0x4, 0xc8, 0x3, 0x1000}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004011}, 0x20000000) 17:04:34 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) [ 3519.276365][T20054] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 3519.284031][T18982] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 3519.316329][T22222] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3519.516202][T19845] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3519.516234][T20054] usb 1-1: Using ep0 maxpacket: 8 [ 3519.528934][T18982] usb 2-1: Using ep0 maxpacket: 8 [ 3519.646397][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3519.657389][T20054] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3519.667536][T20054] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3519.678235][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3519.688377][T20054] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3519.701654][T18982] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3519.711644][T18982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3519.726975][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 3519.746806][T22222] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3519.796404][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3519.836940][T19845] usb 3-1: no configurations [ 3519.841567][T19845] usb 3-1: can't read configurations, error -22 [ 3519.876384][T20054] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3519.885415][T20054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3519.895102][T18982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3519.906163][T18982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3519.915325][T18982] usb 2-1: Product: syz [ 3519.921199][T18982] usb 2-1: Manufacturer: syz [ 3519.926755][T20054] usb 1-1: Product: syz [ 3519.930941][T20054] usb 1-1: Manufacturer: syz [ 3519.934573][T22222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3519.935527][T20054] usb 1-1: SerialNumber: syz [ 3519.945039][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3519.956612][T18982] usb 2-1: SerialNumber: syz [ 3519.957647][T22222] usb 4-1: Product: ᣟ紹Ԥࠎ⊢胢䗅힘亮⾠偌≷䭠畸庖ꜿ鎧慁纘莳渁놰栆੟웶や迤ꥺ㲭춂夜吺x雇빯㬪퐀痿ﲡҍ팈ⵚ꒸냻〿戴࣡붕㬧㛽꽏⡦䉼㹵鯣읳供㹀뀠뒢厗南某봮 [ 3519.989256][T22222] usb 4-1: Manufacturer: ࠖ [ 3519.994210][T22222] usb 4-1: SerialNumber: syz [ 3520.016296][T19845] usb 3-1: new high-speed USB device number 72 using dummy_hcd 17:04:34 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfe}}}}}}}]}}, 0x0) 17:04:34 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x422401, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:34 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000100)) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbda25060042e208003100000000020b8435bd0005002e"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 3520.118472][T18982] cdc_ncm 2-1:1.0: bind() failure [ 3520.134870][T18982] cdc_ncm 2-1:1.1: bind() failure 17:04:35 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x20701, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3520.176243][T18982] usb 2-1: USB disconnect, device number 36 [ 3520.246364][T22222] cdc_ncm 4-1:1.0: bind() failure [ 3520.252748][T20054] usb 1-1: USB disconnect, device number 37 [ 3520.286271][T19845] usb 3-1: Using ep0 maxpacket: 8 17:04:35 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7, 0x4ea100) write$rfkill(r0, &(0x7f0000000200)={0x1, 0x7, 0x2, 0x0, 0x1}, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000240), 0x8) ioctl$FBIO_WAITFORVSYNC(r1, 0x5421, 0x750000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x28}}, 0x4) [ 3520.295440][T22222] cdc_ncm 4-1:1.1: bind() failure [ 3520.341561][T22222] usb 4-1: USB disconnect, device number 100 [ 3520.348631][T19845] usb 3-1: no configurations [ 3520.354607][T19845] usb 3-1: can't read configurations, error -22 [ 3520.375643][T19845] usb usb3-port1: attempt power cycle [ 3520.626200][T18982] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3520.866112][T18982] usb 2-1: Using ep0 maxpacket: 8 [ 3520.986772][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3520.997756][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3521.013237][T18982] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3521.025834][T18982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3521.040091][T18982] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3521.053211][T18982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3521.136170][T19845] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3521.216198][T18982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3521.225345][T18982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3521.236861][T18982] usb 2-1: Product: syz [ 3521.237074][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3521.241099][T18982] usb 2-1: Manufacturer: syz [ 3521.251103][T18982] usb 2-1: SerialNumber: syz [ 3521.306287][T19845] usb 3-1: no configurations [ 3521.311024][T19845] usb 3-1: can't read configurations, error -22 [ 3521.476135][T19845] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3521.536151][T18982] cdc_ncm 2-1:1.0: bind() failure [ 3521.544695][T18982] cdc_ncm 2-1:1.1: bind() failure [ 3521.568547][T18982] usb 2-1: USB disconnect, device number 37 [ 3521.586206][T19845] usb 3-1: Using ep0 maxpacket: 8 [ 3521.636415][T19845] usb 3-1: no configurations [ 3521.641437][T19845] usb 3-1: can't read configurations, error -22 [ 3521.653781][T19845] usb usb3-port1: unable to enumerate USB device 17:04:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x589040, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0x1c, 0x1}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:36 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xab3644988324eee2}, 0x2000c042) 17:04:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xafdd}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40050) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000100)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009700)=[{{&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/108, 0x6c}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/34, 0x22}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/212, 0xd4}], 0x7, &(0x7f00000008c0)=""/195, 0xc3}, 0x7}, {{&(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000a40)=""/165, 0xa5}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/151, 0x97}, {&(0x7f0000001bc0)=""/57, 0x39}, {&(0x7f0000001c00)=""/105, 0x69}, {&(0x7f0000001c80)=""/155, 0x9b}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/59, 0x3b}, {&(0x7f0000002d80)=""/250, 0xfa}], 0x9}, 0x9}, {{&(0x7f0000002f40)=@tipc=@id, 0x80, &(0x7f0000003140)=[{&(0x7f0000002fc0)=""/43, 0x2b}, {&(0x7f0000003000)=""/215, 0xd7}, {&(0x7f0000003100)=""/30, 0x1e}], 0x3, &(0x7f0000003180)=""/168, 0xa8}, 0xd306}, {{&(0x7f0000003240)=@nl=@unspec, 0x80, &(0x7f0000004880)=[{&(0x7f00000032c0)=""/163, 0xa3}, {&(0x7f0000003380)=""/231, 0xe7}, {&(0x7f0000003480)=""/85, 0x55}, {&(0x7f0000003500)=""/223, 0xdf}, {&(0x7f0000003600)=""/208, 0xd0}, {&(0x7f0000003700)=""/175, 0xaf}, {&(0x7f00000037c0)=""/186, 0xba}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x8, &(0x7f0000004900)=""/181, 0xb5}, 0xffffffff}, {{&(0x7f00000049c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000004a40)=""/56, 0x38}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x2, &(0x7f0000005ac0)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000006ac0)=@can, 0x80, &(0x7f0000007f00)=[{&(0x7f0000006b40)=""/41, 0x29}, {&(0x7f0000006b80)=""/156, 0x9c}, {&(0x7f0000006c40)=""/138, 0x8a}, {&(0x7f0000006d00)=""/42, 0x2a}, {&(0x7f0000006d40)=""/155, 0x9b}, {&(0x7f0000006e00)=""/231, 0xe7}, {&(0x7f0000006f00)=""/4096, 0x1000}], 0x7, &(0x7f0000007f80)=""/217, 0xd9}, 0x6e65}, {{&(0x7f0000008080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000008100), 0x0, &(0x7f0000008140)=""/248, 0xf8}, 0x4}, {{0xffffffffffffffff, 0x0, &(0x7f0000008480)=[{&(0x7f0000008240)=""/141, 0x8d}, {&(0x7f0000008300)=""/180, 0xb4}, {&(0x7f00000083c0)=""/188, 0xbc}], 0x3}, 0x8}, {{&(0x7f00000084c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000009640)=[{&(0x7f0000008540)=""/4096, 0x1000}, {&(0x7f0000009540)=""/210, 0xd2}], 0x2, &(0x7f0000009680)=""/108, 0x6c}, 0xb723}], 0x9, 0x1, &(0x7f0000009940)={0x0, 0x989680}) setsockopt$inet_tcp_buf(r1, 0x6, 0x12, &(0x7f0000009980)="16d32b32ce781dfd4578ad674aa1a543ac125c53387dcc40d513baa3ce5656ba1a3bcd152edbeb55b058a29699dd486c5f05c2ef95a0d153c2d00a1de4cb94c15fe2847a09b5b812748fbc2c04a8d814dd162ec1f099a7b73d5a180177195da3ba24deed90491694f68928b8ae22ce3eab4efa34d82e5609e36ef9037134ad77ca34a524fb0e7e59281f06e1f5694c4ff804aaab826f8befbdbf46a78d3ffb318d7f3d086307ff3070fe834a70f0fa57d571e6cb8515f56d7b4a7e35fff6e710d53d415546e0cd143e2086b216009f9fe54d7257e6dd1ed6ad4aac67181a45fd4aae35c65848c41f5a87606a5b7887a17e13c213a332", 0xf6) 17:04:36 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100302009d008249b4c6cd982e9400082505a1a440000102030109025c00020100c0000904000011020d0000052406000105240000000d240f0100000000000000000006241a00000009008eec3c34f9d5cfa63ce9065d1e85e1000000090401000904010102020d0000090582021000000000000000"], 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) accept$alg(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x111000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) socket(0x27, 0x2, 0x5) accept$alg(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x108040, 0x0) write$dsp(r3, &(0x7f0000000080)="3d52e280ab1c2bc0f12d192c4e1ffa8612", 0x11) 17:04:36 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001"], 0x0) 17:04:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/196, 0xc4}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/53, 0x35}], 0x7, &(0x7f0000000580)=""/200, 0xc8}, 0x8}, {{&(0x7f0000000680)=@nl=@unspec, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/82, 0x52}, {&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f00000008c0)=""/212, 0xd4}, {&(0x7f00000009c0)=""/102, 0x66}, {&(0x7f0000000a40)=""/157, 0x9d}, {&(0x7f0000000b00)=""/204, 0xcc}, {&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/56, 0x38}], 0x9, &(0x7f0000000d40)=""/187, 0xbb}, 0x5}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000e00)=""/72, 0x48}, {&(0x7f0000000e80)=""/47, 0x2f}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/67, 0x43}, {&(0x7f0000001f40)=""/216, 0xd8}, {&(0x7f0000002040)=""/20, 0x14}], 0x6}, 0x5da9034c}, {{&(0x7f0000002100)=@isdn, 0x80, &(0x7f0000002340)=[{&(0x7f0000002180)=""/129, 0x81}, {&(0x7f0000002240)=""/219, 0xdb}], 0x2}, 0xff}, {{&(0x7f0000002380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/70, 0x46}, {&(0x7f0000003480)=""/7, 0x7}, {&(0x7f00000034c0)=""/39, 0x27}, {&(0x7f0000003500)=""/133, 0x85}, {&(0x7f00000035c0)=""/160, 0xa0}, {&(0x7f0000003680)=""/51, 0x33}], 0x7, &(0x7f0000003740)=""/190, 0xbe}, 0x1}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003800)=""/41, 0x29}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/49, 0x31}, {&(0x7f0000004880)=""/7, 0x7}, {&(0x7f00000048c0)=""/232, 0xe8}], 0x5}, 0x8}, {{&(0x7f0000004a40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004ac0)=""/67, 0x43}, {&(0x7f0000004b40)=""/141, 0x8d}], 0x2, &(0x7f0000004c40)=""/242, 0xf2}, 0xfffffff9}, {{&(0x7f0000004d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004dc0)=""/33, 0x21}, {&(0x7f0000004e00)=""/187, 0xbb}], 0x2, &(0x7f0000004f00)=""/177, 0xb1}, 0x3ff}], 0x8, 0x0, &(0x7f00000051c0)={0x77359400}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000005240)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000005300)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x20, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}]}, 0x20}}, 0x4040090) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x80402, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3522.276113][T18982] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 3522.336004][T20054] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 3522.416071][T19845] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3522.516002][T18982] usb 2-1: Using ep0 maxpacket: 8 [ 3522.576408][T20054] usb 1-1: Using ep0 maxpacket: 8 [ 3522.616125][T19845] usb 3-1: device descriptor read/64, error 18 [ 3522.637399][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3522.648317][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3522.661391][T18982] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3522.671479][T18982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3522.682923][T18982] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3522.693374][T18982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3522.704449][T20054] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3522.716270][T20054] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3522.725148][T20054] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3522.896157][T18982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3522.905336][T18982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3522.916073][T19845] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3522.924477][T20054] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3522.933553][T20054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3522.941672][T18982] usb 2-1: Product: syz [ 3522.946126][T18982] usb 2-1: Manufacturer: syz [ 3522.950721][T18982] usb 2-1: SerialNumber: syz [ 3522.956026][T20054] usb 1-1: Product: syz [ 3522.960255][T20054] usb 1-1: Manufacturer: syz [ 3522.966070][T20054] usb 1-1: SerialNumber: syz [ 3523.008182][T20054] cdc_ncm 1-1:1.0: bind() failure 17:04:38 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff6ba7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24000005) 17:04:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) socket$pppl2tp(0x18, 0x1, 0x1) 17:04:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x12400, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) ioctl$FBIOBLANK(r0, 0x4611, 0x1) 17:04:38 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r0 = socket(0x2, 0x3, 0x87) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b80)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="d0aa1c1f08c0843d59b0ac2fa7310bc8ff0400", @ANYRES16=r1, @ANYBLOB="00022cbd7000fedbdf2504000000740003801400020073797a5f74756e00000000000000000014000600fe88000000000000000000000000000108000500ffffffff060007004e23000014000600fc010000000000000000000000000001060007004e2400001400020076657468315f746f5f7465616d0000000800050064010100"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x25c800, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x5421, 0x400000) [ 3523.136032][T19845] usb 3-1: device descriptor read/64, error 18 [ 3523.206214][T18982] cdc_ncm 2-1:1.0: bind() failure 17:04:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x36, 0x1}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) write$fb(r1, &(0x7f0000001080)="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", 0x10c7) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) [ 3523.247753][T18982] cdc_ncm 2-1:1.1: bind() failure [ 3523.256341][T19845] usb usb3-port1: attempt power cycle [ 3523.294947][T18982] usb 2-1: USB disconnect, device number 38 17:04:38 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x25c401, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) 17:04:38 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x900, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5f}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe0}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000088) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x98c}) [ 3523.352336][ T9774] usb 1-1: USB disconnect, device number 38 17:04:38 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0xea, 0x0, 0x200, 0x10ff7e1b95bdfc1d, @loopback, @mcast2, 0x7, 0x7, 0x1e, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delvlan={0x64, 0x71, 0x800, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7f}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) r2 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000300)=""/154) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) r4 = socket(0xa, 0x1, 0x9) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) [ 3523.745906][T18982] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3523.985883][T18982] usb 2-1: Using ep0 maxpacket: 8 [ 3523.995892][T19845] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3524.096568][T19845] usb 3-1: Invalid ep0 maxpacket: 0 [ 3524.108699][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3524.122115][T18982] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3524.134969][T18982] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3524.145100][T18982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3524.156636][T18982] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3524.166986][T18982] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3524.255882][T19845] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3524.336596][T18982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3524.345860][T18982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3524.353874][T18982] usb 2-1: Product: syz [ 3524.367085][T19845] usb 3-1: Invalid ep0 maxpacket: 0 [ 3524.367154][T18982] usb 2-1: Manufacturer: syz [ 3524.372540][T19845] usb usb3-port1: unable to enumerate USB device [ 3524.387079][T18982] usb 2-1: SerialNumber: syz [ 3524.676045][T18982] cdc_ncm 2-1:1.0: bind() failure [ 3524.683269][T18982] cdc_ncm 2-1:1.1: bind() failure [ 3524.709395][T18982] usb 2-1: USB disconnect, device number 39 17:04:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005f80)={'batadv0\x00'}) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="29001d4047ae911a98b2dc20fd0eab0000", @ANYRES16=0x0, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000100) 17:04:39 executing program 5: openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000004c0)={0x7, 0x1, &(0x7f0000000380)=[0x0], 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x3f, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8cf}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7fff, 0x0, 0x7f}, {0x6}, [@dmm={0x7, 0x24, 0x14, 0x12}, @mdlm_detail={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x6, 0xeb}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x7f, 0x0, 0x7c}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x24, 0xfffffffc}) getsockname$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) write$rfkill(r1, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) 17:04:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x240000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x367100, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={0x0, 0x8}) 17:04:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x80000, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r1, 0x0) [ 3525.415875][T20054] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3525.436490][ T9774] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 3525.665784][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3525.796668][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3525.807862][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3525.823673][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3525.836649][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3525.850938][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3525.864803][ T9774] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3525.872692][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3525.985944][ T9774] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3525.997045][ T9774] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3526.014972][ T9774] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3526.029395][ T9774] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3526.043298][ T9774] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3526.085973][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3526.095003][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3526.106344][T20054] usb 2-1: Product: syz [ 3526.110533][T20054] usb 2-1: Manufacturer: syz [ 3526.115132][T20054] usb 2-1: SerialNumber: syz [ 3526.246246][ T9774] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3526.255280][ T9774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3526.273773][ T9774] usb 6-1: Product: syz [ 3526.280599][ T9774] usb 6-1: Manufacturer: syz [ 3526.285191][ T9774] usb 6-1: SerialNumber: syz 17:04:41 executing program 1: connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 17:04:41 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001"], 0x0) 17:04:41 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x800000, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x750000) 17:04:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x5c5300, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:41 executing program 2: setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010001020100082505a1a440000102030109025c0002010000000904000011020d0000052406000105240000000d070f0100000000000000000006241a000000090581030000000000090401ffffffff005661363b553efe4514616d93000904010102020d00000905820200000000000905034200000000000e4acdf30af778f79961c3576150615d83c7683591e7275850036cf90510eb89853006a5cd962ba3d3c4c072f99134efa430fe4b21d11d779f8ee3320ff6122a59900d86aaa1076f18cb8a29532f12d60a5cf592e5609f4793af8d", @ANYRES64=0x0, @ANYRES64], 0x0) [ 3526.345910][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3526.376276][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3526.421042][T20054] usb 2-1: USB disconnect, device number 40 17:04:41 executing program 3: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000300)=""/36, 0x24}], 0x9, &(0x7f0000000340)}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r1, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000340)={0x2e, 0x2}) 17:04:41 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) prctl$PR_SET_PDEATHSIG(0x1, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0xfd, 0x0, 0x7, 0x8, 0x7, 0x81, 0xf9, 0xb2, 0x1f, 0xfe, 0x1, 0x2, 0x81, 0x1}, 0xe) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={r2, r3+60000000}, &(0x7f0000000080)) 17:04:41 executing program 3: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x5421, 0x400000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') [ 3526.655472][ T9774] cdc_ncm 6-1:1.0: bind() failure [ 3526.669615][ T9774] cdc_ncm 6-1:1.1: bind() failure [ 3526.686716][ T9774] usb 6-1: USB disconnect, device number 85 [ 3526.695871][T22222] usb 1-1: new high-speed USB device number 39 using dummy_hcd 17:04:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x2, 0x1, 0x1000062}}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000040)) [ 3526.765961][T23339] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3526.875695][T20054] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3526.947865][T22222] usb 1-1: Using ep0 maxpacket: 8 [ 3527.017066][T23339] usb 3-1: Using ep0 maxpacket: 8 [ 3527.066189][T22222] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3527.076581][T22222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3527.085580][T22222] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3527.155870][T20054] usb 2-1: Using ep0 maxpacket: 8 [ 3527.161390][T23339] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 3527.174821][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3527.186183][T23339] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3527.198650][T23339] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3527.214022][T23339] usb 3-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 3527.225326][T23339] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 3527.241982][T23339] usb 3-1: config 1 interface 1 has no altsetting 0 [ 3527.276365][T22222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3527.285397][T22222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3527.301668][T22222] usb 1-1: Product: syz [ 3527.305751][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3527.313930][T22222] usb 1-1: Manufacturer: syz [ 3527.321367][T22222] usb 1-1: SerialNumber: syz [ 3527.325118][T20054] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3527.338418][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3527.356245][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3527.366966][T20054] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3527.378003][T20054] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3527.387100][T22222] cdc_ncm 1-1:1.0: bind() failure [ 3527.406912][ T9774] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 3527.426972][T23339] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3527.436967][T23339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3527.444960][T23339] usb 3-1: Product: syz [ 3527.458882][T23339] usb 3-1: Manufacturer: syz [ 3527.463481][T23339] usb 3-1: SerialNumber: syz [ 3527.508676][T23339] cdc_ncm 3-1:1.0: skipping garbage [ 3527.514672][T23339] cdc_ncm 3-1:1.0: bind() failure [ 3527.566808][T20054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3527.575906][T20054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3527.583918][T20054] usb 2-1: Product: syz [ 3527.591338][T20054] usb 2-1: Manufacturer: syz [ 3527.603278][T20054] usb 2-1: SerialNumber: syz [ 3527.614647][T18982] usb 1-1: USB disconnect, device number 39 [ 3527.765491][T23339] usb 3-1: USB disconnect, device number 79 [ 3527.836233][ T9774] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3527.935984][T20054] cdc_ncm 2-1:1.0: bind() failure [ 3527.941177][ T9774] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3527.954557][T20054] cdc_ncm 2-1:1.1: bind() failure [ 3527.962566][ T9774] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3527.976710][T20054] usb 2-1: USB disconnect, device number 41 [ 3527.992017][ T9774] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3528.004513][ T9774] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3528.018029][ T9774] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 17:04:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x2, 0x400000) syz_usbip_server_init(0x5) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x4c001) write$apparmor_current(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="70656d70040000006c65fd2f6465762f66620700000000000000d2a77c21de2bb7b939ee0bb0189b7df425"], 0x15) 17:04:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x402, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x400000) 17:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000100)={0x21, 0x1}) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x30000, 0x0) read$fb(r2, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) [ 3528.210246][ T9387] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 3528.216791][ T9387] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3528.276006][ T9774] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3528.285053][ T9774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3528.314429][ T9393] vhci_hcd: connection closed [ 3528.314568][T30845] vhci_hcd: stop threads [ 3528.324574][T30845] vhci_hcd: release socket [ 3528.335900][ T9774] usb 6-1: can't set config #1, error -71 [ 3528.344559][T30845] vhci_hcd: disconnect device [ 3528.344724][ T9774] usb 6-1: USB disconnect, device number 86 17:04:43 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d00000524060001"], 0x0) 17:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) getitimer(0x1, &(0x7f0000000040)) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x5, 0x1}, 0x8) setfsuid(0xee00) 17:04:43 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0xe3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x129}, {0x6}, [@country_functional={0x6, 0x24, 0x7, 0x5, 0x6}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x6b, 0x24, 0x13, 0x40, "82d67bdcf2093b1d32851560784170c9fb9505846b57081b1b8652a22b212e6fa24da06a7f3f209683a06bd2c82d266c75523b3e09b8e66f5bf41227641418033f721de10566b0dbe474f3b79d05036221bfc7b8615ce915a0d3473a279488d3539437908713fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x80}}}}}}}]}}, 0x0) 17:04:43 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 3528.465795][T23339] usb 4-1: new high-speed USB device number 101 using dummy_hcd 17:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000081c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010023, &(0x7f0000008200)={0x0, r2+10000000}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getaddr={0x38, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x80, 0x40}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x4a0}, @IFA_FLAGS={0x8, 0x8, 0x30}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x4100, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x8, 0xffffffff, 0x1, @remote, @mcast2, 0x20, 0x8, 0x2, 0xffff}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @empty}, 0x4, 0x2, 0x2}}, 0x2e) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x440c0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) 17:04:43 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x101102, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x5421, 0x750000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0xa20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x800) [ 3528.735661][T23339] usb 4-1: Using ep0 maxpacket: 32 [ 3528.735769][T19136] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 3528.776529][T19845] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3528.790354][T20054] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3528.822531][ T9392] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(4) [ 3528.829051][ T9392] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 17:04:43 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780)='/dev/nullb0\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x100) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000007c0)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0xffffffffffffff60) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x101401, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x2, 0x400000) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/fb1\x00', 0x0, 0x0) read$fb(r2, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000000c0)={0x1, 0x1}) [ 3528.859624][ T9430] vhci_hcd: connection closed [ 3528.870833][ T2005] vhci_hcd: stop threads [ 3528.880045][ T2005] vhci_hcd: release socket [ 3528.884443][ T2005] vhci_hcd: disconnect device [ 3528.942510][ T9433] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 3528.942520][ T9433] #PF: supervisor instruction fetch in kernel mode [ 3528.942527][ T9433] #PF: error_code(0x0010) - not-present page [ 3528.942532][ T9433] PGD 4e683067 P4D 4e683067 PUD 14850067 PMD 0 [ 3528.942554][ T9433] Oops: 0010 [#1] PREEMPT SMP KASAN [ 3528.942562][ T9433] CPU: 0 PID: 9433 Comm: syz-executor.5 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3528.942567][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3528.942574][ T9433] RIP: 0010:0x0 [ 3528.942584][ T9433] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 3528.942588][ T9433] RSP: 0018:ffffc9000bca7858 EFLAGS: 00010286 [ 3528.942595][ T9433] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3528.942600][ T9433] RDX: 0000000000000002 RSI: ffff888144509000 RDI: ffff888010079000 [ 3528.942605][ T9433] RBP: ffff888010079000 R08: 0000000000000000 R09: ffffffff8cecc387 [ 3528.942610][ T9433] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888144509000 [ 3528.942615][ T9433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000720 [ 3528.942621][ T9433] FS: 00007f5822bee700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 3528.942628][ T9433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3528.942632][ T9433] CR2: ffffffffffffffd6 CR3: 000000004e973000 CR4: 00000000001506f0 [ 3528.942637][ T9433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3528.942642][ T9433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3528.942644][ T9433] Call Trace: [ 3528.942693][ T9433] fbcon_cursor+0x50e/0x620 [ 3528.942711][ T9433] hide_cursor+0x85/0x280 [ 3528.942718][ T9433] redraw_screen+0x5ed/0x790 [ 3528.942728][ T9433] ? wait_for_completion_io+0x260/0x260 [ 3528.942734][ T9433] ? vc_init+0x5a0/0x5a0 [ 3528.942743][ T9433] vc_do_resize+0xed3/0x1150 [ 3528.942753][ T9433] ? unblank_screen+0x10/0x10 [ 3528.942762][ T9433] fbcon_set_disp+0x831/0xda0 [ 3528.942771][ T9433] set_con2fb_map+0x7a6/0xf80 [ 3528.942809][ T9433] ? drm_fb_helper_blank+0x250/0x250 [ 3528.942819][ T9433] fbcon_set_con2fb_map_ioctl+0x165/0x220 [ 3528.942827][ T9433] ? fbcon_get_requirement+0x8a0/0x8a0 [ 3528.942836][ T9433] do_fb_ioctl+0x5b6/0x690 [ 3528.942844][ T9433] ? fb_getput_cmap+0x270/0x270 [ 3528.942854][ T9433] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3528.942882][ T9433] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3528.942891][ T9433] ? do_vfs_ioctl+0x27d/0x1090 [ 3528.942899][ T9433] ? generic_block_fiemap+0x60/0x60 [ 3528.942910][ T9433] ? __fget_files+0x294/0x400 [ 3528.942917][ T9433] fb_ioctl+0xe7/0x150 [ 3528.942924][ T9433] ? do_fb_ioctl+0x690/0x690 [ 3528.942932][ T9433] __x64_sys_ioctl+0x193/0x200 [ 3528.942940][ T9433] do_syscall_64+0x2d/0x70 [ 3528.942949][ T9433] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3528.942954][ T9433] RIP: 0033:0x45deb9 [ 3528.942962][ T9433] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3528.942967][ T9433] RSP: 002b:00007f5822bedc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3528.942974][ T9433] RAX: ffffffffffffffda RBX: 000000000000e2c0 RCX: 000000000045deb9 [ 3528.942979][ T9433] RDX: 00000000200000c0 RSI: 0000000000004610 RDI: 0000000000000006 [ 3528.942983][ T9433] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 3528.942988][ T9433] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 3528.942993][ T9433] R13: 00007ffe024fb66f R14: 00007f5822bee9c0 R15: 000000000118bf2c [ 3528.942998][ T9433] Modules linked in: [ 3528.943003][ T9433] CR2: 0000000000000000 [ 3528.943021][ T9433] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 3528.943025][ T9433] #PF: supervisor instruction fetch in kernel mode [ 3528.943029][ T9433] #PF: error_code(0x0010) - not-present page [ 3528.943032][ T9433] PGD 4e683067 P4D 4e683067 PUD 14850067 PMD 0 [ 3528.943047][ T9433] Oops: 0010 [#2] PREEMPT SMP KASAN [ 3528.943054][ T9433] CPU: 0 PID: 9433 Comm: syz-executor.5 Not tainted 5.10.0-rc3-next-20201110-syzkaller #0 [ 3528.943059][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3528.943063][ T9433] RIP: 0010:0x0 [ 3528.943070][ T9433] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 3528.943074][ T9433] RSP: 0018:ffffc9000bca7278 EFLAGS: 00010086 [ 3528.943080][ T9433] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000007 [ 3528.943084][ T9433] RDX: 0000000000000002 RSI: ffff888144509000 RDI: ffff888010079000 [ 3528.943089][ T9433] RBP: ffff888010079000 R08: 0000000000000000 R09: ffffffff8cecc387 [ 3528.943093][ T9433] R10: 0000000000000003 R11: 0000000000000001 R12: ffff888144509000 [ 3528.943098][ T9433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000720 [ 3528.943104][ T9433] FS: 00007f5822bee700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 3528.943110][ T9433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3528.943115][ T9433] CR2: ffffffffffffffd6 CR3: 000000004e973000 CR4: 00000000001506f0 [ 3528.943119][ T9433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3528.943124][ T9433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3528.943126][ T9433] Call Trace: [ 3528.943133][ T9433] fbcon_cursor+0x50e/0x620 [ 3528.943140][ T9433] hide_cursor+0x85/0x280 [ 3528.943147][ T9433] redraw_screen+0x5ed/0x790 [ 3528.943153][ T9433] ? vc_init+0x5a0/0x5a0 [ 3528.943159][ T9433] ? __mutex_unlock_slowpath+0xe2/0x610 [ 3528.943182][ T9433] ? lock_acquire+0x2e5/0x8c0 [ 3528.943189][ T9433] ? wait_for_completion_io+0x260/0x260 [ 3528.943197][ T9433] fbcon_blank+0x8c5/0xc30 [ 3528.943206][ T9433] ? fbcon_init+0x1b10/0x1b10 [ 3528.943237][ T9433] ? kimage_alloc_crash_control_pages+0x330/0x330 [ 3528.943244][ T9433] ? lock_release+0x510/0x710 [ 3528.943266][ T9433] ? irq_work_queue+0x29/0x80 [ 3528.943285][ T9433] ? printk_safe_flush+0xaa/0x160 [ 3528.943292][ T9433] ? lock_downgrade+0x6d0/0x6d0 [ 3528.943300][ T9433] ? _raw_spin_lock_irqsave+0x41/0x50 [ 3528.943308][ T9433] ? __printk_safe_flush+0x355/0x3f0 [ 3528.943317][ T9433] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 3528.943344][ T9433] ? cpumask_next+0x3c/0x40 [ 3528.943351][ T9433] ? printk_safe_flush+0xea/0x160 [ 3528.943359][ T9433] do_unblank_screen+0x25b/0x470 [ 3528.943365][ T9433] bust_spinlocks+0x5b/0xe0 [ 3528.943402][ T9433] oops_end+0x2b/0xe0 [ 3528.943413][ T9433] no_context+0x5f2/0xa20 [ 3528.943422][ T9433] ? is_prefetch.constprop.0+0x3d0/0x3d0 [ 3528.943441][ T9433] ? __up_read+0x1a1/0x7b0 [ 3528.943449][ T9433] ? down_write_nested+0x150/0x150 [ 3528.943457][ T9433] __bad_area_nosemaphore+0xa9/0x400 [ 3528.943465][ T9433] do_user_addr_fault+0x7d7/0xba0 [ 3528.943473][ T9433] exc_page_fault+0x9e/0x180 [ 3528.943480][ T9433] asm_exc_page_fault+0x1e/0x30 [ 3528.943485][ T9433] RIP: 0010:0x0 [ 3528.943492][ T9433] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 3528.943496][ T9433] RSP: 0018:ffffc9000bca7858 EFLAGS: 00010286 [ 3528.943505][ T9433] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3528.943516][ T9433] RDX: 0000000000000002 RSI: ffff888144509000 RDI: ffff888010079000 [ 3528.943524][ T9433] RBP: ffff888010079000 R08: 0000000000000000 R09: ffffffff8cecc387 [ 3528.943531][ T9433] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888144509000 [ 3528.943539][ T9433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000720 [ 3528.943558][ T9433] ? fbcon_cursor+0x50e/0x620 [ 3528.943572][ T9433] ? hide_cursor+0x85/0x280 [ 3528.943585][ T9433] ? redraw_screen+0x5ed/0x790 [ 3528.943597][ T9433] ? wait_for_completion_io+0x260/0x260 [ 3528.943607][ T9433] ? vc_init+0x5a0/0x5a0 [ 3528.943615][ T9433] ? vc_do_resize+0xed3/0x1150 [ 3528.943624][ T9433] ? unblank_screen+0x10/0x10 [ 3528.943633][ T9433] ? fbcon_set_disp+0x831/0xda0 [ 3528.943641][ T9433] ? set_con2fb_map+0x7a6/0xf80 [ 3528.943649][ T9433] ? drm_fb_helper_blank+0x250/0x250 [ 3528.943658][ T9433] ? fbcon_set_con2fb_map_ioctl+0x165/0x220 [ 3528.943665][ T9433] ? fbcon_get_requirement+0x8a0/0x8a0 [ 3528.943673][ T9433] ? do_fb_ioctl+0x5b6/0x690 [ 3528.943679][ T9433] ? fb_getput_cmap+0x270/0x270 [ 3528.943687][ T9433] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3528.943698][ T9433] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3528.943705][ T9433] ? do_vfs_ioctl+0x27d/0x1090 [ 3528.943713][ T9433] ? generic_block_fiemap+0x60/0x60 [ 3528.943722][ T9433] ? __fget_files+0x294/0x400 [ 3528.943729][ T9433] ? fb_ioctl+0xe7/0x150 [ 3528.943735][ T9433] ? do_fb_ioctl+0x690/0x690 [ 3528.943742][ T9433] ? __x64_sys_ioctl+0x193/0x200 [ 3528.943749][ T9433] ? do_syscall_64+0x2d/0x70 [ 3528.943756][ T9433] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3528.943761][ T9433] Modules linked in: [ 3528.943766][ T9433] CR2: 0000000000000000 [ 3528.943772][ T9433] ---[ end trace 8931af4863156cb4 ]--- [ 3528.943777][ T9433] RIP: 0010:0x0 [ 3528.943786][ T9433] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 3528.943790][ T9433] RSP: 0018:ffffc9000bca7858 EFLAGS: 00010286 [ 3528.943797][ T9433] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3528.943802][ T9433] RDX: 0000000000000002 RSI: ffff888144509000 RDI: ffff888010079000 [ 3528.943807][ T9433] RBP: ffff888010079000 R08: 0000000000000000 R09: ffffffff8cecc387 [ 3528.943812][ T9433] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888144509000 [ 3528.943817][ T9433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000720 [ 3528.943823][ T9433] FS: 00007f5822bee700(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 3528.943830][ T9433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3528.943835][ T9433] CR2: ffffffffffffffd6 CR3: 000000004e973000 CR4: 00000000001506f0 [ 3528.943840][ T9433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3528.943845][ T9433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3528.943849][ T9433] Kernel panic - not syncing: Fatal exception [ 3528.944505][ T9433] Kernel Offset: disabled [ 3529.884014][ T9433] Rebooting in 86400 seconds..