00001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3013.204175][T13196] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 3013.394161][T11044] usb 4-1: new high-speed USB device number 11 using dummy_hcd 08:01:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:01:52 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x9200}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:52 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3013.434572][T10606] usb 1-1: USB disconnect, device number 66 08:01:52 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:01:52 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:53 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2d32000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:01:53 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3013.564312][T13196] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3013.575651][T13196] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3013.585851][T13196] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3013.754260][T11044] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3013.754270][T13196] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3013.754288][T13196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3013.782283][T13196] usb 3-1: Product: syz [ 3013.786823][T13196] usb 3-1: Manufacturer: syz [ 3013.791397][T13196] usb 3-1: SerialNumber: syz [ 3013.884206][T10606] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3013.954224][T11044] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3013.963348][T11044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3013.971580][T11044] usb 4-1: Product: syz [ 3013.975860][T11044] usb 4-1: Manufacturer: syz [ 3013.980433][T11044] usb 4-1: SerialNumber: syz [ 3014.274276][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3014.444269][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3014.453351][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3014.461709][T10606] usb 1-1: Product: syz [ 3014.465985][T10606] usb 1-1: Manufacturer: syz [ 3014.470566][T10606] usb 1-1: SerialNumber: syz [ 3014.924230][T13196] cdc_ncm 3-1:1.0: bind() failure [ 3014.929905][T13196] cdc_ncm 3-1:1.1: bind() failure [ 3015.104249][T11044] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3015.110741][T11044] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3015.118187][T11044] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3015.126162][ T2836] usb 3-1: USB disconnect, device number 82 [ 3015.164243][T10606] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3015.170443][T10606] cdc_ncm 1-1:1.0: bind() failure [ 3015.176935][T10606] cdc_ncm 1-1:1.1: bind() failure [ 3015.315247][T11044] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3015.518536][T13196] usb 4-1: USB disconnect, device number 11 [ 3015.534241][T13196] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 08:01:55 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:01:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:01:55 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x80000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:55 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x1000000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3015.934191][T10606] usb 3-1: new high-speed USB device number 83 using dummy_hcd 08:01:55 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3016.294232][T13196] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 3016.344406][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3016.355414][T10606] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3016.365312][T10606] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 08:01:55 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:01:55 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x80040}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x4000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3016.449164][T11044] usb 1-1: USB disconnect, device number 67 08:01:55 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x1200000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:01:56 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x200000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3016.564260][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3016.577714][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3016.585998][T10606] usb 3-1: Product: syz [ 3016.590306][T10606] usb 3-1: Manufacturer: syz [ 3016.595416][T10606] usb 3-1: SerialNumber: syz 08:01:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xc050000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3016.654366][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3016.824295][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3016.833358][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3016.841619][T13196] usb 4-1: Product: syz [ 3016.844270][T11044] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 3016.845930][T13196] usb 4-1: Manufacturer: syz [ 3016.857931][T13196] usb 4-1: SerialNumber: syz [ 3017.214351][T11044] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3017.404291][T11044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3017.413372][T11044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3017.421527][T11044] usb 1-1: Product: syz [ 3017.425902][T11044] usb 1-1: Manufacturer: syz [ 3017.430776][T11044] usb 1-1: SerialNumber: syz [ 3017.704239][T10606] cdc_ncm 3-1:1.0: bind() failure [ 3017.710107][T10606] cdc_ncm 3-1:1.1: bind() failure [ 3017.906537][T10606] usb 3-1: USB disconnect, device number 83 [ 3017.994238][T13196] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3018.000669][T13196] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3018.008280][T13196] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3018.134189][T11044] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3018.140288][T11044] cdc_ncm 1-1:1.0: bind() failure [ 3018.146354][T11044] cdc_ncm 1-1:1.1: bind() failure [ 3018.205643][T13196] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 08:01:57 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:01:57 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x20d302}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:57 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x10000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:01:57 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x1800000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3018.411420][ T9010] usb 4-1: USB disconnect, device number 12 [ 3018.424446][ T9010] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 3018.704176][T10606] usb 3-1: new high-speed USB device number 84 using dummy_hcd 08:01:58 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x1200000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3019.064224][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3019.080547][T10606] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3019.101108][T10606] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3019.274239][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3019.286556][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3019.302616][T10606] usb 3-1: Product: syz [ 3019.307061][T10606] usb 3-1: Manufacturer: syz [ 3019.311707][T10606] usb 3-1: SerialNumber: syz 08:01:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:01:58 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x12000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:01:58 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xe002a0}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x1f00000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3019.462355][T15443] usb 1-1: USB disconnect, device number 68 08:01:58 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x18000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:01:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:01:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1f000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3019.824176][T15443] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3020.184295][T15443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3020.354234][T15443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3020.363425][T15443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.376384][T15443] usb 1-1: Product: syz [ 3020.383118][T15443] usb 1-1: Manufacturer: syz [ 3020.387928][T15443] usb 1-1: SerialNumber: syz [ 3020.414233][T10606] cdc_ncm 3-1:1.0: bind() failure [ 3020.420629][T10606] cdc_ncm 3-1:1.1: bind() failure [ 3020.615946][T13196] usb 3-1: USB disconnect, device number 84 08:02:00 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:00 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2d320000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:00 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x80000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:00 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x3f00000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3021.094207][T15443] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3021.100315][T15443] cdc_ncm 1-1:1.0: bind() failure [ 3021.106238][T15443] cdc_ncm 1-1:1.1: bind() failure [ 3021.424182][T10606] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 3021.794241][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3021.805318][T10606] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3021.815217][T10606] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3022.024510][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3022.033860][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3022.042066][T10606] usb 3-1: Product: syz [ 3022.046671][T10606] usb 3-1: Manufacturer: syz [ 3022.051428][T10606] usb 3-1: SerialNumber: syz 08:02:01 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:01 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x80000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:01 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3f000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2d32000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:01 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x4000000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3022.476301][T15443] usb 1-1: USB disconnect, device number 69 08:02:02 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x80000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:02 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3022.914177][T15443] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 3023.194299][T10606] cdc_ncm 3-1:1.0: bind() failure [ 3023.201091][T10606] cdc_ncm 3-1:1.1: bind() failure [ 3023.324227][T15443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3023.395644][T13196] usb 3-1: USB disconnect, device number 85 [ 3023.514376][T15443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3023.523526][T15443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3023.531701][T15443] usb 1-1: Product: syz [ 3023.536047][T15443] usb 1-1: Manufacturer: syz [ 3023.540733][T15443] usb 1-1: SerialNumber: syz 08:02:03 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x3000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:03 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x4000080000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000800}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:03 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3024.184174][T10606] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3024.194195][ T382] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 3024.244214][T15443] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3024.250343][T15443] cdc_ncm 1-1:1.0: bind() failure [ 3024.256239][T15443] cdc_ncm 1-1:1.1: bind() failure [ 3024.544264][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3024.555295][T10606] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3024.565299][T10606] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3024.614268][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3024.625305][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3024.635220][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3024.734336][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3024.743592][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3024.753018][T10606] usb 3-1: Product: syz [ 3024.757719][T10606] usb 3-1: Manufacturer: syz [ 3024.762391][T10606] usb 3-1: SerialNumber: syz [ 3024.834400][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3024.843565][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3024.851749][ T382] usb 4-1: Product: syz [ 3024.856140][ T382] usb 4-1: Manufacturer: syz [ 3024.860861][ T382] usb 4-1: SerialNumber: syz 08:02:04 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:04 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x4000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:04 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x500d0000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:04 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x500d000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3025.503105][T13196] usb 1-1: USB disconnect, device number 70 08:02:05 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x8000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:05 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x5c2a00a0}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:05 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8c8502a0}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3025.894170][T13196] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 3025.904269][T10606] cdc_ncm 3-1:1.0: bind() failure [ 3025.911053][T10606] cdc_ncm 3-1:1.1: bind() failure [ 3026.014219][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3026.020180][ T382] cdc_ncm 4-1:1.1: bind() failure [ 3026.105914][ T382] usb 3-1: USB disconnect, device number 86 [ 3026.219148][T10606] usb 4-1: USB disconnect, device number 13 [ 3026.294211][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3026.484230][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3026.493366][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3026.501584][T13196] usb 1-1: Product: syz [ 3026.505819][T13196] usb 1-1: Manufacturer: syz [ 3026.510448][T13196] usb 1-1: SerialNumber: syz 08:02:06 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xc050000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:06 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x91000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:06 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x5c2a00a0ffffffff}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:06 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3026.894166][ T382] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3027.204226][T13196] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3027.210383][T13196] cdc_ncm 1-1:1.0: bind() failure [ 3027.216590][T13196] cdc_ncm 1-1:1.1: bind() failure [ 3027.334233][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3027.345195][ T382] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3027.355245][ T382] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3027.564272][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3027.573461][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3027.581839][ T382] usb 3-1: Product: syz [ 3027.586172][ T382] usb 3-1: Manufacturer: syz [ 3027.590834][ T382] usb 3-1: SerialNumber: syz 08:02:07 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:07 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x92000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x10000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:07 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:07 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x8000000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3028.531709][T11044] usb 1-1: USB disconnect, device number 71 08:02:08 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa0002a5c}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:08 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3028.734298][ T382] cdc_ncm 3-1:1.0: bind() failure [ 3028.740056][ T382] cdc_ncm 3-1:1.1: bind() failure [ 3028.935630][ T382] usb 3-1: USB disconnect, device number 87 [ 3028.954161][T11044] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3029.344326][T11044] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:02:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:08 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x12000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:08 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x9200}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:08 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002858c}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:08 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x8c8502a0ffffffff}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3029.534243][T11044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3029.543288][T11044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3029.558150][T11044] usb 1-1: Product: syz [ 3029.562336][T11044] usb 1-1: Manufacturer: syz [ 3029.567009][T11044] usb 1-1: SerialNumber: syz [ 3029.734179][T10606] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3030.114290][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3030.274276][T11044] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3030.280528][T11044] cdc_ncm 1-1:1.0: bind() failure [ 3030.287399][T11044] cdc_ncm 1-1:1.1: bind() failure [ 3030.304285][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3030.313530][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3030.321706][T10606] usb 3-1: Product: syz [ 3030.325948][T10606] usb 3-1: Manufacturer: syz [ 3030.330684][T10606] usb 3-1: SerialNumber: syz [ 3031.024244][T10606] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3031.030303][T10606] cdc_ncm 3-1:1.0: bind() failure [ 3031.037181][T10606] cdc_ncm 3-1:1.1: bind() failure 08:02:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:10 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:10 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002e000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x18000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:10 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x9100000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3031.535494][T13196] usb 1-1: USB disconnect, device number 72 08:02:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xd0010100}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1f000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3031.824175][ T382] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 3031.904196][T13196] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3032.184267][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3032.195317][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3032.205294][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3032.274267][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3032.374250][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3032.383415][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3032.391695][ T382] usb 4-1: Product: syz [ 3032.395990][ T382] usb 4-1: Manufacturer: syz [ 3032.400665][ T382] usb 4-1: SerialNumber: syz 08:02:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xeffdffff}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x20000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:11 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x9200000000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3032.444327][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3032.460007][T20564] usb 3-1: USB disconnect, device number 88 [ 3032.461788][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3032.485848][T13196] usb 1-1: Product: syz [ 3032.490029][T13196] usb 1-1: Manufacturer: syz [ 3032.494912][T13196] usb 1-1: SerialNumber: syz 08:02:12 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xf5ffffff}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3032.864184][T20564] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3033.194214][T13196] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3033.200228][T13196] cdc_ncm 1-1:1.0: bind() failure [ 3033.207065][T13196] cdc_ncm 1-1:1.1: bind() failure [ 3033.264252][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3033.434328][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3033.443508][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.451776][T20564] usb 3-1: Product: syz [ 3033.456126][T20564] usb 3-1: Manufacturer: syz [ 3033.460754][T20564] usb 3-1: SerialNumber: syz [ 3033.534229][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3033.540484][ T382] cdc_ncm 4-1:1.1: bind() failure [ 3033.739780][ T382] usb 4-1: USB disconnect, device number 14 [ 3034.154237][T20564] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3034.160434][T20564] cdc_ncm 3-1:1.0: bind() failure [ 3034.166492][T20564] cdc_ncm 3-1:1.1: bind() failure 08:02:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:13 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xfffffdef}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:13 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xd001010000000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:13 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2d320000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:13 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3034.553331][T20564] usb 1-1: USB disconnect, device number 73 08:02:14 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xffffff7f}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x3f000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3034.834202][T10606] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 3034.954184][T20564] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3035.194307][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.205385][T10606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3035.215249][T10606] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3035.324248][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.384464][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3035.393591][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.401837][T10606] usb 4-1: Product: syz [ 3035.406211][T10606] usb 4-1: Manufacturer: syz [ 3035.410992][T10606] usb 4-1: SerialNumber: syz 08:02:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:14 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xfffffff5}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:14 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xeffdffff00000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3035.485556][ T382] usb 3-1: USB disconnect, device number 89 [ 3035.494615][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3035.506177][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.515391][T20564] usb 1-1: Product: syz [ 3035.519573][T20564] usb 1-1: Manufacturer: syz [ 3035.524213][T20564] usb 1-1: SerialNumber: syz 08:02:15 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xffffffff}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3035.914180][ T382] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3036.224220][T20564] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3036.230251][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3036.236429][T20564] cdc_ncm 1-1:1.1: bind() failure [ 3036.314265][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3036.484230][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3036.493343][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3036.501560][ T382] usb 3-1: Product: syz [ 3036.505791][ T382] usb 3-1: Manufacturer: syz [ 3036.510623][ T382] usb 3-1: SerialNumber: syz [ 3036.554237][T10606] cdc_ncm 4-1:1.0: bind() failure [ 3036.561491][T10606] cdc_ncm 4-1:1.1: bind() failure [ 3036.760698][ T9010] usb 4-1: USB disconnect, device number 15 [ 3037.214260][ T382] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3037.220284][ T382] cdc_ncm 3-1:1.0: bind() failure [ 3037.226878][ T382] cdc_ncm 3-1:1.1: bind() failure 08:02:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:17 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000800}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:17 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:17 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xf5ffffff00000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:17 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3037.583367][T10606] usb 1-1: USB disconnect, device number 74 08:02:17 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:17 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x500d0000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3037.874199][T20564] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 3038.034168][T10606] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3038.264232][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3038.275202][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3038.285011][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3038.424208][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3038.464271][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 08:02:17 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:17 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:17 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x5c2a00a0}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:17 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xffffff7f00000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3038.473385][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.481483][T20564] usb 4-1: Product: syz [ 3038.485789][T20564] usb 4-1: Manufacturer: syz [ 3038.490778][T20564] usb 4-1: SerialNumber: syz [ 3038.512263][ T382] usb 3-1: USB disconnect, device number 90 08:02:18 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3038.614257][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3038.623626][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.631828][T10606] usb 1-1: Product: syz [ 3038.636166][T10606] usb 1-1: Manufacturer: syz [ 3038.640856][T10606] usb 1-1: SerialNumber: syz [ 3038.924171][ T382] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3039.314260][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3039.344240][T10606] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3039.350358][T10606] cdc_ncm 1-1:1.0: bind() failure [ 3039.356566][T10606] cdc_ncm 1-1:1.1: bind() failure [ 3039.504247][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3039.513276][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3039.521406][ T382] usb 3-1: Product: syz [ 3039.525644][ T382] usb 3-1: Manufacturer: syz [ 3039.530349][ T382] usb 3-1: SerialNumber: syz [ 3039.644230][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3039.649892][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3039.855109][T20564] usb 4-1: USB disconnect, device number 16 [ 3040.214260][ T382] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3040.220399][ T382] cdc_ncm 3-1:1.0: bind() failure [ 3040.226280][ T382] cdc_ncm 3-1:1.1: bind() failure 08:02:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:20 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x8c8502a0}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:20 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:20 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xffffffff00000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:20 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3040.609842][ T382] usb 1-1: USB disconnect, device number 75 08:02:20 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:20 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x91000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3040.904194][T20564] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 3041.024171][ T382] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3041.304294][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3041.315467][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3041.325204][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3041.384245][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3041.524357][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3041.533421][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3041.541773][T20564] usb 4-1: Product: syz [ 3041.542289][ T9010] usb 3-1: USB disconnect, device number 91 [ 3041.547201][T20564] usb 4-1: Manufacturer: syz [ 3041.554312][ T382] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3041.558919][T20564] usb 4-1: SerialNumber: syz 08:02:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:21 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:21 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x92000000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:21 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xffffffffa0002a5c}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:21 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x9, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3041.568675][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3041.586375][ T382] usb 1-1: Product: syz [ 3041.590710][ T382] usb 1-1: Manufacturer: syz [ 3041.595456][ T382] usb 1-1: SerialNumber: syz [ 3041.964176][ T9010] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3042.294209][ T382] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3042.300275][ T382] cdc_ncm 1-1:1.0: bind() failure [ 3042.306231][ T382] cdc_ncm 1-1:1.1: bind() failure [ 3042.324235][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3042.494256][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3042.503392][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3042.511925][ T9010] usb 3-1: Product: syz [ 3042.516348][ T9010] usb 3-1: Manufacturer: syz [ 3042.521044][ T9010] usb 3-1: SerialNumber: syz [ 3042.694202][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3042.714239][T20564] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3042.734281][T20564] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3042.743939][T20564] usb 4-1: USB disconnect, device number 17 [ 3043.224245][ T9010] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3043.230473][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3043.236409][ T9010] cdc_ncm 3-1:1.1: bind() failure 08:02:23 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:23 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xa0002a5c}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:23 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xa, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:23 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xffffffffa002858c}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:23 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3043.630966][ T9010] usb 1-1: USB disconnect, device number 76 08:02:23 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xb, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:23 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xa002858c}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3043.914240][ T382] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 3043.994182][ T9010] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3044.274245][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3044.285357][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3044.295077][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3044.364246][ T9010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3044.464235][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3044.473299][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.481936][ T382] usb 4-1: Product: syz [ 3044.486873][ T382] usb 4-1: Manufacturer: syz [ 3044.491727][ T382] usb 4-1: SerialNumber: syz [ 3044.534218][ T9010] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3044.545817][ T9010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.553871][ T9010] usb 1-1: Product: syz [ 3044.558190][ T9010] usb 1-1: Manufacturer: syz [ 3044.562859][ T9010] usb 1-1: SerialNumber: syz 08:02:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:24 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xc, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:24 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xa002e000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:24 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xffffffffa002e000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3044.588063][T15443] usb 3-1: USB disconnect, device number 92 08:02:24 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xd, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3044.964192][T15443] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3045.244245][ T9010] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3045.250287][ T9010] cdc_ncm 1-1:1.0: bind() failure [ 3045.256287][ T9010] cdc_ncm 1-1:1.1: bind() failure [ 3045.344219][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3045.514283][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3045.523305][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3045.531416][T15443] usb 3-1: Product: syz [ 3045.535637][T15443] usb 3-1: Manufacturer: syz [ 3045.540230][T15443] usb 3-1: SerialNumber: syz [ 3045.604298][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3045.624251][ T382] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3045.654233][ T382] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3045.661852][ T382] usb 4-1: USB disconnect, device number 18 [ 3046.234225][T15443] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3046.240339][T15443] cdc_ncm 3-1:1.0: bind() failure [ 3046.246177][T15443] cdc_ncm 3-1:1.1: bind() failure 08:02:26 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xe, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:26 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 08:02:26 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xd0010100}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:26 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3046.659846][T15443] usb 1-1: USB disconnect, device number 77 08:02:26 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xf, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:26 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xeffdffff}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3046.934185][ T382] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 3047.014193][T15443] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3047.294260][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3047.305271][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3047.315137][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3047.384280][T15443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3047.484252][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3047.493283][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.501364][ T382] usb 4-1: Product: syz [ 3047.505527][ T382] usb 4-1: Manufacturer: syz [ 3047.510272][ T382] usb 4-1: SerialNumber: syz [ 3047.554280][T15443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3047.563423][T15443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.571997][T15443] usb 1-1: Product: syz [ 3047.576189][T15443] usb 1-1: Manufacturer: syz [ 3047.580786][T15443] usb 1-1: SerialNumber: syz 08:02:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:27 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:27 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x10, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:27 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xf5ffffff}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3047.602996][ T9010] usb 3-1: USB disconnect, device number 93 08:02:27 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x11, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:27 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xfffffdef}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3048.034224][ T9010] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3048.424244][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3048.430088][ T382] cdc_ncm 4-1:1.1: bind() failure [ 3048.435271][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3048.447036][ T382] usb 4-1: USB disconnect, device number 19 [ 3048.634234][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3048.643445][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.651501][ T9010] usb 3-1: Product: syz [ 3048.655696][ T9010] usb 3-1: Manufacturer: syz [ 3048.660293][ T9010] usb 3-1: SerialNumber: syz [ 3048.694329][T15443] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3048.700915][T15443] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3048.708540][T15443] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3048.905604][T15443] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3048.923011][T15443] usb 1-1: USB disconnect, device number 78 [ 3048.929587][T15443] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:02:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:28 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x3}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:28 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xffffff7f}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:28 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x12, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:28 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) [ 3049.374181][ T9010] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3049.380240][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3049.386200][ T9010] cdc_ncm 3-1:1.1: bind() failure 08:02:28 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x13, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3049.684174][ T9010] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 3049.684213][T20564] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3050.044240][ T9010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3050.055186][ T9010] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3050.064262][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3050.064898][ T9010] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3050.234312][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3050.243498][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3050.251701][T20564] usb 1-1: Product: syz [ 3050.256017][T20564] usb 1-1: Manufacturer: syz [ 3050.260624][T20564] usb 1-1: SerialNumber: syz [ 3050.264236][ T9010] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3050.274453][ T9010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3050.282416][ T9010] usb 4-1: Product: syz [ 3050.286602][ T9010] usb 4-1: Manufacturer: syz [ 3050.291242][ T9010] usb 4-1: SerialNumber: syz 08:02:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x14, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x4}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:30 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xfffffff5}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3050.625194][T13196] usb 3-1: USB disconnect, device number 94 08:02:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x15, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:30 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xffffffff}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3051.034263][T13196] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 3051.214221][ T9010] cdc_ncm 4-1:1.0: bind() failure [ 3051.219952][ T9010] cdc_ncm 4-1:1.1: bind() failure [ 3051.230194][ T9010] usb 4-1: USB disconnect, device number 20 [ 3051.394239][T20564] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3051.394251][T13196] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3051.411825][T20564] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3051.419204][T20564] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3051.554290][T13196] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3051.563477][T13196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3051.571685][T13196] usb 3-1: Product: syz [ 3051.576197][T13196] usb 3-1: Manufacturer: syz [ 3051.580773][T13196] usb 3-1: SerialNumber: syz [ 3051.616158][T20564] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3051.629587][T20564] usb 1-1: USB disconnect, device number 79 [ 3051.640251][T20564] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:02:31 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:31 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x16, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:31 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x8}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:31 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:31 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 08:02:31 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x17, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3052.284210][T13196] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3052.292372][T13196] cdc_ncm 3-1:1.0: bind() failure [ 3052.298440][T13196] cdc_ncm 3-1:1.1: bind() failure [ 3052.384201][T11044] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 3052.391819][T20564] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3052.744375][T11044] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3052.755291][T11044] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3052.765041][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3052.775907][T11044] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3052.944257][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3052.953608][T11044] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3052.962745][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.970813][T11044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.978875][T20564] usb 1-1: Product: syz [ 3052.983054][T20564] usb 1-1: Manufacturer: syz [ 3052.987675][T20564] usb 1-1: SerialNumber: syz [ 3052.992512][T11044] usb 4-1: Product: syz [ 3052.996698][T11044] usb 4-1: Manufacturer: syz [ 3053.001285][T11044] usb 4-1: SerialNumber: syz 08:02:33 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:33 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x18, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:33 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x10}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3053.648381][T13196] usb 3-1: USB disconnect, device number 95 08:02:33 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x19, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3053.934271][T11044] cdc_ncm 4-1:1.0: bind() failure [ 3053.940012][T11044] cdc_ncm 4-1:1.1: bind() failure [ 3053.948070][T11044] usb 4-1: USB disconnect, device number 21 [ 3054.014216][T13196] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 3054.144240][T20564] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3054.150829][T20564] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3054.158442][T20564] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3054.367620][T20564] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3054.374262][T13196] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3054.382834][T20564] usb 1-1: USB disconnect, device number 80 [ 3054.397465][T20564] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3054.544268][T13196] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3054.553451][T13196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3054.561844][T13196] usb 3-1: Product: syz [ 3054.566253][T13196] usb 3-1: Manufacturer: syz [ 3054.571125][T13196] usb 3-1: SerialNumber: syz 08:02:34 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:34 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:34 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x12}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:34 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x4}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:02:34 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3055.134189][ T9010] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 3055.134211][T20564] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3055.274200][T13196] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3055.280513][T13196] cdc_ncm 3-1:1.0: bind() failure [ 3055.286521][T13196] cdc_ncm 3-1:1.1: bind() failure [ 3055.494208][ T9010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3055.504350][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3055.505226][ T9010] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3055.525608][ T9010] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3055.694231][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3055.703365][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3055.711805][T20564] usb 1-1: Product: syz [ 3055.714229][ T9010] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3055.716228][T20564] usb 1-1: Manufacturer: syz [ 3055.725089][ T9010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3055.729781][T20564] usb 1-1: SerialNumber: syz [ 3055.737639][ T9010] usb 4-1: Product: syz [ 3055.746342][ T9010] usb 4-1: Manufacturer: syz [ 3055.751020][ T9010] usb 4-1: SerialNumber: syz [ 3056.464285][ T9010] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3056.470296][ T9010] cdc_ncm 4-1:1.0: bind() failure [ 3056.476050][ T9010] cdc_ncm 4-1:1.1: bind() failure [ 3056.484488][ T9010] usb 4-1: USB disconnect, device number 22 08:02:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:36 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x18}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3056.671752][T11044] usb 3-1: USB disconnect, device number 96 08:02:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x10}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3056.864319][T20564] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3056.874189][T20564] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3056.881581][T20564] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3057.044220][T11044] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 3057.075482][T20564] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3057.090012][T20564] usb 1-1: USB disconnect, device number 81 [ 3057.096359][T20564] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3057.414258][T11044] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:02:37 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:37 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:37 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x91}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:37 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x12}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:37 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:02:37 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x21, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3057.604544][T11044] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3057.613662][T11044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3057.622054][T11044] usb 3-1: Product: syz [ 3057.626373][T11044] usb 3-1: Manufacturer: syz [ 3057.630948][T11044] usb 3-1: SerialNumber: syz [ 3057.854173][T20564] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 3057.874242][T10606] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 3058.214279][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3058.225259][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3058.235006][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3058.264289][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3058.334284][T11044] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3058.340299][T11044] cdc_ncm 3-1:1.0: bind() failure [ 3058.346116][T11044] cdc_ncm 3-1:1.1: bind() failure [ 3058.424563][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3058.433762][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3058.441900][T20564] usb 4-1: Product: syz [ 3058.446189][T20564] usb 4-1: Manufacturer: syz [ 3058.450910][T20564] usb 4-1: SerialNumber: syz [ 3058.464260][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3058.473392][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3058.481439][T10606] usb 1-1: Product: syz [ 3058.485700][T10606] usb 1-1: Manufacturer: syz [ 3058.490267][T10606] usb 1-1: SerialNumber: syz 08:02:38 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:38 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x18}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:38 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x92}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:38 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x22, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3058.675238][ T382] usb 3-1: USB disconnect, device number 97 08:02:38 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x23, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:38 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x91}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3059.084196][ T382] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3059.144229][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3059.150703][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3059.156484][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3059.164861][T20564] usb 4-1: USB disconnect, device number 23 [ 3059.444273][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3059.614256][T10606] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3059.614285][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3059.620696][T10606] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3059.620705][T10606] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3059.642827][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3059.650825][ T382] usb 3-1: Product: syz [ 3059.654982][ T382] usb 3-1: Manufacturer: syz [ 3059.659548][ T382] usb 3-1: SerialNumber: syz [ 3059.835349][T10606] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3059.850401][T10606] usb 1-1: USB disconnect, device number 82 [ 3059.856809][T10606] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:02:39 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:39 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x24, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:39 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x300}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:39 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x92}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:39 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3060.354217][ T382] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3060.360313][ T382] cdc_ncm 3-1:1.0: bind() failure [ 3060.366262][ T382] cdc_ncm 3-1:1.1: bind() failure 08:02:39 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x25, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3060.614246][T10606] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 3060.622207][T20564] usb 1-1: new high-speed USB device number 83 using dummy_hcd 08:02:40 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x300}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:40 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x26, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:40 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x50c}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3060.711393][ T2836] usb 3-1: USB disconnect, device number 98 08:02:40 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x27, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x50c}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3061.044255][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3061.055197][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3061.066390][T10606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3061.076276][T10606] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3061.154210][ T2836] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 3061.264263][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3061.273292][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3061.281322][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3061.290448][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3061.298458][T20564] usb 1-1: Product: syz [ 3061.302629][T20564] usb 1-1: Manufacturer: syz [ 3061.307323][T10606] usb 4-1: Product: syz [ 3061.311469][T10606] usb 4-1: Manufacturer: syz [ 3061.316069][T20564] usb 1-1: SerialNumber: syz [ 3061.320954][T10606] usb 4-1: SerialNumber: syz [ 3061.534227][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3061.704446][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3061.713519][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3061.721782][ T2836] usb 3-1: Product: syz [ 3061.726102][ T2836] usb 3-1: Manufacturer: syz [ 3061.730698][ T2836] usb 3-1: SerialNumber: syz [ 3062.024285][T10606] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3062.030483][T10606] cdc_ncm 4-1:1.0: bind() failure [ 3062.036272][T10606] cdc_ncm 4-1:1.1: bind() failure [ 3062.042148][T10606] usb 4-1: USB disconnect, device number 24 [ 3062.424199][ T2836] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3062.430291][ T2836] cdc_ncm 3-1:1.0: bind() failure [ 3062.436241][ T2836] cdc_ncm 3-1:1.1: bind() failure [ 3062.444217][T20564] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3062.450680][T20564] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3062.458166][T20564] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3062.665734][T20564] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3062.677433][T20564] usb 1-1: USB disconnect, device number 83 [ 3062.683591][T20564] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3062.792415][ T382] usb 3-1: USB disconnect, device number 99 08:02:42 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:42 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x28, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xc05}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xc05}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:02:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:42 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x29, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xd50}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xd50}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1200}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:42 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3063.434818][ T382] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 3063.442545][ T9010] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 3063.450272][T13196] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 3063.834245][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3063.845273][ T9010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3063.856154][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3063.867021][ T9010] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3063.877313][ T9010] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3064.044287][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3064.053364][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3064.061493][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3064.070548][ T9010] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3064.079601][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3064.087718][ T9010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3064.095777][ T382] usb 3-1: Product: syz [ 3064.099963][ T382] usb 3-1: Manufacturer: syz [ 3064.104701][T13196] usb 1-1: Product: syz [ 3064.108889][T13196] usb 1-1: Manufacturer: syz [ 3064.113456][T13196] usb 1-1: SerialNumber: syz [ 3064.118167][ T9010] usb 4-1: Product: syz [ 3064.122309][ T9010] usb 4-1: Manufacturer: syz [ 3064.126993][ T382] usb 3-1: SerialNumber: syz [ 3064.136557][ T9010] usb 4-1: SerialNumber: syz [ 3064.834304][ T382] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3064.840378][ T9010] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3064.846429][ T382] cdc_ncm 3-1:1.0: bind() failure [ 3064.852192][ T382] cdc_ncm 3-1:1.1: bind() failure [ 3064.857334][ T9010] cdc_ncm 4-1:1.0: bind() failure [ 3064.862932][ T9010] cdc_ncm 4-1:1.1: bind() failure [ 3064.869742][ T9010] usb 4-1: USB disconnect, device number 25 [ 3065.185548][ T9010] usb 3-1: USB disconnect, device number 100 [ 3065.274243][T13196] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3065.280677][T13196] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3065.288068][T13196] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3065.485809][T13196] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3065.498287][T13196] usb 1-1: USB disconnect, device number 84 [ 3065.504466][T13196] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:02:45 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:45 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1800}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1200}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:45 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:02:45 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1f00}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1800}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:45 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3066.264175][ T2836] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 3066.264411][ T9010] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3066.279553][T13196] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 3066.644240][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3066.655286][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3066.666305][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3066.674223][ T2836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3066.676138][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3066.824359][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3066.833445][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3066.841568][ T9010] usb 3-1: Product: syz [ 3066.844265][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3066.845793][ T9010] usb 3-1: Manufacturer: syz [ 3066.855053][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3066.859481][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3066.867737][ T2836] usb 1-1: Product: syz [ 3066.876557][ T9010] usb 3-1: SerialNumber: syz [ 3066.880928][ T2836] usb 1-1: Manufacturer: syz [ 3066.889212][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3066.890155][ T2836] usb 1-1: SerialNumber: syz [ 3066.897956][T13196] usb 4-1: Product: syz [ 3066.906833][T13196] usb 4-1: Manufacturer: syz [ 3066.911668][T13196] usb 4-1: SerialNumber: syz [ 3067.574217][ T9010] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3067.580233][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3067.586181][ T9010] cdc_ncm 3-1:1.1: bind() failure [ 3067.594247][T13196] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3067.600259][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3067.605997][T13196] cdc_ncm 4-1:1.1: bind() failure [ 3067.614367][T13196] usb 4-1: USB disconnect, device number 26 [ 3067.924353][T20564] usb 3-1: USB disconnect, device number 101 [ 3068.034204][ T2836] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3068.040661][ T2836] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3068.048269][ T2836] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3068.255606][ T2836] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3068.268682][ T2836] usb 1-1: USB disconnect, device number 85 [ 3068.275101][ T2836] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:02:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:48 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x322d}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1f00}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x30, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:02:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x31, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3f00}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x32, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x4000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x33, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3069.014231][ T2836] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3069.024177][T13196] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3069.032220][ T9010] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 3069.404272][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.404282][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.404302][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3069.435808][ T9010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.446818][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3069.604226][ T9010] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3069.613376][ T9010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.621478][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3069.630524][ T9010] usb 1-1: Product: syz [ 3069.634249][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3069.634701][ T9010] usb 1-1: Manufacturer: syz [ 3069.644098][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.648279][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.656507][ T2836] usb 3-1: Product: syz [ 3069.664237][ T9010] usb 1-1: SerialNumber: syz [ 3069.668638][ T2836] usb 3-1: Manufacturer: syz [ 3069.673202][T13196] usb 4-1: Product: syz [ 3069.677889][ T2836] usb 3-1: SerialNumber: syz [ 3069.681641][T13196] usb 4-1: Manufacturer: syz [ 3069.681650][T13196] usb 4-1: SerialNumber: syz [ 3070.384471][T13196] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3070.390500][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3070.396471][T13196] cdc_ncm 4-1:1.1: bind() failure [ 3070.402859][T13196] usb 4-1: USB disconnect, device number 27 [ 3070.404533][ T2836] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3070.415029][ T2836] cdc_ncm 3-1:1.0: bind() failure [ 3070.420840][ T2836] cdc_ncm 3-1:1.1: bind() failure [ 3070.756004][ T2836] usb 3-1: USB disconnect, device number 102 [ 3070.814219][ T9010] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3070.820643][ T9010] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3070.828242][ T9010] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3071.027730][ T9010] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3071.046131][ T9010] usb 1-1: USB disconnect, device number 86 [ 3071.052550][ T9010] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:02:50 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:50 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x322d}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:50 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x34, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:50 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x500d}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:50 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:50 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:02:51 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x35, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:51 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:51 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x3f00}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:51 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x36, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:51 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9200}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:51 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x37, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3071.804201][T20564] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 3071.804216][ T9010] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 3071.820657][ T2836] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3072.184225][ T9010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3072.195231][ T9010] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3072.205048][ T9010] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3072.214245][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3072.225551][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3072.374259][ T9010] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3072.383354][ T9010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3072.391675][ T9010] usb 4-1: Product: syz [ 3072.396014][ T9010] usb 4-1: Manufacturer: syz [ 3072.400641][ T9010] usb 4-1: SerialNumber: syz [ 3072.444306][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3072.453820][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3072.462950][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3072.471015][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3072.479056][ T2836] usb 3-1: Product: syz [ 3072.483316][T20564] usb 1-1: Product: syz [ 3072.487517][ T2836] usb 3-1: Manufacturer: syz [ 3072.492144][T20564] usb 1-1: Manufacturer: syz [ 3072.496797][ T2836] usb 3-1: SerialNumber: syz [ 3072.501530][T20564] usb 1-1: SerialNumber: syz [ 3073.074287][ T9010] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3073.080323][ T9010] cdc_ncm 4-1:1.0: bind() failure [ 3073.087168][ T9010] cdc_ncm 4-1:1.1: bind() failure [ 3073.094664][ T9010] usb 4-1: USB disconnect, device number 28 [ 3073.644323][ T2836] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3073.650959][ T2836] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3073.658495][ T2836] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3073.684274][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3073.704253][T20564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3073.724245][T20564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3073.732000][T20564] usb 1-1: USB disconnect, device number 87 [ 3073.865539][ T2836] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3073.881788][ T2836] usb 3-1: USB disconnect, device number 103 [ 3073.889668][ T2836] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 08:02:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:53 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x4000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:53 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x38, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:53 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x101d0}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:53 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x39, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:53 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:02:53 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:53 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:53 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x500d}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:53 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3074.424265][ T9010] usb 1-1: new high-speed USB device number 88 using dummy_hcd 08:02:53 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x80000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:53 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x9100}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3074.634185][ T2836] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3074.644264][ T382] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3074.784242][ T9010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3074.964260][ T9010] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3074.973405][ T9010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.981617][ T9010] usb 1-1: Product: syz [ 3074.985888][ T9010] usb 1-1: Manufacturer: syz [ 3074.990755][ T9010] usb 1-1: SerialNumber: syz [ 3075.004235][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3075.014247][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3075.026037][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3075.036315][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3075.204251][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3075.213278][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3075.221389][ T382] usb 4-1: Product: syz [ 3075.224243][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3075.225664][ T382] usb 4-1: Manufacturer: syz [ 3075.234816][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3075.239330][ T382] usb 4-1: SerialNumber: syz [ 3075.247776][ T2836] usb 3-1: Product: syz [ 3075.256248][ T2836] usb 3-1: Manufacturer: syz [ 3075.261248][ T2836] usb 3-1: SerialNumber: syz [ 3075.934198][ T382] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3075.940289][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3075.947135][ T382] cdc_ncm 4-1:1.1: bind() failure [ 3075.954862][ T382] usb 4-1: USB disconnect, device number 29 [ 3076.154216][ T9010] cdc_ncm 1-1:1.0: bind() failure [ 3076.174323][ T9010] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3076.194251][ T9010] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3076.201845][ T9010] usb 1-1: USB disconnect, device number 88 [ 3076.384224][ T2836] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3076.390650][ T2836] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3076.398239][ T2836] cdc_ncm 3-1:1.0: setting rx_max = 2048 08:02:56 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:56 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x80040}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:56 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x9200}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:56 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3076.595594][ T2836] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3076.634837][ T2836] usb 3-1: USB disconnect, device number 104 [ 3076.641849][ T2836] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 08:02:56 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x200000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3076.894191][ T382] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 3076.914185][T20564] usb 4-1: new high-speed USB device number 30 using dummy_hcd 08:02:56 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:56 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:56 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x20d302}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3077.264239][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3077.284412][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3077.295530][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3077.309845][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3077.374225][T13196] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3077.434277][ T382] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3077.443639][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3077.451820][ T382] usb 1-1: Product: syz [ 3077.456104][ T382] usb 1-1: Manufacturer: syz [ 3077.460678][ T382] usb 1-1: SerialNumber: syz [ 3077.494297][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3077.503415][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3077.511499][T20564] usb 4-1: Product: syz [ 3077.515749][T20564] usb 4-1: Manufacturer: syz [ 3077.520363][T20564] usb 4-1: SerialNumber: syz [ 3077.754298][T13196] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3077.934244][T13196] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3077.943480][T13196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3077.951718][T13196] usb 3-1: Product: syz [ 3077.956188][T13196] usb 3-1: Manufacturer: syz [ 3077.961011][T13196] usb 3-1: SerialNumber: syz [ 3078.224278][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3078.230294][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3078.236059][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3078.244062][T20564] usb 4-1: USB disconnect, device number 30 [ 3078.644203][ T382] cdc_ncm 1-1:1.0: bind() failure [ 3078.664452][ T382] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3078.684296][ T382] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3078.693544][ T382] usb 1-1: USB disconnect, device number 89 08:02:58 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:02:58 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xe002a0}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:58 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x41, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:58 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 3079.084266][T13196] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3079.090687][T13196] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3079.098200][T13196] cdc_ncm 3-1:1.0: setting rx_max = 2048 08:02:58 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x42, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:58 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x80000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:58 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x43, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3079.305834][T13196] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3079.317381][T13196] usb 3-1: USB disconnect, device number 105 [ 3079.323699][T13196] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3079.394198][T20564] usb 1-1: new high-speed USB device number 90 using dummy_hcd 08:02:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:02:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x44, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:02:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x80040}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3079.764204][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3079.944358][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3079.953565][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3079.962023][T20564] usb 1-1: Product: syz [ 3079.966273][T20564] usb 1-1: Manufacturer: syz [ 3079.970878][T20564] usb 1-1: SerialNumber: syz [ 3081.154231][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3081.174225][T20564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3081.194254][T20564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3081.201944][T20564] usb 1-1: USB disconnect, device number 90 08:03:01 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:01 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:01 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 08:03:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2d32000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x45, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x200000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x46, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x20d302}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x47, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x4000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:01 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x48, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3081.894176][T13196] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 3081.904277][T20564] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3082.254243][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3082.294257][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3082.424282][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3082.433418][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3082.441514][T13196] usb 1-1: Product: syz [ 3082.445732][T13196] usb 1-1: Manufacturer: syz [ 3082.450340][T13196] usb 1-1: SerialNumber: syz [ 3082.474281][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3082.483419][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3082.491594][T20564] usb 3-1: Product: syz [ 3082.495904][T20564] usb 3-1: Manufacturer: syz [ 3082.500490][T20564] usb 3-1: SerialNumber: syz [ 3083.614256][T13196] cdc_ncm 1-1:1.0: bind() failure [ 3083.634227][T13196] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3083.644459][T20564] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3083.650965][T20564] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3083.658562][T20564] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3083.664270][T13196] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3083.673133][T13196] usb 1-1: USB disconnect, device number 91 [ 3083.865579][T20564] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3083.878593][T20564] usb 3-1: USB disconnect, device number 106 [ 3083.885063][T20564] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 08:03:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x49, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:03 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:03 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xe002a0}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:03 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:03 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 08:03:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xc050000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x10000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:04 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:04 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:04 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x12000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3084.624181][T20564] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 3084.635275][ T9010] usb 3-1: new high-speed USB device number 107 using dummy_hcd 08:03:04 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3084.994265][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3085.024258][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3085.174278][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3085.183356][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3085.191568][T20564] usb 1-1: Product: syz [ 3085.194240][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3085.195964][T20564] usb 1-1: Manufacturer: syz [ 3085.204854][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3085.209621][T20564] usb 1-1: SerialNumber: syz [ 3085.217454][ T9010] usb 3-1: Product: syz [ 3085.226155][ T9010] usb 3-1: Manufacturer: syz [ 3085.230867][ T9010] usb 3-1: SerialNumber: syz [ 3086.394274][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3086.414244][T20564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3086.414250][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3086.434296][ T9010] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3086.444269][T20564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3086.453270][T20564] usb 1-1: USB disconnect, device number 92 [ 3086.454241][ T9010] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3086.470735][ T9010] usb 3-1: USB disconnect, device number 107 08:03:06 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:06 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x18000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:06 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:06 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1f000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x50, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x20000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2d32000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:06 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x51, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3087.154179][ T9010] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3087.154188][T20564] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 3087.524256][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3087.524280][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3087.694299][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3087.703468][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3087.704322][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3087.711917][ T9010] usb 3-1: Product: syz [ 3087.720474][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3087.720484][T20564] usb 1-1: Product: syz [ 3087.720491][T20564] usb 1-1: Manufacturer: syz [ 3087.720504][T20564] usb 1-1: SerialNumber: syz [ 3087.725057][ T9010] usb 3-1: Manufacturer: syz [ 3087.750668][ T9010] usb 3-1: SerialNumber: syz [ 3088.894232][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3088.914299][T20564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3088.934238][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3088.934322][T20564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3088.948268][T20564] usb 1-1: USB disconnect, device number 93 [ 3088.954400][ T9010] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3088.974227][ T9010] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3088.983419][ T9010] usb 3-1: USB disconnect, device number 108 08:03:08 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x52, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:08 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2d320000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:08 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x3000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:08 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:08 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:08 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x53, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:08 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3f000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:09 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x4000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:09 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x54, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:09 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:09 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x55, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:09 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000800}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3089.674198][T20564] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 3089.674220][ T9010] usb 1-1: new high-speed USB device number 94 using dummy_hcd 08:03:09 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x8000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:09 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x56, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3090.044266][ T9010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3090.074268][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3090.214237][ T9010] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3090.223309][ T9010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.231344][ T9010] usb 1-1: Product: syz [ 3090.235542][ T9010] usb 1-1: Manufacturer: syz [ 3090.240136][ T9010] usb 1-1: SerialNumber: syz [ 3090.254238][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3090.263309][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.271447][T20564] usb 3-1: Product: syz [ 3090.275688][T20564] usb 3-1: Manufacturer: syz [ 3090.280430][T20564] usb 3-1: SerialNumber: syz [ 3091.424286][ T9010] cdc_ncm 1-1:1.0: bind() failure [ 3091.444268][T20564] cdc_ncm 3-1:1.0: bind() failure [ 3091.454294][ T9010] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3091.464458][T20564] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3091.474329][ T9010] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3091.484734][ T9010] usb 1-1: USB disconnect, device number 94 [ 3091.486245][T20564] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3091.502629][T20564] usb 3-1: USB disconnect, device number 109 08:03:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x57, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x500d0000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:11 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:11 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xc050000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x58, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x5c2a00a0}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x10000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x59, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8c8502a0}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3092.174860][T20564] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 3092.182479][T11044] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3092.534319][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3092.554404][T11044] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3092.704341][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3092.713366][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.721727][T20564] usb 1-1: Product: syz [ 3092.726168][T11044] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3092.735274][T20564] usb 1-1: Manufacturer: syz [ 3092.739851][T20564] usb 1-1: SerialNumber: syz [ 3092.744610][T11044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.752584][T11044] usb 3-1: Product: syz [ 3092.757133][T11044] usb 3-1: Manufacturer: syz [ 3092.762296][T11044] usb 3-1: SerialNumber: syz [ 3093.914228][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3093.934255][T20564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3093.940795][T11044] cdc_ncm 3-1:1.0: bind() failure [ 3093.964241][T11044] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3093.970983][T20564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3093.978769][T20564] usb 1-1: USB disconnect, device number 95 [ 3093.994246][T11044] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3094.001806][T11044] usb 3-1: USB disconnect, device number 110 08:03:13 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:13 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x91000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:13 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x12000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:13 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:13 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:13 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:13 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x92000000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:14 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x18000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:14 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa0002a5c}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:14 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3094.684217][ T382] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3094.691923][ T9010] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 3094.699604][T13196] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 3094.984383][ T9010] usb 4-1: device descriptor read/64, error 18 [ 3095.084267][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3095.095386][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3095.265419][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3095.274714][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3095.283759][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3095.292110][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3095.300247][T13196] usb 1-1: Product: syz [ 3095.304613][ T382] usb 3-1: Product: syz [ 3095.308803][T13196] usb 1-1: Manufacturer: syz [ 3095.313411][ T382] usb 3-1: Manufacturer: syz [ 3095.318045][T13196] usb 1-1: SerialNumber: syz [ 3095.322679][ T382] usb 3-1: SerialNumber: syz [ 3095.374190][ T9010] usb 4-1: device descriptor read/64, error 18 [ 3095.644169][ T9010] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3095.924184][ T9010] usb 4-1: device descriptor read/64, error 18 [ 3096.314194][ T9010] usb 4-1: device descriptor read/64, error 18 [ 3096.434276][ T9010] usb usb4-port1: attempt power cycle [ 3096.454278][T13196] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3096.460827][T13196] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3096.468491][T13196] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3096.504206][ T382] cdc_ncm 3-1:1.0: bind() failure [ 3096.524261][ T382] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3096.544307][ T382] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3096.552095][ T382] usb 3-1: USB disconnect, device number 111 [ 3096.675259][T13196] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3096.688518][T13196] usb 1-1: USB disconnect, device number 96 [ 3096.698685][T13196] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3096.854185][ T9010] usb 4-1: new high-speed USB device number 33 using dummy_hcd 08:03:16 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1f000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:16 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:16 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3096.944207][ T9010] usb 4-1: Invalid ep0 maxpacket: 0 [ 3097.114183][ T9010] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3097.214240][ T9010] usb 4-1: Invalid ep0 maxpacket: 0 [ 3097.219523][ T9010] usb usb4-port1: unable to enumerate USB device [ 3097.234215][T11044] usb 3-1: new high-speed USB device number 112 using dummy_hcd 08:03:16 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:16 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002858c}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:16 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x60, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:16 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2d320000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:16 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, 0x0}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:16 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x61, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:16 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002e000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:17 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x62, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:17 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x3f000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:17 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xd0010100}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3097.594304][T11044] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:03:17 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x63, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3097.674313][T10606] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 3097.764500][T11044] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3097.773558][T11044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3097.781955][T11044] usb 3-1: Product: syz [ 3097.792536][T11044] usb 3-1: Manufacturer: syz [ 3097.797485][T11044] usb 3-1: SerialNumber: syz [ 3097.874201][T20564] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3098.034256][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3098.144237][T20564] usb 4-1: device descriptor read/64, error 18 [ 3098.204256][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3098.213289][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.221298][T10606] usb 1-1: Product: syz [ 3098.225481][T10606] usb 1-1: Manufacturer: syz [ 3098.230052][T10606] usb 1-1: SerialNumber: syz [ 3098.534172][T20564] usb 4-1: device descriptor read/64, error 18 [ 3098.804252][T20564] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3098.984228][T11044] cdc_ncm 3-1:1.0: bind() failure [ 3099.004258][T11044] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3099.024297][T11044] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3099.033191][T11044] usb 3-1: USB disconnect, device number 112 [ 3099.074198][T20564] usb 4-1: device descriptor read/64, error 18 08:03:18 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3099.414232][T10606] cdc_ncm 1-1:1.0: bind() failure [ 3099.434282][T10606] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3099.454278][T10606] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3099.461724][T10606] usb 1-1: USB disconnect, device number 97 [ 3099.468047][T20564] usb 4-1: device descriptor read/64, error 18 [ 3099.594246][T20564] usb usb4-port1: attempt power cycle [ 3099.724175][ T9010] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3100.004201][T20564] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3100.084231][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3100.104239][T20564] usb 4-1: Invalid ep0 maxpacket: 0 [ 3100.254191][T20564] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3100.254257][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3100.270914][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3100.278909][ T9010] usb 3-1: Product: syz [ 3100.283260][ T9010] usb 3-1: Manufacturer: syz [ 3100.287881][ T9010] usb 3-1: SerialNumber: syz [ 3100.354229][T20564] usb 4-1: Invalid ep0 maxpacket: 0 [ 3100.359567][T20564] usb usb4-port1: unable to enumerate USB device 08:03:19 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:19 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xeffdffff}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:19 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x64, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, 0x0}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:19 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x65, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:19 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xf5ffffff}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:20 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x66, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:20 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000800}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:20 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xfffffdef}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:20 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x67, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3100.724238][T10606] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 3100.904290][T20564] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3101.084266][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3101.174240][T20564] usb 4-1: device descriptor read/64, error 18 [ 3101.254363][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3101.263637][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3101.271819][T10606] usb 1-1: Product: syz [ 3101.276257][T10606] usb 1-1: Manufacturer: syz [ 3101.280872][T10606] usb 1-1: SerialNumber: syz [ 3101.444235][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3101.464248][ T9010] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3101.484251][ T9010] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3101.492167][ T9010] usb 3-1: USB disconnect, device number 113 [ 3101.574206][T20564] usb 4-1: device descriptor read/64, error 18 08:03:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3101.844181][T20564] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3102.134164][T20564] usb 4-1: device descriptor read/64, error 18 [ 3102.164193][ T9010] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3102.464249][T10606] cdc_ncm 1-1:1.0: bind() failure [ 3102.484252][T10606] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3102.514234][T10606] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3102.521830][T10606] usb 1-1: USB disconnect, device number 98 [ 3102.524543][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3102.544221][T20564] usb 4-1: device descriptor read/64, error 18 [ 3102.664518][T20564] usb usb4-port1: attempt power cycle [ 3102.704304][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3102.713382][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3102.721852][ T9010] usb 3-1: Product: syz [ 3102.726049][ T9010] usb 3-1: Manufacturer: syz [ 3102.730625][ T9010] usb 3-1: SerialNumber: syz [ 3103.074180][T20564] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3103.164251][T20564] usb 4-1: Invalid ep0 maxpacket: 0 [ 3103.314194][T20564] usb 4-1: new high-speed USB device number 42 using dummy_hcd 08:03:22 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xffffff7f}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:22 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x500d0000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:22 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x68, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:22 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, 0x0}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3103.404246][T20564] usb 4-1: Invalid ep0 maxpacket: 0 [ 3103.409608][T20564] usb usb4-port1: unable to enumerate USB device 08:03:22 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x69, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xfffffff5}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:23 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x5c2a00a0}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:23 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:23 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xffffffff}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:23 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3103.724181][T20564] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3103.894221][T13196] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3103.914263][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3103.934280][ T9010] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3103.954305][ T9010] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3103.962198][ T9010] usb 3-1: USB disconnect, device number 114 [ 3104.104776][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3104.254257][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3104.266071][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3104.276066][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3104.284229][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3104.285862][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3104.295383][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.312845][T20564] usb 1-1: Product: syz [ 3104.317012][T20564] usb 1-1: Manufacturer: syz [ 3104.321623][T20564] usb 1-1: SerialNumber: syz 08:03:23 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3104.464224][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3104.473363][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.481638][T13196] usb 4-1: Product: syz [ 3104.485918][T13196] usb 4-1: Manufacturer: syz [ 3104.490580][T13196] usb 4-1: SerialNumber: syz [ 3104.654187][T30117] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3105.014274][T30117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3105.194309][T30117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3105.203430][T30117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3105.211808][T30117] usb 3-1: Product: syz [ 3105.216224][T30117] usb 3-1: Manufacturer: syz [ 3105.220868][T30117] usb 3-1: SerialNumber: syz [ 3105.464299][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3105.484319][T20564] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3105.504270][T20564] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3105.513592][T20564] usb 1-1: USB disconnect, device number 99 [ 3105.634219][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3105.654227][T13196] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3105.674264][T13196] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3105.683496][T13196] usb 4-1: USB disconnect, device number 43 08:03:25 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:25 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x8c8502a0}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:25 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x91000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:25 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3106.404258][T30117] cdc_ncm 3-1:1.0: bind() failure [ 3106.410417][T10606] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3106.418181][T20564] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 3106.444333][T30117] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3106.464302][T30117] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3106.472747][T30117] usb 3-1: USB disconnect, device number 115 [ 3106.784252][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3106.795293][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3106.806221][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3106.815976][T10606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 08:03:26 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3106.825700][T10606] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3106.964287][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3106.973416][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.981644][T20564] usb 1-1: Product: syz [ 3106.986104][T20564] usb 1-1: Manufacturer: syz [ 3106.990695][T20564] usb 1-1: SerialNumber: syz [ 3106.995424][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3107.004776][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3107.013066][T10606] usb 4-1: Product: syz [ 3107.017262][T10606] usb 4-1: Manufacturer: syz [ 3107.021991][T10606] usb 4-1: SerialNumber: syz [ 3107.174214][T30117] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3107.554229][T30117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3107.754261][T30117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3107.763357][T30117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3107.771495][T30117] usb 3-1: Product: syz [ 3107.775790][T30117] usb 3-1: Manufacturer: syz [ 3107.780837][T30117] usb 3-1: SerialNumber: syz [ 3108.104189][T20564] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3108.110705][T20564] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3108.118321][T20564] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3108.124304][T10606] cdc_ncm 4-1:1.0: bind() failure [ 3108.144301][T10606] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3108.164283][T10606] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3108.175716][T10606] usb 4-1: USB disconnect, device number 44 [ 3108.325408][T20564] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3108.337049][T20564] usb 1-1: USB disconnect, device number 100 [ 3108.343323][T20564] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:03:28 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:28 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:28 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x70, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:28 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x92000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:28 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:28 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x71, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:28 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xa0002a5c}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:28 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x72, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:28 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3108.894180][T13196] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3108.914290][T30117] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3108.920765][T30117] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3108.928223][T30117] cdc_ncm 3-1:1.0: setting rx_max = 2048 08:03:28 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x73, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3109.104290][ T382] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 3109.145211][T30117] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3109.166729][T30117] usb 3-1: USB disconnect, device number 116 [ 3109.172973][T30117] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3109.254241][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3109.265303][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3109.275371][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3109.285340][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3109.295382][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3109.305259][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3109.464250][ T382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3109.475228][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3109.484761][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3109.492742][T13196] usb 4-1: Product: syz [ 3109.497572][T13196] usb 4-1: Manufacturer: syz [ 3109.502147][T13196] usb 4-1: SerialNumber: syz 08:03:29 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, 0x0}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3109.644261][ T382] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3109.653339][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3109.661533][ T382] usb 1-1: Product: syz [ 3109.665858][ T382] usb 1-1: Manufacturer: syz [ 3109.670513][ T382] usb 1-1: SerialNumber: syz [ 3109.894164][T15443] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3110.254274][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3110.424314][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3110.434044][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3110.442219][T15443] usb 3-1: Product: syz [ 3110.446512][T15443] usb 3-1: Manufacturer: syz [ 3110.451196][T15443] usb 3-1: SerialNumber: syz [ 3110.644249][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3110.664264][T13196] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3110.684295][T13196] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3110.694376][T13196] usb 4-1: USB disconnect, device number 45 [ 3110.854198][ T382] cdc_ncm 1-1:1.0: bind() failure [ 3110.874256][ T382] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3110.894477][ T382] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3110.901921][ T382] usb 1-1: USB disconnect, device number 101 08:03:30 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xa002858c}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x74, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x75, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x9, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xa002e000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x69, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x76, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xa, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:30 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000800}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3111.414164][ T382] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3111.634238][T15443] cdc_ncm 3-1:1.0: bind() failure [ 3111.654271][T15443] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3111.674303][T15443] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3111.683376][T15443] usb 3-1: USB disconnect, device number 117 [ 3111.794384][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3111.805460][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3111.815419][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3111.825789][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3111.835989][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3111.845777][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 08:03:31 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, 0x0}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3112.014264][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3112.023458][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3112.032563][ T382] usb 4-1: Product: syz [ 3112.036878][ T382] usb 4-1: Manufacturer: syz [ 3112.041475][ T382] usb 4-1: SerialNumber: syz [ 3112.364181][T15443] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3112.724223][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3112.894283][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3112.903442][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3112.911811][T15443] usb 3-1: Product: syz [ 3112.916274][T15443] usb 3-1: Manufacturer: syz [ 3112.920851][T15443] usb 3-1: SerialNumber: syz [ 3113.184227][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3113.204263][ T382] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3113.224263][ T382] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3113.231956][ T382] usb 4-1: USB disconnect, device number 46 08:03:33 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:33 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x77, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xd0010100}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xb, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:33 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x78, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xc, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xeffdffff}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x79, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xd, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:33 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3113.944353][T10606] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 3113.954272][ T382] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3114.104315][T15443] cdc_ncm 3-1:1.0: bind() failure [ 3114.124249][T15443] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3114.144305][T15443] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3114.151868][T15443] usb 3-1: USB disconnect, device number 118 [ 3114.324301][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3114.335186][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3114.344270][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3114.345048][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3114.365767][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3114.375514][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3114.385256][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 08:03:33 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, 0x0}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) [ 3114.524289][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3114.533448][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3114.541849][T10606] usb 1-1: Product: syz [ 3114.546280][T10606] usb 1-1: Manufacturer: syz [ 3114.550955][T10606] usb 1-1: SerialNumber: syz [ 3114.564774][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3114.573907][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3114.582142][ T382] usb 4-1: Product: syz [ 3114.586508][ T382] usb 4-1: Manufacturer: syz [ 3114.591256][ T382] usb 4-1: SerialNumber: syz [ 3114.844208][T20564] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3115.244289][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3115.424265][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3115.433332][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.441643][T20564] usb 3-1: Product: syz [ 3115.446099][T20564] usb 3-1: Manufacturer: syz [ 3115.450859][T20564] usb 3-1: SerialNumber: syz [ 3115.724209][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3115.724249][T10606] cdc_ncm 1-1:1.0: bind() failure [ 3115.744254][ T382] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3115.754269][T10606] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3115.764280][ T382] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3115.772253][ T382] usb 4-1: USB disconnect, device number 47 [ 3115.777249][T10606] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3115.786216][T10606] usb 1-1: USB disconnect, device number 102 08:03:35 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xe, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xf5ffffff}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:35 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:35 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0xf, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x10, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xfffffdef}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:35 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3116.504239][ T382] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3116.504249][T10606] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 3116.634204][T20564] cdc_ncm 3-1:1.0: bind() failure [ 3116.654391][T20564] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 3116.674240][T20564] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 3116.684202][T20564] usb 3-1: USB disconnect, device number 119 [ 3116.874259][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3116.885261][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3116.895142][ T382] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3116.904225][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3116.904902][ T382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 08:03:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x11, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:36 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xffffff7f}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x82, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3117.084300][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3117.094537][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3117.105460][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.113925][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.114191][ T382] usb 4-1: Product: syz [ 3117.122565][T10606] usb 1-1: Product: syz [ 3117.126920][ T382] usb 4-1: Manufacturer: syz [ 3117.130767][T10606] usb 1-1: Manufacturer: syz [ 3117.135605][ T382] usb 4-1: SerialNumber: syz [ 3117.140057][T10606] usb 1-1: SerialNumber: syz [ 3117.414181][ T2836] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3117.774301][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3117.844214][ T382] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3117.850396][ T382] cdc_ncm 4-1:1.0: bind() failure [ 3117.856608][ T382] cdc_ncm 4-1:1.1: bind() failure [ 3117.863493][ T382] usb 4-1: USB disconnect, device number 48 [ 3117.964258][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3117.973394][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.981604][ T2836] usb 3-1: Product: syz [ 3117.985858][ T2836] usb 3-1: Manufacturer: syz [ 3117.990470][ T2836] usb 3-1: SerialNumber: syz 08:03:37 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3118.324225][T10606] cdc_ncm 1-1:1.0: bind() failure [ 3118.344215][T10606] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3118.364331][T10606] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3118.372305][T10606] usb 1-1: USB disconnect, device number 103 [ 3118.604185][T20564] usb 4-1: new high-speed USB device number 49 using dummy_hcd 08:03:38 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x83, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:38 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xfffffff5}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:38 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x12, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:38 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:38 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x84, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:38 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:38 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x13, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3119.004516][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3119.015450][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3119.025663][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3119.035461][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3119.124258][ T2836] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3119.130783][ T2836] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3119.138583][ T2836] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3119.214250][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3119.223280][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3119.231428][T20564] usb 4-1: Product: syz [ 3119.235941][T20564] usb 4-1: Manufacturer: syz [ 3119.240525][T20564] usb 4-1: SerialNumber: syz [ 3119.345188][ T2836] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3119.357100][ T2836] usb 3-1: USB disconnect, device number 120 [ 3119.363345][ T2836] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM 08:03:39 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x85, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:39 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xffffffff}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:39 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, &(0x7f0000001800)={0x40, 0xe, 0xe6, {0xe6, 0x22, "ea193fd02798cfb4616527c921a9a8ed8b69825358906954eec7c9d72e0a47d82e1f58dc5718ecdd3b11bf4866d12f66145ab6ee92f294b637f191186675fc28063d405b13ce6dfb90c0bfbf63287854a31c0669821fca8db1602ac019a1239dec738579b02ace2512e243cd9cd8fdfec8303253914e3a264f44e30458177f4100120bcacc4a5ce352048e4e23e02e271b5568b6b09ac3723b40be67772ee8dd90064d89639e621e8ecafec8414b6778ea8923f362b1bfc900783fe716c0e1f2d8c5fd37b4b3b3c38147a0073a1824388df4ee11a199bfc5a9b8a00482fc684d7b7a9675"}}, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001b80)={0x44, &(0x7f0000001980)={0x40, 0x10, 0x5, "495928a928"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x39}, &(0x7f0000001a00)={0x0, 0x8, 0x1}, &(0x7f0000001a40)={0x20, 0x80, 0x1c, {0x7fff, 0x1, 0x9, 0x2, 0x200, 0x2, 0x200, 0x3f, 0xfffa, 0x9, 0xfbff, 0xf25d}}, &(0x7f0000001a80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001ac0)={0x20, 0x83, 0x2}, &(0x7f0000001b00)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001b40)={0x20, 0x89, 0x2}}) 08:03:39 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x14, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3119.944350][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3119.951553][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3119.957944][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3119.970564][T20564] usb 4-1: USB disconnect, device number 49 [ 3120.114195][T15443] usb 1-1: new high-speed USB device number 104 using dummy_hcd 08:03:39 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:39 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x15, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:39 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x86, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:39 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:39 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x87, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3120.484385][T15443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:03:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x16, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:40 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:40 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x88, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x17, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3120.654247][T15443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3120.663485][T15443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3120.672072][T15443] usb 1-1: Product: syz [ 3120.680360][T15443] usb 1-1: Manufacturer: syz [ 3120.689735][T15443] usb 1-1: SerialNumber: syz [ 3120.704175][ T382] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3120.714286][T20564] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3121.074261][ T382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3121.114253][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3121.125171][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3121.135155][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3121.145102][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3121.244217][ T382] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3121.253455][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.261775][ T382] usb 3-1: Product: syz [ 3121.266097][ T382] usb 3-1: Manufacturer: syz [ 3121.270831][ T382] usb 3-1: SerialNumber: syz [ 3121.334274][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3121.343439][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.351760][T20564] usb 4-1: Product: syz [ 3121.356141][T20564] usb 4-1: Manufacturer: syz [ 3121.360759][T20564] usb 4-1: SerialNumber: syz [ 3121.834235][T15443] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3121.840667][T15443] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3121.848428][T15443] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3122.055808][T15443] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3122.067676][T15443] usb 1-1: USB disconnect, device number 104 [ 3122.074024][T15443] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3122.076966][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3122.088618][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3122.095550][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3122.107687][T20564] usb 4-1: USB disconnect, device number 50 [ 3122.394198][ T382] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3122.400698][ T382] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3122.408340][ T382] cdc_ncm 3-1:1.0: setting rx_max = 2048 08:03:41 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x92}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:41 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x89, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:41 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3122.607860][ T382] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3122.632196][ T382] usb 3-1: USB disconnect, device number 121 [ 3122.639211][ T382] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3122.834232][T20564] usb 4-1: new high-speed USB device number 51 using dummy_hcd 08:03:42 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x91}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:42 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x18, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:42 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x91}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:42 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:42 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x19, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3123.194544][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:03:42 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3123.243184][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 08:03:42 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:42 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xf5ffffff}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3123.289558][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3123.318878][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 08:03:42 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x4}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3123.484255][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3123.493724][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.502153][T20564] usb 4-1: Product: syz [ 3123.506684][T20564] usb 4-1: Manufacturer: syz [ 3123.511372][T20564] usb 4-1: SerialNumber: syz [ 3124.204250][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3124.210300][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3124.216609][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3124.222586][T20564] usb 4-1: USB disconnect, device number 51 08:03:44 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:44 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x40000800}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xeffdffff00000000}}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xfffffff5}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x10}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:44 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3124.984234][T20564] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3125.384226][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3125.395125][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3125.405082][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3125.414957][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3125.604221][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3125.613316][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.621481][T20564] usb 4-1: Product: syz [ 3125.626047][T20564] usb 4-1: Manufacturer: syz [ 3125.630628][T20564] usb 4-1: SerialNumber: syz [ 3126.324233][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3126.330325][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3126.336156][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3126.343309][T20564] usb 4-1: USB disconnect, device number 52 08:03:46 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:46 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002858c}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x12}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0xa002e000}}], 0x92, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010b000000090400001202060000052406000005240000000d240f01000000000000001000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0xc, {0xc, 0x11, "245e983289284cd678ec"}}, &(0x7f0000000040)={0x0, 0x3, 0xae, @string={0xae, 0x3, "16e483627aa77ae8303b06828d52a65add5b8c9995f60a1d8bfc61614bcf9fd7d5e30b8e9fc7c94a720306762377286cb809a6090c3dc56fc049b766a6100466aa1f73cba7e91cdc51bbac18cd03636f8819e84c8ad48b25d79539c104ee12eff68c8caa6242bddd5f99d25e6c4cc962fdef94794a6a8e781f9122ee187aecbcf56959ed28531eec626a879fad6b31eb0d43fa1bff247a1d1f109a2785ba1a4b00e514d72cfbd3a6a254dcfe"}}, &(0x7f0000000100)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x48, 0x1a, 0x0, 0x4, "4eccacf0", "c2afac40"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1a, 0x6, 0x3f, 0xff, 0x8, 0x1000}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000240)={0x0, 0x11, 0x7c, "0a72bf6bc45c0f52c2424682f04b11e9452e55987bbc65ea1848579e06de4fd11fbbb3c468b9e197bc43c1aafcd7832973ce21bbb2df70a20c26b39a83945af46869158b3d0639b96fccefa0ef3aec9f9985e56178b12df7aaf358c5825e6d3e7d80e0e8008359f5d1eee136332503c2afd4dc91f468c758632231cf"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0xc0, 0x40, [0x0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x248}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000580)={0x40, 0xb, 0x2, "c84c"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ee4a"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xef}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xa3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:46 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x90, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x18}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x91, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:46 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x1e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3127.094197][T20564] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3127.214926][T15443] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 3127.454209][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3127.465153][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3127.475089][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3127.485108][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3127.624306][T15443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3127.654237][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3127.663542][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3127.671892][T20564] usb 4-1: Product: syz [ 3127.676459][T20564] usb 4-1: Manufacturer: syz [ 3127.681103][T20564] usb 4-1: SerialNumber: syz [ 3127.804252][T15443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3127.813341][T15443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3127.821393][T15443] usb 1-1: Product: syz [ 3127.825591][T15443] usb 1-1: Manufacturer: syz [ 3127.830197][T15443] usb 1-1: SerialNumber: syz [ 3128.294724][T32272] udc-core: couldn't find an available UDC or it's busy [ 3128.301787][T32272] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3128.384227][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3128.390328][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3128.396136][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3128.403669][T20564] usb 4-1: USB disconnect, device number 53 08:03:48 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x91}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:48 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x21, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x3cc, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xb7, 0x16, 0xd1, 0x20, 0x22b8, 0x3010, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ba, 0x1, 0x22, 0x1, 0x20, 0x0, [{{0x9, 0x4, 0xda, 0x80, 0xb, 0xb2, 0xeb, 0x1b, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x1f}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x1, 0x1, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d36e3c99d5"}, {0x5, 0x24, 0x0, 0x1fe}, {0xd, 0x24, 0xf, 0x1, 0xfffff800, 0x8, 0x800, 0x20}}], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0x1b, 0x1, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x23, 0x20, [@generic={0xa0, 0x23, "c8bd04bb7536509a00b59b75234541ce77d06856264cee90d788bd2bd2d4db01cedbb609842a00f76facec365e244c08f82bb4f4bbe9da4ab06f762504d86af481f21a5ef6d55e8673ad1159c7c0ee2e5897106d6133aa94459a1334f7f9491ef6a08df6e7dcbfcced71f0e6840037313477de86f7cc9d0eb945061c951a919f80d123ea41bed0557599fb32bcd0add71f4bfc26914fde9122810939d7ea"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x1, 0x1, 0x80}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0x1, 0x4}}, {{0x9, 0x5, 0xf, 0x1, 0x787, 0xcb, 0x1}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x2, 0x62, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x26}, @uac_iso={0x7, 0x25, 0x1, 0xca442838d30e9d65, 0x0, 0xff32}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x4, 0x1, 0x3, [@generic={0xc7, 0x2, "796055b4443942b04c04df7871b910cb6961516750c37823f0851ec97631368465f645f4e4f54a233c5c966298c7d0d09f779e3a607ffa4b538b137c32ed4acdb08fad0675afb0df5b3ccab53b58ae521d9a7dda8f1545227dfb4a88b7c288727133301236f044bda2f1fd5568ae62061c48a4bd1fc0f1579a0df68f0f83ef3f1381b31e6384e7b8fbba0346c5d5f0051922b97602db1875f7a9c81e4cb0f187ad544dd8b532697fa1772e1c6aed9ac27b3a02859cf8c88ca23bbaec38959406aeef7dfdaa"}, @generic={0xab, 0x0, "e1dc527842db16fc2846917c70381c20c1d4d579cda7dce18cb3597cd3f5cd0db3b370ccbe7d20dfec9f41f55c6034a43334698b524fe7239c4c99b86b3f2eb3c9e8f9804c816c7bb4ab1a98c823fa16384031a73e230071bec8836d0d698a9852c16f7b557a06843cdbc1b41611ae4d7ce699ff0104165624312d1d0804989130124d7fea4d82b3974834800555f538fd720b0585716996a36bdff3d644ff058460a2ed86c5e83ec1"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x6, 0x92, 0xed, [@generic={0x41, 0x21, "fc9e3bab0a647fcc19b884ce6817b53fdab2666d74629fffd341089f661ee422c771c9fdb07aff3262ceb9e20b2751c48925ae3aa7b8261eb3e67c266a842c"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x7, 0x4, 0x5, [@generic={0xa8, 0x9, "a40837318f2a6535ee1798096f02921fb983950e092754b441e6ac8fb1e2d0f9e06f4ee70bd944ed3dd6e08052ff4d6faba6713f61b4b7598c7e4c0ca1b25cf16b35437e1ebf7f5d219a3140b23ccd0e8492bb31efbb70aca7060252bcdb45a87bb2466a4df84aa237f8d18ae4cc0a346ea9b782d66fe7c3d0e767e403e35b62c87cb59726537c0add22b6b87fc679777b8a548fb7bd0d381a1f4c1591199fab89c1f2701c6f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3f7, 0x0, 0x20, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x668, 0x9, 0x1f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x101}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x5, 0x0, 0x40, 0x40, 0x7}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3438}}, {0xa6, &(0x7f00000000c0)=@string={0xa6, 0x3, "f49fbbbefc09f87263acc7b6ce64c657e212695308c6206dafdb5ec1fa6f5982996ad4f16c6ef4b58aec30eca1590147b8e36ace9074c6f461235491bcd4645d4b4c691d95b130db9b0f725a6af22a23e8e6a005dc2ac605e943fc6f6f9195a11288c09f34e4188428346276a5ced4918065bd683d21016e37173ec29dad81700bc753bed1b2c34d79e86786575475498cbe43b61b273cce25fd58100b25902b6754619b"}}, {0x8f, &(0x7f0000000240)=@string={0x8f, 0x3, "1fb5894c61fd582d6fd8e8d4b43708420ba64cf33dc736756d1b89e7d6c772ba2cc0e13ad6c9b82e11855f76b6b1319643011be354725e8084cf9a6b0f82ff66a52fc0d654acd845b0c9c148f32472dc50353ba2d2ce76e3cb4b282f312af6d7c7056dd8f3e47af583509e8ff5ea68c04bb8a0fbbba29d37626569a07771c7deee3c137953fcd8cea50c874e5e"}}, {0x85, &(0x7f00000003c0)=@string={0x85, 0x3, "f06cfe7b9b78f996a69c9ff958af93121001697b6a5f9e0945633e2de321055c6aa50d2922f573cb6d1010996fbc6b1a6b5732627c08f78ba4fb96ad953abf5ab6f3b0abf64738e484e1b59c8cc2c6cffbcfd5c8a0bd20596d5d7c3b8540ea05d7fde3f4276a8b447844239e74c50efb810e08cc39f9304446ae2b655469f9009b1f1d"}}, {0x100, &(0x7f0000000900)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000300)={0x14, &(0x7f0000000a80)={0x20, 0x0, 0xc7, {0xc7, 0x31, "647e6630ad219008381118de7874827ca44882e0fdcf905e9f9e67490c12db75c501d753da7e23839e4cb99f26cb45a2bb54f716a0f3e645a6eb21f6751069e7ae3e0dfa367e673f03c6a2ce48332eeef848d0e316934d63d5e11b2f431a757867ea2ba258f3029b51aad52ebe00080e0f967389d29a51eb7ded7958cd962b2ae0480544e7799f422c08c3c7c5da4105b9795a63f045970fa7f359baebfb3ac471dc4889b7e672089b6e9ac8674ba5f85c37872ea668d78883a1f4643655eb1944408c5c18"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x20, 0x1, 0xc, "313b7ae5f3d12cd59d7520b2"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6b}, &(0x7f0000000c40)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x8, 0x4, 0x2d1c, 0x401, 0x7, 0x81, 0x1ff, 0x6, 0x3f, 0xffff}}, &(0x7f0000000c80)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000000cc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d00)={0x20, 0x87, 0x2}, &(0x7f0000000d40)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000e00)={0x0, 0x11, 0x98, {0x98, 0xa, "0e59e5af6e2a9a9b94f1dfea363480efb248af133dfb5b51a74454751cde833cbe7fdfb7956ba2e865fe1d4210ac3085a8bb4f39a3050a03789414ebff3d0377813c853211f054611e7d3aba12fe8e81ec6a61f4d0d764bd45a8ed1e5da7476afc9ea25bb73c59f995bedaa6d91ddc3832ec3b990f79ce975952d005f837dbc3e8749de244ee9bea1037bde1d6358b537ec2c5dd6173"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001200)={0x44, &(0x7f0000000f40)={0x0, 0x10, 0xe6, "866731dd2c887ae899976c08a99e19d241a32a104dee9b8d8adbfdf15cdb79d4a1b2519e2bd3cd6f29ca1c00cf0460c1364474f8721360b1e48f8f2f86f1b589128f0beca6dc3b1f2c88ac9dd334c902e02673eb3c8fb88ba3131b64d85ff898411af30c663a19e3fa2cece6b467b30b203056ba65b624da850f43541fa9752ad2261f24bbae210d1eafa1b7caa722252d1d6697a954e292c76c64f281111262fe34581f16a7cd2b6d8cc85d1ab83064b6ff93ebb2b1e27db8504cbb4da2917ac92b932217c1c228a585ab526e3fcd0c438b3d7833317810a3a5587bd053feab820c5374847c"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x15}, &(0x7f0000001080)={0x0, 0x8, 0x1}, &(0x7f00000010c0)={0x20, 0x80, 0x1c, {0x5, 0x7, 0x80000001, 0xac74, 0x20, 0xff45, 0x8001, 0x2, 0x6, 0x3, 0x5, 0x4}}, &(0x7f0000001100)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000001140)={0x20, 0x83, 0x2}, &(0x7f0000001180)={0x20, 0x87, 0x2, 0x1000}, &(0x7f00000011c0)={0x20, 0x89, 0x2}}) 08:03:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x100000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3128.984540][T15443] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3128.994919][T15443] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3129.011113][T15443] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3129.144212][T20564] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3129.154331][T10606] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3129.195339][T15443] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3129.215430][T15443] usb 1-1: USB disconnect, device number 105 [ 3129.221672][T15443] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3129.504212][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3129.515164][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3129.526022][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3129.535988][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3129.545771][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3129.694281][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3129.703794][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3129.712060][T10606] usb 3-1: Product: syz [ 3129.716412][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3129.725473][T10606] usb 3-1: Manufacturer: syz [ 3129.730071][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3129.738240][T10606] usb 3-1: SerialNumber: syz [ 3129.743077][T20564] usb 4-1: Product: syz [ 3129.747681][T20564] usb 4-1: Manufacturer: syz [ 3129.752323][T20564] usb 4-1: SerialNumber: syz [ 3129.974190][T28405] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 3130.394268][T28405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3130.424560][T32515] udc-core: couldn't find an available UDC or it's busy [ 3130.431595][T32515] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 08:03:49 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000945010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:49 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x22, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:49 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x92}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:49 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3130.454183][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3130.460615][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3130.466790][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3130.475130][T20564] usb 4-1: USB disconnect, device number 54 08:03:50 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x300000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:50 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x23, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3130.584216][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3130.598584][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3130.607171][T28405] usb 1-1: Product: syz [ 3130.644486][T28405] usb 1-1: can't set config #1, error -71 [ 3130.653352][T28405] usb 1-1: USB disconnect, device number 106 [ 3130.884211][T10606] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3130.890665][T10606] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3130.898201][T10606] cdc_ncm 3-1:1.0: setting rx_max = 2048 08:03:50 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:50 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x400000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:50 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x300}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:50 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x24, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3131.014176][T28405] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 3131.084402][T32515] udc-core: couldn't find an available UDC or it's busy [ 3131.094229][T32515] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3131.116760][T10606] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3131.131608][T10606] usb 3-1: USB disconnect, device number 122 [ 3131.138049][T10606] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3131.224237][T15443] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3131.394256][T28405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3131.405746][T28405] usb 1-1: config 1 interface 1 has no altsetting 0 [ 3131.564246][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3131.573434][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3131.582131][T28405] usb 1-1: Product: syz [ 3131.586447][T28405] usb 1-1: Manufacturer: syz [ 3131.591026][T28405] usb 1-1: SerialNumber: syz [ 3131.595931][T15443] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3131.607921][T15443] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3131.618109][T15443] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3131.628004][T15443] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3131.794311][T15443] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3131.803717][T15443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3131.811854][T15443] usb 4-1: Product: syz [ 3131.816155][T15443] usb 4-1: Manufacturer: syz [ 3131.820743][T15443] usb 4-1: SerialNumber: syz [ 3131.864250][T28405] usb 1-1: selecting invalid altsetting 0 [ 3131.870066][T28405] usb 1-1: selecting invalid altsetting 0 [ 3131.876488][T28405] cdc_ncm 1-1:1.0: bind() failure [ 3131.882302][T28405] usb 1-1: selecting invalid altsetting 0 [ 3131.888259][T28405] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 3131.894162][T10606] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3131.894955][T28405] usb 1-1: selecting invalid altsetting 0 [ 3131.908129][T28405] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 3132.264250][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:03:51 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x500000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4da, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf8, 0x40, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x3, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x3, 0x6d}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x39, 0x2, 0x9, 0x40, 0x4}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x1f, 0x81, 0x6, 0x10}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x20, 0x2, 0x79, {0x79, 0x2, "87d71ba46bb01654128e4110704dab3ad549b8c848ee99ce07523e2cf9c7a211248e31d9aa3eeb1b0e54d42cba967b7162679fa0ee19e2429bdc9515ab1e5cc365edd682782589b9563b097db74443ed3553b3d5d83eb3eec68c48e85447c24d058a51152f227033a1e88ad4ba2aec66d64bf2c044a229"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c40)={0x44, &(0x7f00000009c0)={0x0, 0x12, 0xa7, "ff488e5c13406b04eae4de72f7049cec43ef38ba462ca469a34f3ad05ca5bd89de405c203c50bfd125c1b251661bbc15dd1fbdf88d46770c5d8ef11d1f04d20e3fd6ceeb93428d6fb8bf136c95cbbfd3a124b0c49d98662403080b85cf8e7e3eb1045177c6b3762711a7c4ea36e040d716ab313f69b644c1deb79c331a9274d8dcb449223cc70a97da0f1a5eb21194e778cbdf343806e2376ef6d86cd8c2265572f0fc4e88667c"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x80, 0x1c, {0x8001, 0x9, 0xfff, 0x7f, 0xbb9e, 0x4, 0xfff9, 0x20, 0x3c, 0x4, 0x8}}, &(0x7f0000000b40)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000b80)={0x20, 0x83, 0x2}, &(0x7f0000000bc0)={0x20, 0x87, 0x2}, &(0x7f0000000c00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x250, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x30, 0x58, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x8, 0x86, 0x1, {0x22, 0x4d}}, {{{0x9, 0x5, 0x81, 0x3, 0xb3421dbd31284da, 0x0, 0x1, 0x5}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0x6, 0xfa, 0x40, 0x3f}, 0x13, &(0x7f00000001c0)={0x5, 0xf, 0x13, 0x1, [@generic={0xe, 0x10, 0x2, "38e98879558ea7e08c11f4"}]}, 0x3, [{0x18, &(0x7f0000000240)=@string={0x18, 0x3, "f859e23bf521c6ac1249828bd50aab2674d7c5d5675f"}}, {0x70, &(0x7f0000000280)=@string={0x70, 0x3, "61e2fd03c570c4427bf774d766b45408f3adff11d8d63bc2b6630ecfd80745b34c8fd5f73cb678a5ac551306f4c4b8d16341e1b2b7f06389042585a3e374d80578a7a0304c2e67b63ab3aad50728576a1a0b7efcba8ccf1df4cd9f9050e543dc42820d7760180284ac13c453abcd"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x0, 0xf, 0x74, {0x74, 0x31, "b952070a06bac8c0df9a0ae58c3f2805cf0a0f48428c40707a0011993ac518de0d43c431822566b1f3095273508830d44d56501f770667408907e94439e91efe9fcf0b158e3bf50abc8d574ad79c6b88787cb85e707d23f361f428a67279737062a583cf1e413ce111cf2f2ff9ea1f2c0d06"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x20, 0xa, 0xd1, "b17d25e0570cddf4b53773db636b237d182a3a78430d1ac8df2578a126fea82c3102786e8d2a01628081143d15515a82ef51aebc51583e20f3f25b55031fba6f90ba5f1111f10ede56ccbb979452d9d709cc9475549dae7f71376808f8ee4674c18c9176f421b23f3737350ed1aee3ac7e21b9db6217e9ce314946bd75f8bac66f53bfb12c08e732c00e83c7f2a95a6ed9c8ec556cc5889b782cd20166aab2463b75c03b2e41b3c7f43c8699a40c1744fde13008d431a19ed4ec786527c343b2151fe8d67cc7b38681987194c825cb1766"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x7, 0x9, 0x8001, 0x1, 0x1ff, 0x4f6db2f8, 0x7f, 0x6856, 0x8000, 0x9a}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000000780)={0x20, 0x83, 0x2}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000800)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3132.454207][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3132.463437][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3132.471780][T10606] usb 3-1: Product: syz [ 3132.476178][T10606] usb 3-1: Manufacturer: syz [ 3132.504255][T10606] usb 3-1: can't set config #1, error -71 [ 3132.511066][T10606] usb 3-1: USB disconnect, device number 123 [ 3132.514202][T15443] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3132.523166][T15443] cdc_ncm 4-1:1.0: bind() failure [ 3132.528965][T15443] cdc_ncm 4-1:1.1: bind() failure [ 3132.538687][T15443] usb 4-1: USB disconnect, device number 55 [ 3132.864183][T10606] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3133.244217][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3133.434256][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3133.443441][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.451481][T10606] usb 3-1: Product: syz [ 3133.455687][T10606] usb 3-1: Manufacturer: syz [ 3133.460287][T10606] usb 3-1: SerialNumber: syz 08:03:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d000005240600f104240000000d240f010000000000000000000624e3d8995d6826757700020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:52 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x25, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:52 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x50c}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:52 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x600000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:52 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3133.516718][T20564] usb 1-1: USB disconnect, device number 107 08:03:53 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x26, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:53 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x700000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:53 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xc05}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:53 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x27, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:53 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x800000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3133.705415][ T727] udc-core: couldn't find an available UDC or it's busy [ 3133.712382][ T727] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3133.804257][T30117] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3133.944196][T20564] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 3134.164255][T30117] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3134.164548][ T727] udc-core: couldn't find an available UDC or it's busy [ 3134.175160][T30117] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3134.182401][ T727] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3134.192318][T30117] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3134.209455][T10606] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3134.215511][T10606] cdc_ncm 3-1:1.0: bind() failure [ 3134.221109][T10606] cdc_ncm 3-1:1.1: bind() failure [ 3134.226445][T30117] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3134.334233][T20564] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3134.344467][T20564] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3134.353375][T20564] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3134.414268][T30117] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3134.423448][T30117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3134.431612][T30117] usb 4-1: Product: syz [ 3134.435977][T30117] usb 4-1: Manufacturer: syz [ 3134.440613][T30117] usb 4-1: SerialNumber: syz 08:03:54 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010b000000090400001202060000052406000005240000000d240f01000000000000001000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f00000005c0)={0x0, 0xe, 0xe7, {0xe7, 0x23, "8da339a78f020216011fb5bd88fc99ae7c2a82c9ba6148703821cb23278639f47c6e165ec89eaa3c025f98519690fc58cb056d353dac97793dbe716ee5383e49645b937032be7a7ae347478abf84a60bf5ea8a52d5b9cb77ad62179e051083552ca8e6380f088f0f0f212c2b69f03f51ea98e5478b71f51e38b89ad6434af7d6e78490407bcce69e1e3a76b3cbf2b7c5a5219fe1c6da93469b3ee4861ca0027d32611714aadcf61fa20407e93aa47dc6c5ca8bc14503a9e5a668f284f939c5180c018a3f8dff8440760a8b2b8fbd5a7d6d471691f79f53ffca0b42aa07411c535fcadfb7a3"}}, &(0x7f00000006c0)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f0000000800)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x31c, 0xf000, 0x99}, @generic={0x10, 0x10, 0x4, "afcfab5108f02133cd5dba3918"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "4fcb169e370c98e6a4c19ac4a93d5611"}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x3, 0x1, 0x1f, "5e6ef501", "37bad0fd"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xaf, 0x18, 0x8, 0x0, 0x2, 0x275b, 0xb0}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000dc0)=ANY=[@ANYBLOB="40437b7d0c02d000646c81ae6072f401c5b7c6930ae4e1f23fc8dbacdc487d21b80dd4c5c443dd5c7f42dc8fa7b0476a6a9e0218db90ab03b718090736c9507fa194a54254a5a96207bc3f9000f56330b0052a4b7408ecc6afbe890ba7d9b81b5b0351a9122f78d020095c7ad0b7f4bb14b583f811dd955c2a9d2496c7c048c9bb11a2"], &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x20, 0x4, [0x1e000]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "5ab5"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0xfc1}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "0308"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0xff81}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x5, 0xe4, {0xe4, 0x8, "9437b18cad91ba7fde300db4b5e6946974c7714ef138dd91a53e91feda3f3129a557cd624952dcbc4f05720bed4a485aad08c13f836e9ce06acbcfcd769c80c621ec11d64758e8df374ec24751070515b68f87d4b7f85485318e723d2ab3b35b0895f09a96559d0bba3465d4e35f21ce292ec0143595a4dc744ff3e99078d29120e21bf832edc5d8e77f96b68c03d92751b19ded5e804131238d4eda9861b75ced57969d9587064d2c14c89b071947447f0be9d6ecfced6be5986d9e135e21e06000678a2d1864c7f8446429bb1f5c144ffcfd00ee6b63621a933917e9dec424471a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x18, 0xb3, "a6e282d0cee8b1c8de1f0f059d87169cd27ecdbd907e7f1bbd4276df210d0bc4c11e89c6bbd002ed21c7bae16fdfd3fb3fc0b932939361e679bee3478bc1c704af0fc587ab499b6a186345dd0fd82e26cca40d5e2bc75ed59ab1f774371aebbb967d92cf5f259945ff749e811876c8b7661daa43ea9517117dbfd4e9498741a579289ac3a8d62b6cf64e76f2449b1f343bbef980e8d7ba54a012e85a0e9481de16f0709a37e4f11650ae330ddd9daa9d128791"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xe0}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x1000, 0x6, 0x400, 0x5, 0x1000, 0x2, 0x78, 0x9, 0xd5d0, 0x4, 0x6, 0x5}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:54 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3134.544245][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3134.553327][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3134.561398][T20564] usb 1-1: Product: syz [ 3134.565713][T20564] usb 1-1: Manufacturer: syz [ 3134.570440][T20564] usb 1-1: SerialNumber: syz [ 3134.577631][T10606] usb 3-1: USB disconnect, device number 124 [ 3134.614884][T20564] cdc_ncm 1-1:1.0: bind() failure [ 3135.004221][T10606] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3135.114206][T30117] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3135.120293][T30117] cdc_ncm 4-1:1.0: bind() failure [ 3135.126334][T30117] cdc_ncm 4-1:1.1: bind() failure [ 3135.135223][T30117] usb 4-1: USB disconnect, device number 56 [ 3135.374222][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3135.564276][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3135.573348][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3135.581381][T10606] usb 3-1: Product: syz [ 3135.585685][T10606] usb 3-1: Manufacturer: syz [ 3135.590285][T10606] usb 3-1: SerialNumber: syz [ 3136.054517][ T1280] udc-core: couldn't find an available UDC or it's busy [ 3136.061726][ T1280] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3136.294210][T10606] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3136.300313][T10606] cdc_ncm 3-1:1.0: bind() failure [ 3136.306143][T10606] cdc_ncm 3-1:1.1: bind() failure 08:03:55 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xd50}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:55 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:55 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x28, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:55 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0xb3, {0xb3, 0x5, "6e519a5192c0948c5fc9a94a2d89cfe2aab711e1c3d9fdfc9681c93bd111fd3507c7f3e4ef77a7d01d3da7ebdd3c3140881e9425485b0ed85ccacc5142e7695d8e6c5c23fc27a4465526a0cfa90ff6db99c1708b1a261dc09b342810861888c9025ed901fe7684073847e780dfabf73a131a5429b395c20ab508e88456c2ff2646626e1c8404a51130d9573b3bed9c5c4086a4fc0d8a7c2454bc9b0cfb805da9ca546b7d445eda168f2f80aab27814b8d1"}}, &(0x7f00000000c0)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "e1d1f86c98490fa995b1294a1ca75ffa305b48e4c70c13bba095ed8446135d50612e542d4c49257b977d4e0a94e3dac80ce18642cc57e2832aebdbf24fc9eac9acd3dc95f2155c4400c340b5aae5a8cd21c92332c06db671c818742ebc5fada21356cfa54b9a963e721510004f8c9d28c31545ee1fcf1920e21cf0bb8b5b9ed00e6414dfe7a3c26066a50fa9da4704b9fd1afe106450e59ddcd1c7a4f89a2936e1131244c7900995ae8f617e22e83c471ec7b3f3f9ab6ef456064ae347da84586b55f51a7e1ba5e36ea60eefab49917bed262de7d80547ca338f31aeb27ef2c7f75c29e59a1aa641fc38f5366709"}}, &(0x7f00000001c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "c5de22317f8395ffcdbf00207bb15781"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x1, 0x38, "05f91fa5", "a94b810a"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x73, 0x0, 0x3, 0xf7, 0x100, 0xfffd}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x31, 0xad, "1a2d419f6e44de81c95d149ba74efe81ed354c467899ef1a5a59032a4aaa1283146fa0b2b4580ece7bb5f55f7f77d183c5ef38cc6db866b4448130e367af373ba98335f49f4a2362f58b5bbdc340ddbc8ff419d87859477260e6c13a44b4487d2fcbbd6c295ecd3dc837512c2889939d055b58d724f6c5a314f4a4a0534af0f9391becb028c2fc8ed1afa6960d4c82cab444299d1d96f965c18130339eaff580e83c22bb4cc83dfb327ef91a07"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0xb, 0x2, "9ab3"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "a9cd"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0xa00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3136.535156][T10606] usb 1-1: USB disconnect, device number 108 08:03:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0xb00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:56 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x7f, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0xff, 0x80, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x1ff, 0x4ec2, 0x20}, {0x6, 0x24, 0x1a, 0x2987, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x200, 0x1f, 0x7, 0x20, 0x8001, 0x73}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x8, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x3f, 0xfd}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x8, 0x2, 0x4, 0x20, 0x3}, 0x4b, &(0x7f0000000a80)={0x5, 0xf, 0x4b, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x1, 0xff00, 0x3f81, [0xc000, 0x3f00, 0x1e, 0x0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x20, 0xff, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x50, 0xff, 0x9, 0x80}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xcd, 0x20, 0x1}]}, 0x6, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x413}}, {0xe3, &(0x7f0000000700)=@string={0xe3, 0x3, "e909c9493a04eda7589588e3fb48e30aa5510080d22bbbc1ece7ff9471a72096f358e1a44556e2696bfd30be4c2f4782d94c04d8df9311dc906b8826d8a460983ac1988546f151cc398d211e0fca696053e163a79237d3ae68535f04c1df43b52b934e39a52b68b27040b24e944bc4ada9565f4050ddaaab1b6e4b4b05bcf961b0a36bdffef330469ab657be25761e4ec2e8ff3f063e6ca40eccaec94666649459e7e9aa66de09eb1d7bc7df579421846a97b98084f2244a0346d8db72f77d37c2e979401bd56c864fefbd132e5addbcb8d65885078dd9ad648ffeba31c394038b"}}, {0xb5, &(0x7f0000000800)=@string={0xb5, 0x3, "af31edf148701d61e5ba0cfa15eed58b857a815a91114206f194e3da216ba78d6b2cd160bfb6bb4e58821c18776c1e99e373e757ace9d40d6e1c9a87c87dcdffaf690bdc8748ca500f09a02aee5959bc0602007d10cf5836b47fbda54e57071361c42295ad5b28718a98e146637e367705e1953bedb8504b89bde2871a6efc70387f3f352a1a701a330b8268882093a134c4b421b212da0ffe135dfaeff682bd4dbabb618d250071ccc5dee40c10565af7b734"}}, {0x43, &(0x7f00000008c0)=@string={0x43, 0x3, "0c724442b516c2fe7ac97a296b1b56397f1425acada2f5bf4ae0e524ebde809f7d2b5f991c598d7e9ffb5464a1ac187778ab9b5395adb7c6cf7a04d885443fc275"}}, {0x4f, &(0x7f0000000940)=@string={0x4f, 0x3, "0552cc64b0c84ca97ae21c8d3196af1962fdd0540cb6dab5238dabba0f1c761b38a5a307bf0ef387e2a5ba078c08fdb5ac1cd721b8f054f09a3031016792afda46363ccaeb12ce6f12f9ab6ff1"}}, {0x20, &(0x7f00000009c0)=@string={0x20, 0x3, "74926153bdcedccce3e929d82a2a6b142bdddaac5314003334d3a762a22e"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x7, 0x9d, {0x9d, 0x21, "b071708c10b57c33a505ffa8edd2e3d6e5e45b20df1c8c1de1abcb5f53c8b65acc59639d6e3b8eae75ab9d2c17e05adb9fe0308136e0110b291114731c963ea8ad08a745567d2c4a904d1230a232715ed68699cac1270e2005f39d290a44cd52e8986c6dffa4623bd8b2ac2d2fb4717c4a5cc127685d0cad52d5fcabbe7973c707982989dac09cc70ec23a9cf1bffc9076943fee2a80808f82d8b1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x20, 0x30, 0x8c, "132430f6588b4f1deb92f03efe113650da1d8a332e829c955b1092fbc90d8579153c6af7b1543e3f689a7aca9bce93f2214e699cd2775a0668f436444207f2ea78acc7348bda9b76e91d9e40485e4afdf0a649cbb371362dc9a79a06f728b614c2f09140149af06a30dd2f0471be2bf6defe53f51303d07f3d981e3c764305bee19cb1b1cee5fd7e4d9a2067"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0x1, 0x5, 0x401, 0x4a7, 0x1000, 0x7, 0x3ff, 0x6, 0x40, 0x20, 0x40}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:56 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x29, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0xc00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3136.653952][T30117] usb 3-1: USB disconnect, device number 125 08:03:56 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1200}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0xd00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:56 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0xe00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3136.814241][T13196] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3136.974190][T10606] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 3137.084185][T30117] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3137.194210][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3137.205156][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3137.215123][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3137.225465][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3137.384810][T10606] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 3137.394327][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3137.404243][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.412675][T13196] usb 4-1: Product: syz [ 3137.417110][T13196] usb 4-1: Manufacturer: syz [ 3137.421866][T13196] usb 4-1: SerialNumber: syz [ 3137.474264][T30117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3137.564293][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3137.573342][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.581951][T10606] usb 1-1: Product: syz [ 3137.586361][T10606] usb 1-1: Manufacturer: syz [ 3137.591030][T10606] usb 1-1: SerialNumber: syz [ 3137.654286][T30117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3137.663476][T30117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.671693][T30117] usb 3-1: Product: syz [ 3137.675994][T30117] usb 3-1: Manufacturer: syz [ 3137.680584][T30117] usb 3-1: SerialNumber: syz [ 3137.834708][ T1295] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3138.124199][T13196] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3138.130239][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3138.135629][ T1423] udc-core: couldn't find an available UDC or it's busy [ 3138.143336][ T1423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3138.144544][T13196] cdc_ncm 4-1:1.1: bind() failure [ 3138.384233][T30117] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 3138.390303][T30117] cdc_ncm 3-1:1.0: bind() failure [ 3138.396532][T30117] cdc_ncm 3-1:1.1: bind() failure [ 3138.464471][ T1295] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3138.734308][T10606] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3138.734425][T13196] usb 3-1: USB disconnect, device number 126 [ 3138.740868][T10606] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3138.754958][T10606] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3138.955550][T10606] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3138.968769][T10606] usb 1-1: USB disconnect, device number 109 [ 3138.975214][T10606] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3139.552598][T13196] usb 4-1: USB disconnect, device number 57 [ 3139.724207][T28405] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 3140.084280][T28405] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 08:03:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0xf00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1800}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:59 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x16c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15a, 0x2, 0x1, 0x80, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, ')DM&'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x1, 0x51}, {0x6, 0x24, 0x1a, 0x7, 0x26}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xfb, 0x8}, @mdlm={0x15}, @mdlm_detail={0xdd, 0x24, 0x13, 0x40, "0e5cf0a64d98e9657f60dd7df00649188b19a327117604834a77ecead7c018b66720e4a15ae9cd0033a7fc36511f5b9911498c6283a9c3db30c287efe43ec6ffb6f18fac386bbe951bf2c718aec8cd49bb46678b4e6216353bdba13a8c1917ae37679706b52208f3f66f4ff0b7d75fd5ec49213c01ee8794ebd299525151bd668b7d780b1dd1b43834f6a24f7daebadae3eb58bd72d39fb0d653f9ec4de9f4a0ca0788bc6c310f9351f187f7e76e16e6b88515ec1847f59e472ea57013319479f4032225dbd2aa4d8f2758ab2172b55d2983f2e51cf7c5b018"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x40, 0xb4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6f, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x2, 0x3f}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1f, 0x20, 0x6, 0x8, 0x7}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x4, 0x4, 0x20}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xc8, 0x7, 0xf1f9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x34, 0x7, 0x8001}]}, 0x7, [{0xae, &(0x7f0000000240)=@string={0xae, 0x3, "c79a97de8778c4e965ffdb8b1a0fc7a82096d9ef5cb09ee9aa7b2ae2e3b72ff95609d520ff0befffa2e30abbd1ed6f22ffb80df3413ff1c3611829a45c8e11223c5e2d76af193116c8e297d22e60c2742625fe6491b439c5ab594b33c97682ba3b9b1007758c9446fc6b67853cdc5b1feef32f89db5962a268c2e5ba96ac15b6205b7f021a54e7ebc4c404954275a257f8b78e6d061c90000fb5f4fb3aa42759c6a9490d162f2980cf6e6daf"}}, {0xb, &(0x7f0000000300)=@string={0xb, 0x3, "cf60a955685b96ff46"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1442}}, {0xd0, &(0x7f0000000500)=@string={0xd0, 0x3, "b4c9e4f15a7fc9158c6ce685c6c2ead7305feca44642bdc25e2c549aec25e8be9f01f17b331a0a6393be760601a7328178127f6998db7c27285d3321fbfe712e53b4ae8cbedf5cef1b21e37f117f1698d76e39c548f9bf26ac69b177ce89c94ba85b93868a88670bc0b5bff306e412717c67c7cd242a4980d4ecc85433e20a0f894822167920bad23414a66680514a6b0e94154a49394fb1c3a141d111a5282b4ecca580698fb66cd83e11d3cb04b3ca0f65e5e604dc558885baaa6baee1ed6e2db7978c0aeb852c53ecfd8ca23c"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1452}}, {0xc4, &(0x7f0000000600)=@string={0xc4, 0x3, "e99f3d83d3cf16b3db0a352ba76f6a0d9123700d69a26426b2b91051c56d5d4c90e3a09802fa8e035e7f32002e6716f618a43098a93b28e056dbbc8b3b02c8a27fcafa5bf0218c12591ebfb11642d7a186a22490f9d02b449da4ccafe48668db7afa8fa70d723210df08a0b4fe6cb35e5729e2a332f6a9d542b76b2614d89d448c7624d8bc0141e3bac4319b755e6fae5b239c445de2c104449dc0abeb2327aaa5a668cf9adb6386b9aec02fb62d2871e045fef0c5e833e4cbdca584f8010afb3101"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x40, 0x23, 0xaf, {0xaf, 0x21, "2917397cd11d4b9ca466b0bd20b468c4261a5e4e166398acd691a84be58f25bd471be666c070b507ef4194d8336ee0b66866fc22805f90192818dc36717f76c1c5cbd8bc268b6811268b61508e29ebb64e52c767c555031e50a6b492fa9eb8537a6ca555c1dca061b247c7d3bcf84ec48b4b34677bb971e07350c44cb78c5840c35124175a2a8ae00be89a8cdae5bd3324f44d0dd9bf9043df80028c3b479d4cef257ac0578b8eb71586e975b3"}}, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="001324000000d60ca477783a389d1c91f12790a306dd385fe92da2d1e2a7aa9455fd5955f58e7a3753a2"], &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x0, 0x401, 0xe9b6, 0x400, 0x9, 0x401, 0x5, 0x6, 0xec5, 0xb86e, 0x9, 0x48f}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x3f}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:03:59 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:03:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d000005240600240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00200904010102020d00000905820200020000000905030200020000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3140.284352][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3140.293807][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3140.302730][T28405] usb 1-1: Product: syz [ 3140.307183][T28405] usb 1-1: Manufacturer: syz 08:03:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1000000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3140.334753][T28405] usb 1-1: can't set config #1, error -71 [ 3140.341149][T28405] usb 1-1: USB disconnect, device number 110 08:03:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1f00}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1100000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:03:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:03:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3140.524243][T30117] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3140.534280][T10606] usb 4-1: new high-speed USB device number 58 using dummy_hcd 08:04:00 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:00 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1300000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:00 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3140.704618][T28405] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 3140.934284][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3140.945357][T30117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3140.956465][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3140.966365][T10606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3140.976021][T10606] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3141.074215][T28405] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3141.084462][T28405] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3141.093340][T28405] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3141.124286][T30117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3141.133374][T30117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.141665][T30117] usb 3-1: Product: syz [ 3141.146175][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3141.155342][T30117] usb 3-1: Manufacturer: syz [ 3141.159918][T30117] usb 3-1: SerialNumber: syz [ 3141.164622][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.172806][T10606] usb 4-1: Product: syz [ 3141.177997][T10606] usb 4-1: Manufacturer: syz [ 3141.182596][T10606] usb 4-1: SerialNumber: syz [ 3141.294238][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3141.303566][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.311820][T28405] usb 1-1: Product: syz [ 3141.316206][T28405] usb 1-1: Manufacturer: syz [ 3141.320868][T28405] usb 1-1: SerialNumber: syz [ 3141.364607][T28405] cdc_ncm 1-1:1.0: bind() failure [ 3141.884193][T10606] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3141.890441][T10606] cdc_ncm 4-1:1.0: bind() failure [ 3141.897272][T10606] cdc_ncm 4-1:1.1: bind() failure [ 3142.294483][ T1983] udc-core: couldn't find an available UDC or it's busy [ 3142.302726][ T1983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3142.314245][T30117] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3142.320870][T30117] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3142.328327][T30117] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3142.525829][T30117] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3142.538029][T30117] usb 3-1: USB disconnect, device number 127 [ 3142.546203][T30117] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3143.267040][ T2836] usb 4-1: USB disconnect, device number 58 [ 3143.280203][T28405] usb 1-1: USB disconnect, device number 111 [ 3143.284227][T30117] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3143.684223][T30117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:03 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x3c, 0xb2, {0xb2, 0x9, "52ada5046558af63471fdaff92968d6c6ac18e24eb4efbed758afeb38c9fcd85e961aa5969a231dce27a91909ac6cf4c1d8d90b76f30be4fbfc212550a47f0fa4607dbdc4126dfe958c198e965c2372a517a74bd17944bff9cd6097cfc8dfa52b6690fc60f508c016267c08b165b428f90adf4949cea2bf2b1bae294e911fb5ba2f6f0c657ccc86551f6981d923925ebace58592b0821d18fdb48d5466e7d20666a172c52c870f645996435731a1a9ac"}}, &(0x7f00000000c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "c8701e87090fc76573f84bf71a3787c0ec2d4e5de014562917da2ec77e1f044324729c24e6e6f7faab2e48a5ad4bd7f5305d865970b5013f7fa3f2122a0c6872209e95bcadab28842af925aac4334b25beb3adfdce66a728c243dee0752d05947f81c73f7e915976545c584427e7198dfc74864fc618279e43ed204c5126005d88f3d79175742f48ee413cf2724e6c58d1e20617927f0aa3ce"}}, &(0x7f0000000180)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x4, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "624a680950047f2254ffb2db276e4ec8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xe7, 0xc6}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x4, 0x3, "0c33e9ed", "6bc84734"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x3f, 0x2, 0x1e, 0x0, 0x9}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0x84, "2ae8a9eabcea308cc1c38edaa0e2bf719f48427a4b29125236531e0aa76b2358215e06ee478b7e10e14c79738a7e91e5f80a8b5ea8bf8dd3fed17cd2ada5271b9c9dd3a476f7c815512b9ac8619c559e2ad4e1e153b29fb0cde20631c43ad83951da8be51cb225e9d5b3e8edfc85e24f88a40bbbce12f049dd8dc0ed43e515be98dd3d8e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, 0xfffffffffffffffd, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x260, 0x21}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "3c9b"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8f3f"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x107b}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x57}}) 08:04:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:03 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:04:03 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x0, 0x20, 0xf4, {0xf4, 0x4, "5b1e63c1ba6d14712fc625bd7754b7299f91b225acca96cf5180a1cb240bc3d840bfbf1a7603ba79f91d81f73ec4a1829076de04f49aa29830a5bd2728801c7f8344e36a9df0b4c34d146e3b1ffd25398237833545017ce152187fe7ec7cdeb8e413212d7c0e09c40127db19d8f7fda0b71e6261c4be33cbcde44c47307663871df4c28e4e08c7f2ce2da9775365002cb29e9b5d89056cd39f12444dd369c72b0ecb34bf0b0f2a69eb4c09cf395fdfe710873072c862a0e71213332a1e40e9afcab8982f43f580fa8d2ff9e3e5275a4f9eb224d8e4f480d16f6ba9a034ea3563cd7d206d8d8514feadf3cd3cafb233477001"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x9, 0x54, "dbed9e199c97615a572d1fd1817718cd9ed6e26814a28ca1f391b5d92bc15d6d6681b218ec3e309352b9434718d49b2ef1f9b3093775b17870596e9515bb47ae8363be4f39ae6a1a7bda95bf9bc9b92eaf05c3e6"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x8000, 0x7, 0x5ec, 0xffc0, 0xffff, 0x0, 0x8, 0x66a3, 0x3, 0x2, 0x4857, 0xff7f}}, &(0x7f0000000800)={0x20, 0x85, 0x4}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x8}, &(0x7f00000008c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000980)={0x20, 0x10, 0x53, {0x53, 0x21, "3c990c514332101f6330c00c03cfc3eb3e82b0e1518311d6b41b27627e3dfbf29b6ac6eaa55f830c174680e35c87f7fba24b5ed8fd85e85481c8907f7f467b722a342374041ba51dea3b7bb9f5e721774a"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x11, 0x40, "4a5ca56ee9dabc0ce1c6482634983e6d8319556d91df822210f41b7f8baba0bb7c131e71584f96750c94889234ffe7179cdecbba59d4c01b8308c3e1eed01129"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x4, 0x7, 0x100, 0x3, 0x0, 0x8, 0x101, 0xffffff80, 0x1, 0x10, 0x5, 0x3}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x7fff}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000c80)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6a, {0x6a, 0x22b54f9972ce9da6, "ae6d1199ec4e51ad8ae2f7a85ff4fe0d1479dfc2a32d6e1492e6295626328cee885996fefd0e854f89a3684d49eb9f88191a599966075f913d687a40c7bcbe7d33a09fea19aea1bb525a55491fb8c882f066f429fae687aa1f91495abddad82d7e151c4efec94efa"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0016870000006570fd208603473fcbf5caff7c8b25d172875b7e0eb2e08a63af3bc51fabea947ea1410f930104a2847d9df9f7c8eae3474944b8463bb79e6f1a368ab62120977a2326f52759ccae206dc8b340a4e94f8c795217791dd8d48415cbd368bdf37f63585cce796aec4f34c0cd9fee39489376900100e6242a0b3e157983b5ec8800c5e1c1dd000000"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0xf800, 0x8, 0x1, 0x3, 0x5, 0xc5a, 0x0, 0x8, 0x0, 0x80, 0x3f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000dc0)={0x14, &(0x7f0000000d40)={0x0, 0x477a415994b53fe5, 0x26, {0x26, 0x10, "c9a5e08b1c2955f485b95581b4bec6412d42e23de179e468d2aa3b061a5b209882ee1bca"}}, &(0x7f0000000d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e00)={0x20, 0x17, 0xfa, "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"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x8, 0x3f, 0xfffffffa, 0x7fff, 0xfff8, 0x7, 0x3, 0xfffff001, 0x6, 0x2, 0x8, 0x9}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001000)={0x20, 0x83, 0x2}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0xfffa}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1400000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:03 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x322d}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3143.854222][T30117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3143.863359][T30117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3143.871485][T30117] usb 3-1: Product: syz [ 3143.875681][T30117] usb 3-1: Manufacturer: syz 08:04:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x30, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1500000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3143.904271][T30117] usb 3-1: can't set config #1, error -71 [ 3143.911633][T30117] usb 3-1: USB disconnect, device number 2 08:04:03 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3f00}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1600000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x31, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1700000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3144.104168][T28405] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 3144.111896][T13196] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3144.274168][T30117] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3144.494223][T28405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3144.505292][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3144.516200][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3144.526305][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3144.536126][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3144.634296][T30117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3144.734244][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3144.744093][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3144.752369][T28405] usb 1-1: Product: syz [ 3144.756653][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3144.765706][T28405] usb 1-1: Manufacturer: syz [ 3144.770313][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3144.778316][T28405] usb 1-1: SerialNumber: syz [ 3144.783142][T13196] usb 4-1: Product: syz [ 3144.790413][T13196] usb 4-1: Manufacturer: syz [ 3144.795272][T13196] usb 4-1: SerialNumber: syz [ 3144.804228][T30117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3144.813433][T30117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3144.821831][T30117] usb 3-1: Product: syz [ 3144.826357][T30117] usb 3-1: Manufacturer: syz [ 3144.831182][T30117] usb 3-1: SerialNumber: syz [ 3145.484299][T13196] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3145.490350][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3145.497713][T13196] cdc_ncm 4-1:1.1: bind() failure [ 3145.974307][T30117] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3145.980867][T30117] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3145.984218][T28405] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3145.988802][T30117] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3145.994905][T28405] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3146.007794][T28405] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3146.195657][T30117] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3146.212065][T28405] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3146.397971][T30117] usb 3-1: USB disconnect, device number 3 [ 3146.406701][ T2799] udc-core: couldn't find an available UDC or it's busy [ 3146.413880][ T2799] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3146.421629][T30117] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3146.684678][T30117] usb 1-1: USB disconnect, device number 112 [ 3146.714221][T30117] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3146.845593][T10606] usb 4-1: USB disconnect, device number 59 [ 3147.204199][ T2836] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3147.464527][T10606] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 3147.594223][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:07 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x4000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x32, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1800000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3147.784246][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3147.793297][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3147.834365][ T2836] usb 3-1: Product: syz [ 3147.854315][ T2836] usb 3-1: can't set config #1, error -71 [ 3147.860513][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3147.872252][ T2836] usb 3-1: USB disconnect, device number 4 08:04:07 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x5, 0x5b, {0x5b, 0xe, "cb3457aefe381e541176624cc47bd605947687d606c303f742b3e819e7ee81c9cee59e6bf6b5dfe247d2693ff1ecf13db7ee37fb11d0324a43490d6afe67cb614574378fc49af075c8be8df6a5e3e1b1d59f038e676ad45b95"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x40, 0x30, 0x44, "751fca8b95c07dc68011c9e6b4a3435a87f4c3f26d1d79781e24c04d4ec939bec5c85bce0d37e7f4f7160a7c02eed5cec067f23692e69bd5e1956a75b52fe08111acd4b6"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x6, 0x8d, 0x5, 0x4, 0x81, 0x3ff, 0x0, 0x81, 0x80, 0xfff, 0x5}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:07 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x0, 0xe4, {0xe4, 0x11, "140b37f6c9046d78871ec97552fd30e58f9de626a277cbef05378cf1643b1ed5c6ad2f34ff97d19edc53486809f321b99eba66f658034952580bdb785c63e31808c5e47237a7a0f9024e29fb939b17da47676fc4c561e1e21b5f1827561831f71abd61c935dcd7c07c807b2802ed76497a34645fc087fcc4c72c0f35a1db4406604492e7bb50f4f9204768f582128bdf071b0eba7d30a32e530d8654842ead9bd086ab39b8ecaceeed41b66af932608b6e98485d8a2d0fba87463da5a5149b6110f06e49961f5d88a5f297546480c3dceb238e5e24fb1b7b4a5638ccecc4be41f7a4"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x20, 0x16, 0xce, "4ae79093e01d7c417c267e7d5565ebd34e059e7f15b279eabd49b78934991317ea628c5a9c61bcf7c2ff6c2ab9fdd0b06aa662298f1680fbf9595e388425704b54509d489b297f7a88983d79f5cbb6b0933e9d2668f74b8bcda434eecb93b70222af3008cb5905a7e749d9a70c74e7904ed1e600aabd6b6d40c31fa5fa54e9adcac86389e5d279ab65f377443d53191111dbd0b9fdeb5cdea51bdeaee56ebe4b37257f6a210d2a80de3cfa8ede57c574cc04a1f10905d5afe92220769e61bc6e89136cc1f851c9e97cf5f752ba43"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x6, 0x1, 0x7, 0xffff, 0xec, 0x0, 0x7, 0xa65, 0x9, 0x4, 0x9, 0x8}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0xfffe}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x13c1, &(0x7f0000001980)={{0x12, 0x1, 0x201, 0xaa, 0xe6, 0x85, 0x10, 0x421, 0x486, 0xa19d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13af, 0x4, 0x1f, 0x20, 0x80, 0xff, [{{0x9, 0x4, 0xbd, 0x7, 0xc, 0x2, 0x2, 0xff, 0x3, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "887876ad70"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xbd19, 0x101, 0xfff, 0x3}, {0x6, 0x24, 0x1a, 0x35b, 0x11}, [@mdlm_detail={0x80, 0x24, 0x13, 0x0, "dc3cc86652ebe7f00f0149768fcf58d62bebdda29dd012466af81dfa3f318dca41605689e2e2e3747998b49781df457d53a3d9507db47dbc1d8654c70de98e41d95f2f704b2c5c6091026a102c52841bd3f9377bd76d12995d2630cb710f4f646130f9f9fd0e4d03a7725e6755b0986379b02f56b6cbd73407fd66a4"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0xff, 0x50, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x5, 0x9, 0xe0}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "b0"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8001, 0x8}, {0x6, 0x24, 0x1a, 0x40}, [@mdlm_detail={0x3c, 0x24, 0x13, 0x6, "a6ca030539aa50657f01f842978ca030f9ee3c27504cee0fa0f6699e3a2008d20b591e6f5fcec9cbaa76412562101868ee76a7af44021186"}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x200, 0x4b, 0x4, 0x9, 0x3f}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0x2, 0x81, 0xe3, 0x0, 0x81}]}], [{{0x9, 0x5, 0x6, 0x3, 0x200, 0x0, 0x82, 0xff, [@generic={0xb4, 0x5, "a672bfa9540eddeeda53a2f5934cf8c3531616f139671cc6686913d276eaf3a238777c1230bcc59520c84961ee36221581bed24192285f75b380d3bce18184af8e03d95ae2b73ccc62497d382d82535f33c880df1c43fb281d71d1ecc4f0994dfc65cb9fd2f4b57f0d7ce6857c7eee8bc45722656240df39dd3839f616f0878b95fbe1167ff3728d237e02134c93738bb42094d9041c3b329be2a52d9f35d354815c88b5b4d64bb5e9d22ffdf567b4875ef6"}, @generic={0xa, 0x23, "6c7925956375ba5b"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x7df, 0xfc, 0x5, 0x7, [@generic={0xab, 0x9, "ecf80de25700dfe7c288ab4fb81c9b8c5dacb1b36dc1fb1fd56f37349ad9ebef124d2e5f5ba25810bf7be71406ade157ef5069d768f3c5caa4d5e1fa1ff4bc93500b68389c033361a7871e019324d12233718b225c8301847b2f3fe8da5f2766520a120df3983a7e843693262fb8d48cf4e05a7d56b774d22fe1c240c57ec198c579a6f0d2adfea44b68e23bb7941e4edcf6d860e4ac6660f839b14737dcadf8d9bcdd062cf6f79945"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0xff, 0x8, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}, @generic={0x79, 0xe, "de6ebd4dc8798460232d377c7dbe9d9a3925524caa1475a74fafd1befdd48105627c85c51bef11f48057ed5e7b6dd0576e7b5721a4c5069d115f3a326fc50627ac8284af2cb7d03bd9046892e55b29bd03d6b409d6901a33d90b3c9c6aa1a34c89cf0b4d564eea6b08b5cac290c698053d5bc3effd0009"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x3f, 0x5, 0x5}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x7, 0x6, 0x1, [@generic={0x3c, 0xf, "554e136480234279be60d63bb507db91f8aa69767330c7c75f76372a3a0179056fe27c09ceb93a22f8c9aa62960df39cfb926b6694e0f578ee85"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x65, 0x3, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x3, 0x61, 0xa8, [@generic={0xda, 0x10, "9bbc53197f56c435c7a1c3cf721d98e5241d4b9b4cb826abe19dc92f106a2c3726b4483e4ce1127a3c311eeabf42a24056faabf9e535045b9cbf1630336413ac8a6f1c2a13f45a35cf4be030badb4045fd9fe8b1821e1b8d989ad16d27b2d115e9fb52826299c0fda20811ed9feb42a3f4f7665aee8f2e0bb72fe1d382c699f1dbfd9afd63bd476cfa5b87998dce3f6a0bdf48d7b4a6198405d71fb1cb9545761666daa79275b528a31f9d5801183bcf73268e21e49ebf5add7a7af6f750ed05f210b36d307a3364247faa98f33237c5518b7a75ce2e5033"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xb75}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x80, 0x0, 0x8, [@generic={0xc8, 0x9, "43a82b51a7443060d8432a74d71b22261d30a0ca8c143d45c211a1eaca85e6140c8e353817aebcd5e1ff0f88bb17e2cf177a137d4679f560d13b13180f10983929b8d380ede3b7d7c66b157ffc0f0092dba6c8c0189b08ec9ce8bb92745cab16f8cdd862b9b1edf0149abbf1e6dfce5e68f9ed87327dd306c895b268d4fed17e8bdef46986643824176f62dbfa4241c2ddc6d59e6a37cb9e61d3cf701b80e4e6dc75ffdefac69959e0980868b06b2f7eb095026a8fafff3beeee971bc9fa5c577fe9d8745abb"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x6, 0x81, 0x1, [@generic={0xa3, 0x24, "e9a31662e46a6f23d34e37df5c93a2cf320d90a0ed663df478b2a288955f66a90196a626f756db0e8b32962939bfaa8da8ba9a5f804c2c208a32ea07660abbfcca4c62e2ecf439c0b72bd712b7db4ba9a01142519a58e49b88f7fa9f20520e9a4d0a569dc9566de475fd9b2a889f0bf146c1d9b5c4b1c3614ec461a63db95388e8a1e13d55fa744508380499df66352f607cce6b2311ec48283c90c888777effad"}, @generic={0x62, 0x6, "42081511d4544f2b64bc11c98d21f398a215e367d6b350e4f2eafeb41ab5540427d1f4e4c2ecdb4231c9665273416c4f81450d83a76695dd7dc62781293d2a02af726535b9592a966a7e47d726fab1a8746acaa4abef1eb70f14b8e9237ceb09"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7, 0x50, 0x3, [@generic={0xa9, 0x5, "7aa612d4d97cc90a4b76007302be695c7ac4391f5bd60bcdc0544f964b7669de249cb6869781ebecd615dc4320bda6e8aaa5d15401c046a252f617a50593ad061347d63b4a702948f2429a1610c6a5df5ae9774f1cba98f5d7ebcef402185075e3837b642ad26b67236a07037b414fb356b547353fe937e64ef229665ca58209bee848ba13c6d9c75cabe79f814030ebcde99bc064aa61cc115b69c8bc58bab1eb53729c0b7666"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x0, 0x1ff}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x1, 0x8, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1ff}, @generic={0xe0, 0xb, "71105acf9ac747d5e8c90b60235c65a7d9be0bb459947d6292a69e61563502c1c8a31a8fbb562afa92039888170e73381d9f2aaee3d0574638af91579d027b4c740462916134088fea8f57a81b42657af0d8d2f097209ecd502648a6efdf9e0576200ab61a1941040b5927ec20b77f9f7f45b18cb5585c5c2abe2e5353078fa15ee846813ad23f328db15e5644a35ccc8395c56a63a21ec98f5c9d1c6bb98bd9dbe1813e5f257dd5bdb78d1dfef86a3fdc5b3eedb3bc411e101bbb3000c1e917043702659f3bbb20f90477ea9f3c3a608a1dc5ff09c381e0ad755f278147"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x57, 0xff, 0x7f, [@generic={0xf8, 0x21, "b0ef041f109dfee16c244f8d20f71cf18500ea797dc65815bfd2702989fb30ba77143b1b092cfae0f1df80b32f47a579a6e59c4edf3ad01ae2f331fd83ede8d45f0e5d9b1c5ef1859d1028d52f7de09de8c2d658f85096e9784fc9559bfbe2979f4152e4b20269a4d825d2f71583db6e909a57cf91cb4554352617c79c798c6d389f4b7bd43bfead61f560a88d238cc856d893440b5d58ea3208ce06eeb356e4b8df9f2242fcc5a30328f79c1a3337114ccac0d0de93e27be6a4062eaa54d72748218b5d0ae45677304c43203a4bed2de48755aaf9f35d25831a9ee49fc6666e687f2fb590134f3047b30ea78e16968ab67249f41d4d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xcb, 0xc0}]}}]}}, {{0x9, 0x4, 0x74, 0x0, 0x9, 0x4, 0xb7, 0x53, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a7a1"}, {0x5, 0x24, 0x0, 0xfc01}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x8, 0x1f}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x6d, 0x24, 0x13, 0x3f, "fdd9ed15566580f7ae6af870f7c5b685b2ce377b54b63ec3375a7daf3079452945e0b43ae7052a6c7c4062b26badd5019432dfe7a03e7d72d550c6ab6dd0d2a6e831a218d6b74b216557f20ac22c1bb3e5303b604ec3d3da0bdabf9d0f522435df284611219bcb1a23"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x1, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0xff, 0x4}]}], [{{0x9, 0x5, 0xf, 0x8, 0x8, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x4, 0xff, 0x0, [@generic={0x57, 0x8, "0f0dde136f2d6b9ea366d0c91c0147d8f600575ce4b5a867bb972d575a9b36ad3f230acfde69a5d0bf74359b7db18c61bebec0cf342343916d800c5c8d1ce98a1437d1a4463c8bef8ce84ab6702b4bfdd46a751033"}, @generic={0x2, 0xf}]}}, {{0x9, 0x5, 0xf, 0x1f, 0x40, 0x0, 0xd5, 0x20}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0xd5, 0x1, 0x83, [@generic={0x85, 0xb, "74837736ea48a813f4f20c7070e9d49d82241aafbfd4ee36c121e9e6d5e0f84edaf10948878233771ecebc9f279e0f9ee75f49e6eda25003c64f803fc5e036083edef9d6929efb7c73cedff300a911473c9b65c233582247fdfb34eeb9d6bf61c35c27d93490f9b253cc320412cf4ff8d2915a2727470a6a8c43befd464ea0a14fb984"}, @generic={0x6f, 0x0, "85c5a16a360aece8accb1ebd647f5296747aa88094f7a669eebc089d883911db1c70dfa78fecd6c6daa0628651fd6f17ee2dfdaaa928f3e85a95a172b5aad7960f338ece5eec8c227700a19ac00a2752df1b1001cb2dbaf199a466895303c642ab7e34a0e5c7acc1b87c4235fa"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x7f, 0x1f, 0x1, [@generic={0x102, 0x11, "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"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x1, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x7d62}, @generic={0x6b, 0xa, "4179fcf03285419c6dada93f33d7f63edda007c3479518fb80f83754c8a8773a35b644af7cca8ed9c99ba036378f37d3bd32a096fb7d011961da16ccc7e3d8555fd0a26d5136d3169d4b16083f3d7086bb419fee71b601bd325be0634b33b07ed2a6ff6a7f7f78c6f7"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x9, 0x6, 0x6, [@generic={0xdc, 0xf, "8dcd301404c23860844a657140755bc112dff76b2e1ccd98211338b4b445c28f989b3b4c111df2c4bea63eef89b631d587f5f620b063f41d0fad9fe24b53cfe79d346c3ade0bedf9a82eab2a1c6e1f4ccc5629f18cd4bccd5867727cbd27ff2c25ff54376f1f3ed37d1b7949d543ae7ec477ca935ca955cfe319bb73f8795ea1f80a574b0230cc8113974ee7ef68ffbb0b406666304d82d5e417e186468a848686fe92337c94754b738cd06124e8b4122c4f9fb8c84b2bf20d71eea567dc1fb4687db18003933ee3acd1a6bccc1597452f9530ae44fc24af78c1"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x80}]}}, {{0x9, 0x5, 0xa, 0x14, 0x8, 0x1f, 0x8, 0x1, [@generic={0x15, 0xf, "82ba92c58382879bd5e05d466a6da157b34bae"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc1, 0x8}]}}]}}, {{0x9, 0x4, 0xe0, 0x1, 0x6, 0x76, 0xd6, 0xa5, 0x7f, [@hid_hid={0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0x1d}}, @generic={0x5b, 0x22, "e776cb7cbf0a862775748dc2eb92cc2fc542efccc33926a1f5b27478905062718f64a9f7e6f5e27aa2b289d5db50597ae6efa40bd623cf9df3f5da141f2f71f864cd629522777ef792b7363e4c250cb66090933b29ab5b8616"}], [{{0x9, 0x5, 0x0, 0x10, 0x10, 0x7, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x0, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0xff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0xa0, 0x4}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x7, 0x5f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x4, 0xff91}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x9, 0x1, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x58, 0xb935}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7f, 0x77, 0x8, [@generic={0xfb, 0x1, "4472d55925778c067d904c3721d27a2c6a95343598c07ba349864bca27dd38f9ec2ad9d486c560b942eb95b4c09b508179aebb8320d36576cb4257ef3444903f762df10f77e298295cabe1c875874e112858505790545b2b2eac81021f2838a76a5c4fe164026eb45d6e9cc80f29e1d714572f71992de2af4048512e605975c38f052826fbfdcbcf778bd2bc18baa90c33e37002ccc961bb32d265b5ebdbe98e36d125bd01d3a6817b45c58589d610cb76b670f318e7c83a2f10558ef61fbecdd345f0e323611a9c264fa4604c3803a04ea52cfee68ef96e0a6b10f3a2487f2601e918147d07bbafca1508df8e1a40c5c3da872b1c932bcf9e"}]}}]}}, {{0x9, 0x4, 0x21, 0x7f, 0x6, 0xa0, 0x26, 0x88, 0x8, [@hid_hid={0x9, 0x21, 0xfff7, 0x0, 0x1, {0x22, 0x105}}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x20, 0x1, 0x6, [@generic={0xef, 0x2, "effd69962010dd0ca6cd900ad634ebb683428bdf6457915996c4424134ca19cf07374271eaeddbe67930998b89d0eddf6aae6acc35546c51266c9c1c51a795d72428df77e0c0e04e71ec010162dd0e3be130f0fd7f73110f614c9c8795a73e0966cf9646bf5199ceee912b49cfe12ef1af810a925199cb3e59b32af71dc6099094a32280d00cdd8741b670d96edbb51c3e352c3c5b245f9169896b03172f1bb08a74e652c79c6248be51a208e4020dcf5361df15d962291f21930cc4a039a543e34817dfcc08373138f2fe3492e954da8af8077eecd31fd473dee52dbe7df429529ea9c4aedd51c917c25dcbaa"}]}}, {{0x9, 0x5, 0x5, 0x1e, 0x40, 0x7f, 0x8, 0x0, [@generic={0xa9, 0xe, "d180023aa18263ac071f2373a7f4d4e212d49a15bca3a856f70f29f2168625df08e75c567275a958269c440121d763cd43b9cc437f716f672b708288f1fa76f832766fb490b4e0bf9f0fa82a224abc59f551e34d19e72974eea07b3041c8688765b98f19b9757b36d7007e76b42365b021bf0a1576b3f9bc42834a5b8f3459e38eeaeb336b34811a36389e2e12200cd5da4ab8f8ab3def15e6fe202bf3c815870966bf2f1af314"}, @generic={0xcd, 0x8, "2e44e7774afa49c6dbc3ddb742358d7a0b7c63dd4161563ef769dbdb385710316836bb45d21a4d8e8d7578f9d8c20b5ff58059bc7b4282fec13083e86f914ed3a62630d4781aa31605017c76f259e255643f5a453405c8fcc228e43f7ad5ad7b34d38344b75306b4c655e97965c3c9010a67c1cbc0c3b0a78aefd296c3066cca72a386d44b53db0bca6903a8eaceb1e23a012e6f4f860b51d4bebcca194d333caac34c4677ecd326caac7af6215abcd6452ae3304efc83b35ec95af2a19cdee4ba2efb91b34199ed5bf7b8"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x4, 0x1f, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x28, 0x49, 0x5, 0x0, [@generic={0xb3, 0x10, "09fa04b680268621ff236e20cca190923a971468b548a90693cc249a89fa18156a448a9933fa6267f09f971b6bcecf002e259d9fc45a61cbc967b420618f8266907a0a5e71212103d82051e9d03e0f14e2348398d2ae8caba07aae563d3279268603561220e09214aaafa3c915ed3452e755ea0df9c105a24841cfb9c80e2e11095016ccf590a6276dbee1ac70151429b7ce58b5141cdba30e6e739b3b18f30d2bc587e8fa50802deacfee9e162e9fe81a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xff}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x2, 0x7f, 0x6, [@generic={0xb0, 0x8, "828406e3c1195014f929d77c975f2d9a56554fa32abee12ae27e4247a425ecde2db0c94d734be418e8795f6b39fb5a14107a6a7ae3c8a44a7efd5525851f7d26cb7f9c3762df3e31fa36ba96cff35f233c36d62310496611ca8ae38056d966ed55b893d8e8f608c4b6cd218ebec74e08c504a837fce5e0906387764b498b77c075e5ee11a5f6867cb206666e9ab0e1ccd57060ae6d088ca48765d475e3b5aca3d02c90f782352531b160079cb554"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x4, 0xf7, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x3, 0x2}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x300, 0x42, 0x0, 0x4, 0x40, 0x8}, 0x19, &(0x7f0000000640)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x82, 0x2, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x81, 0x4, 0x8}]}, 0x1, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x42a}}]}) syz_usb_control_io(r1, &(0x7f0000000940)={0x2c, &(0x7f0000000e00)={0x20, 0x31, 0xf2, {0xf2, 0x22, "7f0057fb2ac8c12b2e981739c2aa163c007f840565096bc3155ea724bff334a47511da4a439486f2c34b9cda5112f0890245ce4b3b3a51d69f6fc9f52c4035d5da5c880794d50c09bc7f7e36a3277bc2ddd2ca000000000000000000000000000000009157b40c43e73bf8f5d44cad7a3774125d492d5a2d8d75e310880cd15b9d613d69e6c65805de96332b28bbd3eacfdee811668d778cb09e8979311d1cf4ebb32c125c004cea4b33b2da8e62e5fb4ccd8e750000dd9a641f7202defebae99d2506f8ed46f6657fd9d9d756034be59b7d8bccf3e4f6ab9c9909947e599fd0e3928abf79167873b12bd3117ac3ab39"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f0000000f00)={0x0, 0xf, 0xe8, {0x5, 0xf, 0xe8, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "7ca23b770b4dbd7f62a3043eb18a4200"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x5, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "6cbed85a983c82e54c838595dd873c4c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x0, 0x700a}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x9, 0x0, 0xfff, [0x0, 0xff003f]}, @generic={0x93, 0x10, 0x4, "dd21cdf04cc79f831a0d0a756953a19b5247612890f785dcd1cd28c00ef7fd47884b0554ae275baaee0ac4629177556abde0d1d3d072e42830a33c2c7b0c7b6f72afa3748b7ddcff3002d66d6fe8cb1053a873a1ae50504d9450e4714e76efff2c7c44ccc32a521cfdec83e7b20043fb313c0a951672bf9fa058e34b288a50660d1f01be825216c42cc0847700d861a8"}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x7, 0x3, "8956b557", "f565dae4"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xf, 0x7, 0x1, 0x7699, 0x2}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000980)={0x0, 0x30, 0x3a, "79143985a7cc9a570c943e8f8e922274810e323b257dde4dab5fb0c41018fc5443facec6ff0aa4c9dd5c0b7e1ab65c7ef4f11fe71d158957c01e"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0xa0, 0x0, [0xfff0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x42}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xaf}, 0x0, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @random="a30bda7c12c9"}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "5ca5"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x63}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x20}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:07 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x500d}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x33, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1a00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3148.024251][T20564] usb 4-1: new high-speed USB device number 60 using dummy_hcd 08:04:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x34, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3148.074241][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3148.091476][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.109408][T10606] usb 1-1: Product: syz 08:04:07 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1b00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3148.134230][T10606] usb 1-1: can't set config #1, error -71 [ 3148.140580][T10606] usb 1-1: USB disconnect, device number 113 08:04:07 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x35, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:07 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1c00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3148.394233][ T2836] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3148.434302][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3148.445352][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3148.455316][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3148.465106][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3148.514185][T10606] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 3148.654249][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3148.663540][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.672364][T20564] usb 4-1: Product: syz [ 3148.676705][T20564] usb 4-1: Manufacturer: syz [ 3148.681345][T20564] usb 4-1: SerialNumber: syz [ 3148.784258][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3148.894255][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3148.954265][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3148.963459][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.971804][ T2836] usb 3-1: Product: syz [ 3148.976192][ T2836] usb 3-1: Manufacturer: syz [ 3148.980809][ T2836] usb 3-1: SerialNumber: syz [ 3149.074237][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3149.083369][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3149.091588][T10606] usb 1-1: Product: syz [ 3149.095917][T10606] usb 1-1: Manufacturer: syz [ 3149.100562][T10606] usb 1-1: SerialNumber: syz [ 3149.384271][T20564] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3149.390430][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3149.396449][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3150.104759][ T3462] udc-core: couldn't find an available UDC or it's busy [ 3150.111756][ T3462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3150.154246][ T2836] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3150.160991][ T2836] cdc_ncm 3-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 3150.168707][ T2836] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3150.214245][T10606] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3150.220904][T10606] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3150.228568][T10606] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3150.385347][ T2836] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3150.400254][ T2836] usb 3-1: USB disconnect, device number 5 [ 3150.409644][ T2836] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3150.425566][T10606] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3150.626650][T28405] usb 1-1: USB disconnect, device number 114 [ 3150.644492][T28405] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 08:04:10 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3150.734801][ T2836] usb 4-1: USB disconnect, device number 60 [ 3151.134175][T13196] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3151.184157][ T2836] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3151.394193][T28405] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 3151.494249][T13196] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3151.574219][ T2836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3151.585165][ T2836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3151.595244][ T2836] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3151.605156][ T2836] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3151.664257][T13196] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3151.673607][T13196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.682265][T13196] usb 3-1: Product: syz [ 3151.686577][T13196] usb 3-1: Manufacturer: syz [ 3151.694081][T13196] usb 3-1: SerialNumber: syz [ 3151.714498][T13196] usb 3-1: can't set config #1, error -71 [ 3151.722608][T13196] usb 3-1: USB disconnect, device number 6 [ 3151.754247][T28405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3151.824245][ T2836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3151.833540][ T2836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.841824][ T2836] usb 4-1: Product: syz [ 3151.846233][ T2836] usb 4-1: Manufacturer: syz [ 3151.851015][ T2836] usb 4-1: SerialNumber: syz 08:04:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0xa0, 0xd, 0x21, {0x21, 0xa, "7fea7f6e49ac716d48f55a90ea76e2ae8b6e790562608670687ee8f4289b91"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000000c0)={0xa0, 0x8, 0xa5, "bfb33f7498e79aaa8742a18716a5dd4800665546e944cbd5e20cbdd41ff4982736625d9a20b5cbe435605396aa3e95fbbaf0f53ce08056cb17526813a684326ddde65e7a4c8334a2e141965182987278ea8160ae2820038df3ce1eeb1aa80432398b18d09ebb09c507e6a11e9676b88883f134bade38e0c69dd1d6aea1a5237d26037e407fd65ff41fa162d171db173875afa823e213b472457d92067b82b5b7ced87d1397"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x4, 0x2, 0xfff, 0x9, 0x1f, 0x0, 0x400, 0x6, 0x2e, 0x4, 0x7f}}, &(0x7f0000000280)={0x20, 0x85, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x9d}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:11 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9200}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1d00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x36, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:11 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000801020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000500)={0x0, 0x23, 0x100, {0x100, 0x3, "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"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f00000006c0)={0x0, 0x16, 0xeb, "92c0f7289dd3ea9ebea54ba502ccb085fbbf33fff81e819da4ee7ce4a12d72f96709d62f01cb9ceb276f812c5fa9576231a5c769972cd7e5bce6c5e848e6766d16107a80ed419cd8212e717e5e7b897b1940858cf788ec915c50bf242687de371372724d4edb7c7df7cc267db7c0f2e597a92f7345bf12f4f1d0c61a2e076bb37f7b250270164aa5dcf73490e6fb95c9e47fc2c3770f12f06ce6b79bdef7e4bc179d8e95145fd5805d09579631227029d6afb92892e5588277cf769efc8202725ac21aba84fe27cc9ed77111d09a6f44adde1430e5e5d413518006bf6a60160a9278112532616afb1557ca"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x8, 0x9, 0xfffff001, 0xfff, 0x7fff, 0x3, 0x9, 0x7, 0xeef, 0x7, 0x7fff, 0x100}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x60, 0x1, 0x7b, {0x7b, 0xa, "902ffc404b2a7a563ce6a215953c04776411464628f63934ec31cea6cd0ed918194c3a7d0f6abffd85a282e6c3715ca61e38111ff17659f292f466089b3e0472d377f45e7a44ca3c66199b64fc355ac2fab841919e4893121491aeb37002c0f42a6c00455d3eecc66559b8475d0245c89fc81c7a2e655e03f2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0x16, 0xe, "a92f40e68264396b9eb2c5f0dc41"}, &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x2, 0x0, 0x3, 0x9, 0x61bd, 0x8, 0x4, 0x0, 0x8001, 0x8000, 0x796, 0x7}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xbb}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000ac0)={0x14, &(0x7f0000000a00)={0x40, 0x0, 0x4d, {0x4d, 0x6, "96a23a7d0b5a92d02bc429b4b65de461d2b809e01177ba99e918711b54760226b70f56d97a9f3a22d58ee1cd861fb71c9c6560e0a37d33df95b94cb0f6b40d6b8d61c815c5d1a734014efc"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000b00)={0x20, 0x5, 0x35, "352681e467c1ae805923c9d17842e887f3e9ede75a64411b5f2d15e51b58bd14209251dda6c7d15c48b00e0e1a768d04a3092f04f4"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000bc0)={0x20, 0x80, 0x1c, {0x900, 0x8, 0x8, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x4, 0x4, 0x15, 0x1ff}}, &(0x7f0000000c00)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000c40)={0x20, 0x83, 0x2}, &(0x7f0000000c80)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000cc0)={0x20, 0x89, 0x2, 0x1}}) [ 3151.974249][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3151.983494][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.991734][T28405] usb 1-1: Product: syz [ 3151.996051][T28405] usb 1-1: Manufacturer: syz 08:04:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1e00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x37, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3152.034251][T28405] usb 1-1: can't set config #1, error -71 [ 3152.044694][T28405] usb 1-1: USB disconnect, device number 115 08:04:11 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x101d0}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x1f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:11 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x38, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:11 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2000000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3152.214231][T10606] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 3152.414199][T28405] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 3152.554230][ T2836] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3152.560262][ T2836] cdc_ncm 4-1:1.0: bind() failure [ 3152.566457][ T2836] cdc_ncm 4-1:1.1: bind() failure [ 3152.574745][T10606] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3152.586395][T10606] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3152.744387][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3152.753653][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.761922][T10606] usb 3-1: Product: syz [ 3152.766267][T10606] usb 3-1: Manufacturer: syz [ 3152.770869][T10606] usb 3-1: SerialNumber: syz [ 3152.814270][T28405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3152.815477][T10606] cdc_ncm 3-1:1.1: bind() failure [ 3152.994227][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3153.003428][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3153.011657][T28405] usb 1-1: Product: syz [ 3153.016036][T28405] usb 1-1: Manufacturer: syz [ 3153.020743][T28405] usb 1-1: SerialNumber: syz [ 3153.388872][T10606] usb 3-1: USB disconnect, device number 7 08:04:13 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3153.752172][T10606] usb 4-1: USB disconnect, device number 61 [ 3154.114177][T10606] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3154.384234][T28405] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3154.392206][T28405] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3154.514402][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3154.525621][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3154.535581][T10606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3154.545585][T10606] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3154.585695][T20564] usb 1-1: USB disconnect, device number 116 [ 3154.594330][T20564] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3154.734262][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3154.743491][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.751782][T10606] usb 4-1: Product: syz [ 3154.755970][T10606] usb 4-1: Manufacturer: syz [ 3154.760656][T10606] usb 4-1: SerialNumber: syz [ 3155.354178][T20564] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 3155.464223][T10606] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 3155.470270][T10606] cdc_ncm 4-1:1.0: bind() failure [ 3155.476242][T10606] cdc_ncm 4-1:1.1: bind() failure [ 3155.714264][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:15 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:15 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x39, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:15 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2100000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:15 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0xa8, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0xffff}, [@mdlm={0x15, 0x24, 0x12, 0x7640}, @obex={0x5, 0x24, 0x15, 0x8}, @dmm={0x7, 0x24, 0x14, 0x0, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0xba0, 0x3f, 0x1f, 0x4, 0x7f}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x22a1, [0x6]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:15 executing program 0: prctl$PR_SET_FPEXC(0xc, 0x20000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x8f8, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x3f, 0x83, 0x6e, 0x40, 0x7c3c, 0xfd2d, 0xdc6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e6, 0x3, 0x40, 0x9, 0x70, 0x8f, [{{0x9, 0x4, 0x28, 0x9, 0xa, 0x2, 0x2, 0x5, 0x7f, [@uac_as, @hid_hid={0x9, 0x21, 0x0, 0x7f, 0x1, {0x22, 0x3cb}}], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x6, 0x3f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x9, 0x0, 0x39}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x7f, 0x94, 0x3}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0xbc, 0x6, 0xf9, [@generic={0xfc, 0x11, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1f}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x7f, 0xff, 0x8f}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0xc1, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x28, 0x3}, @generic={0xba, 0x31, "c91b975d26b38a6256b8557e97d5b26a286e7782bbc15911e988c26a62662e03007d431e2d7f419ecb6a983d09f45dce59e4f4b101afcae226afbd01cd7cf259b6388741c4d151ddce0db4f7c5f24e06e260ae3face50e33106f51f2a93d6a1160eb35029a99d1f953486181e15576d0fdba92edea58e6dfa97621cd71373eb40422b415d7d09234500b15c546fbd3c4ef3edd52d6f5484844ba06d93c1681511fe53f680bb704abe377e00f4761359f1fa1df55c57a21cf"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x4e, 0xdc, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0xa5, 0x20}}, {{0x9, 0x5, 0x7, 0x1b, 0x400, 0x4, 0x57, 0x40}}, {{0x9, 0x5, 0x0, 0x19, 0x20, 0x5, 0x0, 0x8, [@generic={0xf9, 0xc, "9386677c39a020de49d7e733d0c92f519f6b08891b6e3cfe77a275a0d4737c5654624fbfe4a201ef9f53a4750ae85419bafe108cfac7cd754738b568f34f20b81a3e8e0b8c7f8def0a8d83585501f8223373af3cb2a6a71eb97ceb5e21161aee69de74629a975411c6e210bbcb5fb7e340411c58fef6b98c82b13ee317a04dab432ea1277ea6b8184e5fe4fa7a97c76b311881570edd9c6400cab37678fd93fed679d5477c2918e2a64cee8853a254a3627d266b984c04fb0a36f331c2c102c022fa9ebfb7ccc2d7c66f0061bbf1018d5bf70e3ad772ea37101f47f633030ab0933c4f89ee28276a1c0fa3635f72fa41df337e3b4c0460"}, @generic={0x87, 0x30, "224294603df15fa9279afc4850ee0d24df53bcf4defef46179f03360aa9d32305e55a0e94ba749ed7d9d420d0eddde68d925ad464470e552cbd2c6026276d7654673703798cebe981f5316466a60b8416fbefc9f3d4a38649c231afcd54bff3e6233945fe53f4c4078180cc54ddf036b91be6798065084ef3bf06f5931883c97f6984463d1"}]}}]}}, {{0x9, 0x4, 0xaa, 0x8e, 0x5, 0xf7, 0x1d, 0x3f, 0xf9, [@hid_hid={0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x7d0}}], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x7, 0x1}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x2}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x2, 0xf0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x4b, 0x20, 0xe0, [@generic={0xef, 0x24, "7748049ac9c00962c6cdf670685863b5cbed52308c19046f8e6af63faf4d85bbb88da1d5f52678d8dd6b17ae740b4dcc9f7a50dece3c1d7a537b4bb71b8dad99c15c5ac0f30e267da952748f8e95e5631adc5651f4a8d15e983b4b0e84763bafa3c916b55ffe3df9fe0844a68ee4eb6fecccd9e2bb6c8db06767394e1efb4164aaa1afc8a61259b44bf2536a1cc2799eabf48d05aaf921f036598b9f571c05e42e431ae77af73b4ef086d807280ae63d98a4938d12d13efc7d717d822e01c5b40a58850db662f50cd2b2008656e8fbad634ef1d0eeaea45186d5a89445f39ca897f1b64bd833cd07f39131e18b"}, @generic={0x31, 0x22, "1367de9be4742b6a9d447d0fc5d1e81a92182bf809f2dc7d75302c5d728ae3ce48fb5667261f1168e3bed8e8211094"}]}}, {{0x9, 0x5, 0x8, 0x10, 0xdf2ef0f792493800, 0x1, 0x0, 0x1}}]}}, {{0x9, 0x4, 0x6d, 0x81, 0xa, 0xcd, 0xa6, 0xd, 0x0, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "3a529762fb"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x200, 0xe1}, {0x6, 0x24, 0x1a, 0x8000, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x6, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0x9, 0x7, 0xbc, 0x2de, 0x9}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "46ec51"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x1ff, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x3, 0x2, 0x20}, @mdlm={0x15, 0x24, 0x12, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x2f}, @country_functional={0xa, 0x24, 0x7, 0xf4, 0x5a6e, [0xa5a9, 0x1]}, @country_functional={0x6, 0x24, 0x7, 0x3, 0x1}]}], [{{0x9, 0x5, 0x0, 0x10, 0x8, 0x4, 0x0, 0x12, [@generic={0xb9, 0x22, "9c1864596c869eb946c3498dafafe2c79ccf0b137009ecaa869a280aba2efb2bd719f3491118730e5659b1bf09fc499495a548495efbde087d0a7ec1d5257c57bcc2fcadcbbcd9bfda0edf3194e0ce1c6d63ca110b2ac3adc41478587fc48957e174bee833151d86b1e186cd28a8bd6dc0fa6550603089a7d53fec2431c8375c846285a2e00974bdc8e02ee52e63c7b9d0259ddd43d4a2bcf5b0d53222b80599f66e209eb38261b48c8031acdc5c62d50231ad74a076c4"}, @generic={0xed, 0x3, "69d54b859a796c9bd2c1c1da08a1aa85791318f7519f865cd8d8701a08b783cbe0629060ea3e69cc12868978aee32913f5d898a9f036de3cc8ae4ee780733f612d3ee6f272865d5f92483bcd033f846bd5695c912fe45a22739c39be6b079ca3ad018b1e4f7796ff4c1700a3a558d851f3ed28fa5529896588b4d1595ae6403158257a92f533b341435fceee1fbe1af3204ed11b158d02fa560c10bc8a9424b02ff5a5482cf9b02d32c3c5df13d76250f4a0d7bc200cb5da9fc40f39bda245a1bb14d2c93d551e9162085006be9eb3e6bb7f69c0a322190b787292489623422ab5e8136a387a3abd3ca07b"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x80, 0x6, 0x6b, [@generic={0x53, 0x10, "930984ddc3323a33b2b0062bab1e303b8b95aa0f8cdd93bb80550ae1b411da992f4b1e783988fa64183ac66fcc2bec8c9c83a1ae36383dd474ea023057872cb10575116d3d69707c1aca07d0f473a3e724"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x33}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x1f, 0x93, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x71, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x10, 0x3f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x39d58ff1b8455488, 0x8, 0x5, 0xfb, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8f}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3f, 0x1, 0x20}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x9, 0x7, 0x26, [@generic={0xc, 0x21, "d8ec3dc9becfe5e69f52"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x1, 0x4, 0x0, [@generic={0xa5, 0x1, "14e76441b22e28f8cbb6073600f629013f38abaedd68edfd4c5af7459e66f58db49bc2385966f9578610fb406ea4dda8e4d21d5f8abe92956f05a2cf0d05ea51698936595e6193abd92093be2cc10c7395c870d3225dcc909743ab29908bcb62ea917e0a60065d76fbef9587b25437bacbda599121ddda20fe0ccbcf6a08953519f9e532a4dbe662b9c0bbffeb3615a511bed357b55992be3c946e22d151510d33af34"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x64, 0x7, 0x40}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1f, 0x2, 0x6, 0x40, 0x20}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x1, 0x8}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc07}}, {0x97, &(0x7f00000000c0)=@string={0x97, 0x3, "fd378704f6319ce0e3a331349331cc2077a087bdf707aec129a1c4fc5dfdbef1645326fa124255ac2baeca18078f64f639ddd21d0fd572e78a5cec46f3b2ec972554fefe775a5d4dc4e580e4f192bf8a24973abefa19da956c194abd3743c9519b3751bfd2c2c4aaffe78a47c228522007880d444abab9467fb705b393ed914c88d0c9b48b8435ddf97e40469d5326702048a4cbbe"}}, {0xdb, &(0x7f0000000240)=@string={0xdb, 0x3, "1227dee41ae7b7e0f5332cc55217fa71b9e7286dba7eacfa922b6db11d14afb3f06b03d6bca8092691811b332507d6b834e5b013b01ef96ca8e4b17ff9211b403554d6c92814ed53cf6a59c3b9678b99976ed46e8833cc3fa3a1b4a41896bfdabb8c7e8b7ff4d84e0c58f070af9f0344fa0bda6ff3ab91c7f556e9dcd0efc90f5fe11ad3f516ef894d9b81c791aa7eb2a1ebd441fdc8dfcf189fbad8f3a5c308c3b17c4841931f31a8882545d568108b9c24f2a290548423a059f5bdf9c44352991ca629eb26847b1d4ab93b877e7215fe1dda96ce88e431a6"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000e00)={0x40, 0x21, 0xc9, {0xc9, 0x22, "ce236610ee1819670d60b415c1a85c69d1c5a8b32cce97439361465829054f52ec817005f7c1d7de01fefc2f5bad2f8bb3cd5b1195640fb452e66d9d532954c4af3e5a8b153bc76326f03e047758e4ece41996863a294e35ff6c996172f89c75b3104d21ad206ebca3276ed0a74ad0b915367f24027f776aa42830fe54c3ff5d29b4eb46eaba0a452a989a0d4d687411a119489d671b7140eb5f0c97e42bb46b73182dc4bdd5ce083718b514366f430b9686500d21f7d79c1ffc79632ba639f42df5f70d11bbc1"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000f00)={0x40, 0x15, 0xdf, "8b0b27978a929ddc6774862c4e734a63c70c38155268fdb02037115c1a988732dc0b2bb999b74efb795f6859a3e212c09185d071034aef71d83f3940810ffe36421718df67be02d9a629405a638532d8c309553ead3bdbc543500c8a304ac2a12e1397b1c4c3a62e4337774edb1f7b191e7254fe0ca0b31c0b2f07589dcfa614e5047ceeab261bfef6982b89374006a683ce1af4a54168f5f90bc454982a35d88d15a1e8697a86ca1903b8e282f0fed0fc11a3d8564644ad08b46a610071944f114c8c615dbda2e4069d5ac2b4c96797d3c355f16b582eb2256109423c4142"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x4b}, &(0x7f0000001080)={0x20, 0x80, 0x1c, {0x400, 0x7, 0x7, 0x68ab, 0x8, 0x7, 0x3ff, 0x5, 0x1f, 0x3, 0x6, 0x2}}, &(0x7f00000010c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000001100)={0x20, 0x83, 0x2}, &(0x7f0000001140)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001180)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000013c0)={0x14, &(0x7f0000001240)={0x0, 0xf, 0x100, {0x100, 0x31, "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"}}, &(0x7f0000001380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001600)={0x44, &(0x7f0000001400)={0x40, 0x11, 0x2, "3deb"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000014c0)={0x20, 0x80, 0x1c, {0x4, 0x8, 0xfffffffd, 0x0, 0xffb3, 0x6, 0x7, 0x7ff, 0xfffd, 0x3e27, 0x8, 0x9}}, &(0x7f0000001500)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000001540)={0x20, 0x83, 0x2}, &(0x7f0000001580)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000015c0)={0x20, 0x89, 0x2}}) 08:04:15 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3155.934272][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3155.943641][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3155.951957][T20564] usb 1-1: Product: syz [ 3155.956368][T20564] usb 1-1: Manufacturer: syz 08:04:15 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3155.994216][T20564] usb 1-1: can't set config #1, error -71 [ 3156.001596][T20564] usb 1-1: USB disconnect, device number 117 08:04:15 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x80000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:15 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2300000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:15 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:15 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2400000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3156.174406][T28405] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3156.374169][T20564] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 3156.534213][T28405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3156.714280][T28405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3156.723361][T28405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3156.731644][T28405] usb 3-1: Product: syz [ 3156.735988][T28405] usb 3-1: Manufacturer: syz [ 3156.740597][T28405] usb 3-1: SerialNumber: syz 08:04:16 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:04:16 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x80040}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:16 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:16 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2500000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3156.764425][T11044] usb 4-1: USB disconnect, device number 62 [ 3156.778534][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3156.944248][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3156.953284][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3156.961301][T20564] usb 1-1: Product: syz [ 3156.965537][T20564] usb 1-1: Manufacturer: syz [ 3156.970107][T20564] usb 1-1: SerialNumber: syz [ 3157.134276][T11044] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3157.494228][T11044] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3157.505605][T11044] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3157.515518][T11044] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3157.525518][T11044] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3157.654503][ T4565] udc-core: couldn't find an available UDC or it's busy [ 3157.661506][ T4565] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3157.694257][T11044] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3157.703838][T11044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3157.712144][T11044] usb 4-1: Product: syz [ 3157.716504][T11044] usb 4-1: Manufacturer: syz [ 3157.721117][T11044] usb 4-1: SerialNumber: syz [ 3157.874370][T28405] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3157.881053][T28405] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3157.888697][T28405] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3158.095801][T28405] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3158.109016][T28405] usb 3-1: USB disconnect, device number 8 [ 3158.114261][T20564] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3158.115139][T28405] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3158.121254][T20564] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3158.121264][T20564] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3158.335639][T20564] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3158.535911][T13196] usb 1-1: USB disconnect, device number 118 [ 3158.554213][T13196] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3158.844183][T20564] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3158.874269][T11044] cdc_ncm 4-1:1.0: bind() failure [ 3158.894255][T11044] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3158.924238][T11044] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3158.931675][T11044] usb 4-1: USB disconnect, device number 63 [ 3159.037967][ T5320] udc-core: couldn't find an available UDC or it's busy [ 3159.045011][ T5320] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3159.244251][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:18 executing program 2: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3159.334211][T10606] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3159.414263][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3159.423325][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3159.431636][T20564] usb 3-1: Product: syz [ 3159.435978][T20564] usb 3-1: Manufacturer: syz [ 3159.454337][T20564] usb 3-1: can't set config #1, error -71 [ 3159.462003][T20564] usb 3-1: USB disconnect, device number 9 08:04:19 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000988330000020d00080904010102020d000009058202000200000009050302000200000062a06bd493631da3bb602ab9b45fe0875f00fd6803f3c1c43214efad44c5367c78c2b6b2dc5696936b286ca0d85efa0e14f4a495e9c66f71878cc58becf14f70f37d0750709e42b4da6fd4da266f0e6e3b4e87d71a4cbe650e259977b010761205425647928d91ea8a704e5db9ba859af2b8f0d7bb6e19bf64126a237bc99656f90dc66b21fff696c37da2"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:19 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2600000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:19 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x200000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:19 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:04:19 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2700000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3159.794325][T10606] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3159.801915][T10606] usb 1-1: can't read configurations, error -71 [ 3159.814191][T20564] usb 3-1: new high-speed USB device number 10 using dummy_hcd 08:04:19 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x20d302}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:19 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x41, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:19 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2800000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:19 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x42, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3160.034240][T13196] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3160.184270][T10606] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 3160.204533][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3160.374258][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3160.383375][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3160.391557][T20564] usb 3-1: Product: syz [ 3160.395949][T20564] usb 3-1: Manufacturer: syz [ 3160.400598][T20564] usb 3-1: SerialNumber: syz [ 3160.414238][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3160.425198][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3160.434977][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3160.444679][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3160.544239][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3160.555194][T10606] usb 1-1: config 1 interface 1 has no altsetting 0 [ 3160.634248][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3160.643348][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3160.651577][T13196] usb 4-1: Product: syz [ 3160.655796][T13196] usb 4-1: Manufacturer: syz [ 3160.660411][T13196] usb 4-1: SerialNumber: syz [ 3160.714325][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3160.723493][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3160.731939][T10606] usb 1-1: Product: syz [ 3160.736352][T10606] usb 1-1: Manufacturer: syz [ 3160.741075][T10606] usb 1-1: SerialNumber: syz [ 3161.004288][T10606] usb 1-1: selecting invalid altsetting 0 [ 3161.010217][T10606] usb 1-1: selecting invalid altsetting 0 [ 3161.016130][T10606] cdc_ncm 1-1:1.0: bind() failure [ 3161.021987][T10606] usb 1-1: selecting invalid altsetting 0 [ 3161.027992][T10606] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 3161.034616][T10606] usb 1-1: selecting invalid altsetting 0 [ 3161.040427][T10606] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 3161.544224][T20564] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3161.550760][T20564] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3161.558584][T20564] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3161.765950][T20564] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3161.778961][T20564] usb 3-1: USB disconnect, device number 10 [ 3161.785141][T20564] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3161.794577][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3161.814480][T13196] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3161.844249][T13196] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3161.856186][T13196] usb 4-1: USB disconnect, device number 64 08:04:21 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581e600020000f04704010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x20, 0x1, 0x23, {0x23, 0x23, "72ffea9df4dcdecfa87b894a1db8b71024c471279ff3a1acc96a2e9fbdb3a552bc"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x0, 0xf, 0x2c, "f84d2e75e71715d44089e57eddd42aa60618bd01108650dab493c0bdafa7dcb6e7dd9b41f57075ddc2769965"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x200, 0x2, 0xfff, 0x0, 0x400, 0xff, 0x8, 0x8, 0x1f, 0x1, 0x1, 0x7}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x3f}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x70, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x40, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "1096"}, {0x5, 0x24, 0x0, 0xfeff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x796d, 0x40, 0x40}, {0x6, 0x24, 0x1a, 0x401, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x1f, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x9, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1f, 0x20, 0x7}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x4, 0x7, 0x1, 0x10, 0x20}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x6, 0x3, 0x40, 0x1f}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xffff, 0xff00, 0x5, [0xffc00f, 0x0]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2fd3813d279b916c, {0x10}}}, 0x0) [ 3162.714192][T20564] usb 3-1: new high-speed USB device number 11 using dummy_hcd 08:04:22 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0xb2, {0xb2, 0x1, "9ba9d33b9fdf0f34a45ce322920db59444accc90d54daf179fc393a77d2bf66369a9737b919f403de54654c9da1eebc5ce34833e1b221b181132a37f4570649ef02b37f726632c112676417170f3c647adb8665df679e87b237660b76447001ffe9c34e4af3721ceb8e67106dd8a80bb8afbe5ada520341e4ec27b38676f6006112959b34c66bce6e88f629b4cb289913822aea9345ec2dabf787eea888334713eeb35801773c066e565faa7b2a5980b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000100)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x7, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xf, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0xe0, 0x4, 0x401, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x40, 0x3f, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x3, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x2, 0x9}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x6, 0x7, "9338f814", "ac77196e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0x3, 0xd, 0xff, 0x40, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x40, 0x10, 0xec, "7a63edaee3b7de95fa49839e6313d02b002316988bf5b260f47667140665aaa522eed283ee0b1bea5996017f7ca9a05f2ae048300d82d9d2ca0ac644380996c9c7e97c7bb9714a6405043c2f610c84177b7dc3011a3ee1eca812b6cefbb8fbdde418643030a8ec4a52eb1bbe43578e992207520cc56c732a07c48fbfb1310a7514f8d22d73d62278af4125a4bdf2aa2cade7012488b42601c2504e9816a740bcb6c9a9a1c3156e1e48ebdc63a8e874e6935dca5395af8cb73af3d80dffc996400dfb2d7d8b89317e61acbb9903a42ca6f0db13ac0de2d01d3e69af3c2b973de8a2db83e47e2c81634556d317"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x140, 0x4}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'Pa'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'gl'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:22 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x43, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xe002a0}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 3162.778234][ T2836] usb 1-1: USB disconnect, device number 120 08:04:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x44, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2a00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x45, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2b00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:22 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2c00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3163.074635][T10606] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3163.124249][T20564] usb 3-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 3163.134656][T20564] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3163.204240][ T2836] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 3163.314284][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3163.323319][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3163.333000][T20564] usb 3-1: Product: syz [ 3163.337411][T20564] usb 3-1: Manufacturer: syz [ 3163.341983][T20564] usb 3-1: SerialNumber: syz [ 3163.384830][T20564] cdc_ncm 3-1:1.0: bind() failure [ 3163.464289][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3163.475322][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3163.485259][T10606] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3163.495186][T10606] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3163.574247][ T2836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3163.664288][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3163.673453][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3163.681555][T10606] usb 4-1: Product: syz [ 3163.685876][T10606] usb 4-1: Manufacturer: syz [ 3163.690508][T10606] usb 4-1: SerialNumber: syz [ 3163.744220][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3163.753359][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3163.761483][ T2836] usb 1-1: Product: syz [ 3163.765832][ T2836] usb 1-1: Manufacturer: syz [ 3163.770466][ T2836] usb 1-1: SerialNumber: syz 08:04:23 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x46, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3163.955434][T20564] usb 3-1: USB disconnect, device number 11 [ 3164.844229][T10606] cdc_ncm 4-1:1.0: bind() failure [ 3164.864246][T10606] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3164.884275][T10606] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3164.895616][T10606] usb 4-1: USB disconnect, device number 65 [ 3164.944242][ T2836] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3164.950689][ T2836] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3164.958409][ T2836] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3165.165653][ T2836] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3165.179497][ T2836] usb 1-1: USB disconnect, device number 121 [ 3165.186024][ T2836] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3165.914153][T13196] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 3166.274247][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:25 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2d00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:25 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:25 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x55, {0x55, 0x4, "d66567ab13fbd3d4fd5643dc33887411ffbdc6b45b977c95315da6a18ac6759a5e08461d758595cc6d52133f148c4181aa25f40c8d85d49cf98e151a8392339eb6d1e868131980e9f74f9c4826e6e180c870c6"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000500)={0x0, 0xb, 0xfe, "c477166a65b54a26e72c9c3f1225b9afcc505d189875b9a39096ad412e2a99dbffbccd12efd9ed6d57c28ec000cc38b1e22f865db050205a9c9c5712a4ad210d0025aa23d9502aa296c84ce47102e4e662dae7cd2451deb5e6dc08bb351b189988f8986cc15b08f8af6205376431a1307dbd585aaa1a167539cc05df5bc16a2c6b8086a450add5e95b5b232789cf950904d7eacb1a1d74cbe838bd4935b614d7741e4b2aa31ba272b3efcca33b84c8d22e6b5da37d961d7e0d8bf05a72f30d9421d4acd18d3cd4bb2e86062698c825fac559687f093a4c3cac8acac33c0848f7bc01685b3e72dbb92f1253d5387e86730bd2da217cea198cd8858c75a92c"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x3, 0x5, 0x8001, 0x5, 0x214a, 0x5, 0x401, 0x8, 0xf1a, 0x8, 0x4, 0xc92}}, &(0x7f00000001c0)={0x20, 0x85, 0x4, 0x101}, &(0x7f0000000240)={0x20, 0x83, 0x2}, &(0x7f0000000280)={0x20, 0x87, 0x2}, &(0x7f00000002c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:25 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x47, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:25 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:04:25 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000080)={{0x12, 0x1, 0x612, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6a93ee7ad830"}, {0x5, 0x24, 0x0, 0x2000}, {0xd}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x673, 0xf93d, 0x5, 0x5, 0xe10b, 0x5}, @dmm={0x7, 0x24, 0x14, 0xb6, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x0, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3166.444252][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3166.453512][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3166.474840][T13196] usb 1-1: Product: syz [ 3166.481136][T13196] usb 1-1: Manufacturer: syz [ 3166.486023][T13196] usb 1-1: SerialNumber: syz [ 3166.504353][T13196] usb 1-1: can't set config #1, error -71 [ 3166.512299][T13196] usb 1-1: USB disconnect, device number 122 08:04:25 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x48, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:26 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2e00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2d32000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:26 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:26 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x49, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:26 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3000000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3166.754709][T15443] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3166.762353][T28405] usb 3-1: new high-speed USB device number 12 using dummy_hcd 08:04:26 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3166.874195][T13196] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 3167.114294][T15443] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3167.125390][T28405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3167.136341][T15443] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3167.146306][T15443] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3167.156158][T15443] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3167.234185][T13196] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3167.294223][T13196] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3167.301858][T13196] usb 1-1: can't read configurations, error -71 [ 3167.308405][T28405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3167.317626][T28405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.325716][T15443] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3167.334782][T28405] usb 3-1: Product: syz [ 3167.338956][T15443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.346980][T28405] usb 3-1: Manufacturer: syz [ 3167.351614][T28405] usb 3-1: SerialNumber: syz [ 3167.356258][T15443] usb 4-1: Product: syz [ 3167.360668][T15443] usb 4-1: Manufacturer: syz [ 3167.365609][T15443] usb 4-1: SerialNumber: syz [ 3167.604725][ T6853] udc-core: couldn't find an available UDC or it's busy [ 3167.611746][ T6853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3167.984196][T13196] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3168.354228][T13196] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3168.414232][T13196] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3168.421967][T13196] usb 1-1: can't read configurations, error -71 [ 3168.428493][T13196] usb usb1-port1: attempt power cycle [ 3168.494256][T15443] cdc_ncm 4-1:1.0: bind() failure [ 3168.499963][T28405] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3168.506819][T28405] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3168.514363][T15443] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 3168.521039][T28405] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3168.534219][T15443] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 3168.543659][T15443] usb 4-1: USB disconnect, device number 66 [ 3168.705433][T28405] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3168.717110][T28405] usb 3-1: USB disconnect, device number 12 [ 3168.723938][T28405] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3169.464215][T10606] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3169.824226][T10606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:29 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12015c311f98dc8d29a45dd66bbf3363680000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:29 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3100000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x4000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002013a520c9e1d0a02a8020d0000052406000105240000000d240f0100000000e9773a2a47d615000000000006241a0000000905810300020000000904010000020d00000904010102020d00000905820200020000000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x31, 0xa8, {0xa8, 0x3, "8c019efc8b606238c37964114af35b7c964a5911c01bf7dca40de1c791879c192bfe3cc769fe31ad83f01d578d501b9713f33415008b8fa037b3d0e8158324bcbab4f10d351d8c6d909fbc90ac40e6d42e9a36b9dbf84d78b03c6a8c29bacc7fad1a83d370f00d258a39ffd5b185b1b68e6edb32bff6de2a97f384ebd02a32e04e10d0996814955c452e20b41a30ff129e1c6f20bdf73fe5b9968660990a3ab2ce8f2e8bc5be"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x14, 0xc2, "d41af0d8cdd82874c83181c7ee9944db9f46fedf363f240b9fb8abe3ab67fba116871efeb08316d7be9d3e180add62892ed617ee139a695e0557a27cbd4420e96b152ad2c85b88f288329bb95c902e0e8f9f238104ab1499553118129b59559d40cd63a5525a7f47fd7e7f6cab1fe53fa3c0d7e31b9ad6a03ba375cec9c8f7220874c76b74887ca08cba67237a670d6db078b3b020aa8f137ee1df8e58593f3abb387677c01e70b50540fb0ad7a992dbe9a937a7d98e5cdc793edece99090165dbf8"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x4, 0x8000, 0x400, 0x400, 0x9f80, 0x1000, 0x5, 0x3, 0x7, 0x9, 0x7ff, 0x5}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) 08:04:29 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) [ 3169.994265][T10606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3170.003349][T10606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.029690][T10606] usb 3-1: Product: syz [ 3170.034339][T10606] usb 3-1: Manufacturer: syz [ 3170.039068][T10606] usb 3-1: SerialNumber: syz [ 3170.064334][T10606] usb 3-1: can't set config #1, error -71 [ 3170.070976][T10606] usb 3-1: USB disconnect, device number 13 08:04:29 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3300000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:29 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3400000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3170.284183][T13196] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 3170.344211][ T2836] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3170.464364][T10606] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3170.644227][T13196] usb 1-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 3170.654698][T13196] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3170.744250][ T2836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3170.755295][T10606] usb 3-1: device descriptor read/64, error 18 [ 3170.761519][ T2836] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3170.771384][ T2836] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3170.781195][ T2836] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3170.814281][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3170.823315][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.831495][T13196] usb 1-1: Product: syz [ 3170.835773][T13196] usb 1-1: Manufacturer: syz [ 3170.840440][T13196] usb 1-1: SerialNumber: syz [ 3170.944286][ T2836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3170.953431][ T2836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3170.961628][ T2836] usb 4-1: Product: syz [ 3170.965918][ T2836] usb 4-1: Manufacturer: syz [ 3170.970531][ T2836] usb 4-1: SerialNumber: syz [ 3171.164208][T10606] usb 3-1: device descriptor read/64, error 18 [ 3171.434160][T10606] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3171.454669][ T7430] udc-core: couldn't find an available UDC or it's busy [ 3171.461758][ T7430] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3171.476069][T13196] usb 1-1: USB disconnect, device number 126 [ 3171.714176][T10606] usb 3-1: device descriptor read/64, error 18 [ 3171.894242][ T2836] cdc_ncm 4-1:1.0: bind() failure [ 3171.900237][ T2836] cdc_ncm 4-1:1.1: bind() failure [ 3171.908585][ T2836] usb 4-1: USB disconnect, device number 67 [ 3172.104189][T10606] usb 3-1: device descriptor read/64, error 18 [ 3172.224236][T10606] usb usb3-port1: attempt power cycle [ 3172.234178][T11044] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3172.604245][T11044] usb 1-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 3172.614702][T11044] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3172.634219][T10606] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3172.724248][T10606] usb 3-1: Invalid ep0 maxpacket: 141 [ 3172.774231][T11044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3172.783319][T11044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3172.791462][T11044] usb 1-1: Product: syz [ 3172.795758][T11044] usb 1-1: Manufacturer: syz [ 3172.800538][T11044] usb 1-1: SerialNumber: syz [ 3172.874185][T10606] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 3172.964252][T10606] usb 3-1: Invalid ep0 maxpacket: 141 [ 3172.969908][T10606] usb usb3-port1: unable to enumerate USB device 08:04:32 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x23, 0x38, {0x38, 0xc, "152a60a0737d21d747c225a0ee194d7c71b524201962ca6db24fd46daea7f4cb78853fe571e56037805ec7197fe57c80311367180426"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f00000000c0)={0x20, 0x16, 0xda, "c2078f116d51f9c7bc6c65273f3297a3fcc1697932f818eef864502f1c17e73f89373f8a24198f901e7b7edda8bf2df78da8a368004e7e4a0c20925c1661d5e3a7b39f612d0d3bec1d9ec386764e310da5c896f7573ab3a9c26b86615b2da0d0370fc41c9c4855b954c34756b394d49ca31741f13987da15ac25635c5cb0d76b74d5c76fc0a2fe1dba52d18085f4e4567c49744c3f191d056f5616f9e1cce70b86d3b66029729ba742bdcd9a1b318deba851da00270aeb170734f29000f262cae3e8cf1ab1b52abaad73f48ce16fd57bb7e8b7eedd271ee70a1a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x6, 0x0, 0x3, 0x7, 0x0, 0x2, 0x8, 0x4, 0x0, 0x800, 0x86b9, 0xbfd7}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) 08:04:32 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3500000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xc050000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 08:04:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffff00, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xe1}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x10, 0xdc, {0xdc, 0xe, "b1360d66d5e05f977cfda603f13598ddf66b551be70f07941f3609031e1a5cecd6d71c3c094de08524b0979f97fdf5e59e757352d1c4c2b885182da045c0d29afbae6884b75706fbc3e57d874b93b6c767f7eeebb83e92aa61398f7f0e26ac22dbfc3481edf86c90f755cb9b1e7139f1242fbba960bc915431bb53f7e086dbb4bb56ee64155809ccd6d06b630ca5eea3c60c313ee30f3cf2c5421fc8d37034483ee20732054d7de45fd4b1802c3c4a07926e6a024148545b85f4b5ce05052a6b0cd7ca7f448c7899e459af0072be3fd505cddbefc52a6360e1b6"}}, &(0x7f0000000100)={0x0, 0x3, 0x70, @string={0x70, 0x3, "9efe85cd0062a4b7d6c30f6c8fe808b37248fe8b1522b5222855ee740f268565734eaeafc6f7925b2bcba074b7c8f0d6a1336052d7cf9b1e6edec5d1c1f3ca0370066b33869caffda1d8fad55001fe519c11e176d5e8ecf84880c5c71ebe95ae78fc76331191eacf9f1a0f4703b8"}}, &(0x7f0000000180)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x2, [@ptm_cap={0x3}, @generic={0x15, 0x10, 0xa, "1bac5092b11e5c124f597f2087719a23d86f"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd9, 0x0, 0x3c, 0x6, "cd67b039", "cec3a176"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x4, 0x1, 0x6, 0x7a7c, 0x50}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000500)={0x40, 0x3d, 0xfe, "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"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf077]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x72b8}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x70}, &(0x7f0000000680)={0x40, 0xb, 0x2, "ba00"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "8211"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0xc74}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xe1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x49}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3173.048959][T11044] usb 1-1: USB disconnect, device number 127 08:04:32 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3600000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x10000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3700000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x50, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:32 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3800000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3173.314221][T13196] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3173.414165][T11044] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3173.514211][T15443] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3173.674241][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3173.685451][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3173.695409][T13196] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3173.705125][T13196] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3173.794238][T11044] usb 1-1: config index 0 descriptor too short (expected 65280, got 92) [ 3173.802659][T11044] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3173.884275][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3173.895386][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3173.904464][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3173.912422][T13196] usb 4-1: Product: syz [ 3173.916695][T13196] usb 4-1: Manufacturer: syz [ 3173.921283][T13196] usb 4-1: SerialNumber: syz [ 3173.964224][T11044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3173.973294][T11044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3173.981552][T11044] usb 1-1: Product: syz [ 3173.985970][T11044] usb 1-1: Manufacturer: syz [ 3173.990757][T11044] usb 1-1: SerialNumber: syz [ 3174.084263][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3174.094906][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3174.103061][T15443] usb 3-1: Product: syz [ 3174.107258][T15443] usb 3-1: Manufacturer: syz [ 3174.111847][T15443] usb 3-1: SerialNumber: syz [ 3174.854225][T13196] cdc_ncm 4-1:1.0: bind() failure [ 3174.859913][T13196] cdc_ncm 4-1:1.1: bind() failure [ 3174.867237][T13196] usb 4-1: USB disconnect, device number 68 [ 3175.124210][T11044] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3175.130840][T11044] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3175.138662][T11044] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3175.234206][T15443] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3175.240732][T15443] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3175.248299][T15443] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3175.346652][T11044] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3175.361696][T11044] usb 1-1: USB disconnect, device number 2 [ 3175.367875][T11044] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3175.456149][T15443] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3175.655919][T11044] usb 3-1: USB disconnect, device number 18 [ 3175.664261][T11044] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3176.104259][T20564] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3176.424222][T11044] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3176.464276][T20564] usb 1-1: config index 0 descriptor too short (expected 65280, got 92) [ 3176.472628][T20564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3176.674232][T20564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3176.683347][T20564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3176.691906][T20564] usb 1-1: Product: syz [ 3176.696182][T20564] usb 1-1: Manufacturer: syz [ 3176.714346][T20564] usb 1-1: can't set config #1, error -71 [ 3176.722256][T20564] usb 1-1: USB disconnect, device number 3 [ 3176.824310][T11044] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x12000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x51, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 08:04:36 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) r2 = syz_usb_connect(0x2, 0x90f, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0xcb, 0x45, 0x1c, 0xff, 0x411, 0x1, 0xec6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8fd, 0x4, 0x5, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0xd7, 0x80, 0x5, 0xbb, 0x7c, 0xeb, 0x2, [], [{{0x9, 0x5, 0x5, 0xc, 0x8, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x1, 0x7f, 0x3, [@generic={0x5d, 0x4, "8f5ba9715c8bef7ce4f550e72df2e9f2929fa2039803ea9d8a5462ccb517ec8f9173f4643fd34e831a2ebc578397f9ee6e8e722f11e6da31261b46ce02290fadc5846e9defc51629ced84251d7d0d207c3fc9d23a1ddfe6b251fe8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xae2}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0xb7, 0x1, 0x1f, [@generic={0x102, 0x7, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x1f, 0x20, [@generic={0x19, 0x22, "98cbc6f11e2a891d081f51b7d122d4104d5f8d1225c8bc"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x3f, 0x5, 0x3}}]}}, {{0x9, 0x4, 0x69, 0x80, 0x1, 0x29, 0x92, 0x40, 0x6, [@hid_hid={0x9, 0x21, 0x4, 0x3f, 0x1, {0x22, 0x4c4}}, @uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x37}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0xff, 0x2, 0xff, 0x15b, 0x4, 0x68}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x81, "2dd534fe"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0xcaf3, 0x7, "a6fff74b"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4, "fb"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x4, 0x6, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0x2, 0xd, 0x8, 0x9, 0x6], 0xe4}]}], [{{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x81, 0x0, 0x6}}]}}, {{0x9, 0x4, 0x2, 0x51, 0x0, 0xff, 0x32, 0xde, 0x20, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x2}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0xe6}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x6, "e82128ac19"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x2, 0x2, 0xd9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x1, 0x5, 0x0, 0xfc, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x3, 0x80, 0x7dd4, 0xe5, 0x3a}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x3, 0x3, [0x6, 0x2, 0x1], 0x33}]}]}}, {{0x9, 0x4, 0x56, 0x0, 0xf, 0x72, 0x4e, 0x61, 0x8, [@generic={0xcc, 0x7, "5bcee6fb95fa9241e29afc29a6b810e11b6577e4aa78a592c61ce65497ecb1208b65c3d2ab6f75c1257bf19d3b15361387e6a056fc1338a9ba70d114a5d2ab76b9975d577a8280f2b288175697910b82c7a4cf48fda6e6fa292697db568c7c745cfa11a759dc3ce076b6e1a89d83a475c51d44d830d68ef79f8f5282c1027738d8d62d3e8d68a6e0b89531b93a37e0be32ed6c49d6879f73f42442fd787357242368e6baf2c4597e47faa3ce32f6ecb34472fb9bed9f0b24b22b136b500a9f8fceef7e6761e6f2da7ddc"}], [{{0x9, 0x5, 0xdb0a7503ac41333b, 0x3, 0x400, 0x5, 0x1, 0xff, [@generic={0x4, 0xd, "f262"}, @generic={0xbb, 0x3, "5efcc58948eaaf2c5c39a055082f46efc4dc2fff2cc8f14e5aee27b8b3fc8ff0d5cc9b85dcf30316583fb5f6eeb15a68de64487afcb2e078ab190292688c9efbc36f7add49b64e0a7788bd33dd3db6ac2e8fb08d767f118dfd93749e632f6beca74aa6e803becfb59cf491435e4dbc9b75b9ebc2b025c30da58878fdc94ae6ae3fe1a87f23f8644e5eda52ab495a12fe964cfeaebc900139f184ccd7b4ccd6b8abf3c0bc3043bd2ce10ef96b54af88951dd05ba220c8f16621"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xff, 0xb7, 0x20, [@generic={0x2f, 0x24, "633e499ab6570ea93449f07eda30512f8fac170b8cfa0c1036c584623e28e3a6545b705aeca0b67806c06a1570"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x1, 0x67, 0xa8, [@generic={0x2d, 0x3, "fe08e7ca5ae9173a1f93e2c5d92da14c6be3d37988070df5c58fa153d153f51c4886dae074f8296e30a512"}, @generic={0xbc, 0x4, "82c951d874d0b029d17734e8728b6f619fdd1cbdb536804beeb4d766e4f21482d0aaf1d05a3349989749ff4e57a77f5ed0028a52c7b20b61fb290ba0514fd8ae2cf927e81f9425ec77c92085a29721705904257003714d65d6739942a4e8c8d379e0aed8c3cbb552e6660c7524d09310d21d79807b7489fc157e1f771d4e2575728d258a62b01d75f7f0b748bcbd6fde49238e66479fe52873a2ad0a2195a0a58607e6df2f7a0f94aebf0dcf9c89b7b154f594af934d18d2ada2"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x1, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x6c}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x3f, 0x7f, 0x6, [@generic={0x7b, 0xf, "9767a7568d6d6aed0eeb4d6817bcd70ee3a2ca74f0c6e9cf884661510183486968bfac3f291fe39cb7e75e20778f6a68c404a7d7b33ec141fb883f0493d9a9c438a16b0a0fe97426a6e34345cd30455354173f3ba1566ef37635cb66368389ef8f318091dfb89f3365bcfe925b5379bcab343812bb3efdaa17"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0xfa, 0x2f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4}]}}, {{0x9, 0x5, 0xc, 0x19, 0x200, 0x5, 0xe1, 0x0, [@generic={0x7c, 0x31, "c9939eca4ccbe1eb4256731ea345590e2a3058d6606072662549477dc9ffe0a2ad4445ee7196079d80ee294b353e557a180791c87df899d5e272ebcc9428f498555b02e86e17baf030a8be0c7442a9d838753feae53e6dbf387ee9b3ae61178f03d6b039b7091247e99eb15d9cf0d6029568c15a58418ee5a15b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x40, 0x9, 0xa9, [@generic={0x8d, 0xb, "88fb3935df4034174472fd1b9f1f3062cd3e28fd38691e0bbf909e0cca3b153e17650a61c690cc2829497940afee43ac0d933ac29b1a1c1b0e5f74dc13be686be6db4f89fabe765f1d3a6ffa29e96b6f9507abcb598a31375fc671aea53779e0a6beb547298f2d8c6f2d26bd5ddedcc49bb6ce10c54ebb8032c1c311d726a73fbb87999800175b9d415a77"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x80}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x7, 0x7, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xdb, 0x7, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x20, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xa1c}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x5, 0x1, 0x2, [@generic={0xd3, 0x0, "0baa40e006bccc5e9bd0a2dae2e54e37330a527282b567e61686bf229b69e9d537d956138c4cc5ffb97595f72189ee075990b8eb5cb84e2eff21142e5ac698be35cc9b33d4702178e2e9be7a712f2fba86798cc352cdc46845c03027a2a017fad822bbc6a8846dd646dcf40c1b9798870bdc263cec22c26814f26401c008249d5fefa29560a8567776a6205dd32d661e1d7aba89e068fcf710778ce78953d6c169c1a09437de21f04112217ae19ca40e8ee20558a0e5c357dc9f311d65781828ed8340f0865e5708bb366c32b5a64f8a52"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x9, 0x36, 0x2, [@generic={0xb3, 0x10, "bdcf921008ff634c09d02d2ca0a59e489e47d532de29e6970ad8b92219657ca6076d11a1e6cab355aebd5a0488f494c87863ddc76104161f80f6beb2561631a30af99a4bfbfb3b925cd6ca74e3b3cc9541784793d88c5fbe3947752fa68fd8c1e887ec3c3833fd4c6bfc812dd14e5a9f93696cdffd4d7c05923b35aac424f73802e49acafe8704cbc175c60ec3a5d020b2b46c87509533fe3fb85dea89036077f1eb7b3d5ec3b1d423ab5a737d597c2d1f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x2}]}}, {{0x9, 0x5, 0x0, 0x14, 0x40, 0x4, 0xcc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x27, 0x5}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x1f, 0x6c, 0x7f, 0x40}, 0x40, &(0x7f0000000ec0)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x7, 0x0, 0x99, [0x7f7f00, 0xc0, 0xf, 0xff0000, 0xffff3f, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "245f9ce9f8fea919f91b3c5fccf8716b"}, @ptm_cap={0x3}]}, 0x3, [{0x24, &(0x7f0000000f00)=@string={0x24, 0x3, "f179b1e88da50f7ced3b44b940a5a384e2fcc54c716d557c37f4c83fd3fd57e4bcea"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000010c0)={0x14, &(0x7f0000001400)={0x40, 0x10, 0x8f, {0x8f, 0x24, "72147c5499cd97fd829bbd92c08a286a4341eced36664f4d4e3d7ea0c3e02564ecc0fd5821f96650f08accb3ecea1d096a3fee6f4b06ef2dbb1c64d1a66a1135ede279e70700000037c17b1f3802260b8a7d56ce7a81170679abcb870c61ca8ce1b79295c421851e16f355e14c80ead9229ec396aef1e0b4cfcb4a5539754bbcc8de1415286232d1658862840f"}}, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001340)={0x44, &(0x7f0000001100)={0x20, 0xb, 0x43, "7f284d1d29708eb737fd544b7a123cd70b67da523e4628e380a197450d231dd6a4697bc90bef5f97d1a11490e81735f6d74308bc661a3ae4c2c0a9bfab98e4349005f0"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000013c0)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x8, 0x3, 0x9, 0x4, 0x9, 0x1, 0x7, 0xa30, 0x48ab, 0xb4}}, &(0x7f0000001240)={0x20, 0x85, 0x4}, &(0x7f0000001280)={0x20, 0x83, 0x2}, &(0x7f00000012c0)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000001300)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="4002ae000000ae111a52d8c897d536217c8c535b0c142dc3f567cbfb60b174cb7b62e5b6efb0a4980a846af8cec3e39a520602b7c95bc907c124ba5f2166bdbe1c39d565e00383d18ce0b292f64a4be2359245613df6b0cc80f46c186e9b315ca6673c40d194d2fe22232e3813cbcd9123827cb14b6ab4e18ff8ff7f3314baad3eb1bc9553853decab26e1fff46df59fd1491c305d3c253320a5207b19784d75bce0932a136287aa21ebb75193702803891135a0"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x20, 0x17, 0x5b, "c8ef3977239a5cfc9f450dae58865cee7883817eb1ce4aafb71c77b7c120c6e2a7e7396523912700c90392c06f79099f5e7dd51f8efe0618612ba1f10bd18c914ba249720dcf724d46157fba1cc5a99e68d326b7e36d1ee436a53b"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x4, 0xb5, 0x8, 0x1000, 0xfff, 0x58, 0x8000, 0x8, 0x6}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x10c}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001040)={0x14, &(0x7f00000014c0)={0x0, 0x9, 0xb0, {0xb0, 0x10, "8c90b57963eec3902126e320bc436aad9d2921231068d0cd35bcaf792dfecb607b0cfd69a9407dd3348f7b46df7844c937225a978c96c293225fb51e089f142e72ef91ce56ef7f855f53cb03b18102c0ada80e71a603fb18ae0c7177618ad466b24868b6a804d1b17aa3412e615ff645e8f527e878a730579288f4e38c592abd430537ef606d0b94bbb065c3c740e608b9301c919a55bd296e86bba571923d13ff0ced1a1b4b342757a095081efa"}}, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000017c0)={0x44, &(0x7f0000001580)={0x40, 0x8, 0x82, "58ee97fd51e66c96fa9a3da2ebb5970d3342f324110dd1630343ca83e58591982fdd5a68aef5fa2f540145f4459a5f94fbc35a11136205547cfeccdce88290c219d0a5f55577d3820042169909d33ebf234c50899a9380e234805395368c38180d9fbd525da77ccc5bd2e4ef0537e3ba04aa559adafc2403e3550c04df965a082796"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001680)={0x20, 0x80, 0x1c, {0x800, 0x4, 0xfffffff8, 0x4, 0x1, 0x93d, 0xfc00, 0xfffffd97, 0x846, 0x4, 0xd390, 0xb02}}, &(0x7f00000016c0)={0x20, 0x85, 0x4, 0x101}, &(0x7f0000001700)={0x20, 0x83, 0x2}, &(0x7f0000001740)={0x20, 0x87, 0x2}, &(0x7f0000001780)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:36 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x11, 0xed, {0xed, 0x21, "cf6ffca8b3f4b3dec989124b8a86bb3a5bfc32148facc7ececb7aa052d191eed8f056cb92710115dea83c4d5733d5852aa0f558aa6096eff38cac85a9bd935fbb9d0e976d4bfa3be0daf21471349d6421b009c04dd20ad121c357ba7c390799379ca3b901ab1180237cba9fe738bc1e7cbc45368d0be66357567fdde512ddcbd7137f18edf4c503436af0ec2eb1034500e3b507e5b1c4ff1b92fe9c5c0df3c3b37a6a3732258eca65c2680cb3a64a7f8c55d4c68195ddd2868b20723cdffeff732d9364225a23e54c53e8807bea330d7809207ecfd64271d01d67d56966a93ad1b02c50a98845d4008671d"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0xb, 0x1c, "73d5a3dfdba50a9753a8521258ea2fa61563c78e7018790858a63b33"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x89}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x5732, 0x101, 0xffffffff, 0x75, 0x50, 0x5, 0x0, 0x8, 0x0, 0x3f, 0x5}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3a00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x52, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3177.044199][T11044] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3177.058905][T11044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3177.067888][T11044] usb 3-1: Product: syz 08:04:36 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x18000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3177.104263][T11044] usb 3-1: can't set config #1, error -71 [ 3177.115566][T11044] usb 3-1: USB disconnect, device number 19 08:04:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3b00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x53, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3c00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x54, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:36 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x1f000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3177.234179][T15443] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3177.274176][T20564] usb 4-1: new high-speed USB device number 69 using dummy_hcd 08:04:36 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3d00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3177.504221][T11044] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3177.604238][T15443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3177.674217][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3177.685169][T20564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3177.695015][T20564] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3177.704718][T20564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3177.774251][T15443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3177.783440][T15443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3177.791657][T15443] usb 1-1: Product: syz [ 3177.796007][T15443] usb 1-1: Manufacturer: syz [ 3177.800611][T15443] usb 1-1: SerialNumber: syz [ 3177.894236][T11044] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3177.914371][T20564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3177.923395][T20564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3177.931738][T20564] usb 4-1: Product: syz [ 3177.935987][T20564] usb 4-1: Manufacturer: syz [ 3177.940632][T20564] usb 4-1: SerialNumber: syz [ 3178.064206][T11044] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3178.073244][T11044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3178.081382][T11044] usb 3-1: Product: syz [ 3178.085753][T11044] usb 3-1: Manufacturer: syz [ 3178.090334][T11044] usb 3-1: SerialNumber: syz [ 3178.694592][ T8694] udc-core: couldn't find an available UDC or it's busy [ 3178.701658][ T8694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3178.709548][ T8694] udc-core: couldn't find an available UDC or it's busy [ 3178.716640][ T8694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3178.864240][T20564] cdc_ncm 4-1:1.0: bind() failure [ 3178.870030][T20564] cdc_ncm 4-1:1.1: bind() failure [ 3178.876446][T20564] usb 4-1: USB disconnect, device number 69 [ 3178.954260][T15443] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3178.960789][T15443] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3178.968730][T15443] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3179.165650][T15443] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3179.182840][T15443] usb 1-1: USB disconnect, device number 4 [ 3179.189197][T15443] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3179.234233][T11044] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3179.240825][T11044] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3179.248598][T11044] cdc_ncm 3-1:1.0: setting rx_max = 2048 08:04:38 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3e00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3179.455592][T11044] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3179.655767][T15443] usb 3-1: USB disconnect, device number 20 [ 3179.674216][T15443] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3179.924178][T10606] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3180.284294][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:39 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x2d320000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3180.424199][T15443] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3180.454310][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3180.463361][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3180.482404][T10606] usb 1-1: Product: syz [ 3180.486644][T10606] usb 1-1: Manufacturer: syz [ 3180.491253][T10606] usb 1-1: SerialNumber: syz [ 3180.514228][T10606] usb 1-1: can't set config #1, error -71 [ 3180.522111][T10606] usb 1-1: USB disconnect, device number 5 [ 3180.794234][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:40 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x55, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) r2 = syz_usb_connect(0x6, 0x3bc, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0xd, 0xbe, 0xe7, 0x10, 0x19d2, 0x40, 0x2cfb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3aa, 0x1, 0xff, 0x3, 0x10, 0xff, [{{0x9, 0x4, 0xb5, 0xc5, 0xf, 0xff, 0xff, 0xff, 0x40, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "86cc7cc40c04"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xccb00000, 0x4, 0xcf, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0x1}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x80, 0x6, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x16, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x8}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x20, 0x6, 0x7, [@generic={0xb6, 0x31, "9e84a2eb76b3995268d1026b8a654ceb40410f7872aa2fdf371879f70fca1c561352627cd59e0672990409ee52e57b7d0cc793cdf9a1c841d522313b6e50eeee623c84d0ff07d616532fb47e7499335091e4015cf1c650b46309f21a2dce76829f772465d1c62288139807564ab324543be07801a774c98085dc627b43f4ccdc7c5d7da1d8f4befce905043135d2b3311ae1c2cf1d817959440205ecb7cb120dcd89f26bed1614cfcbb115f63c4ec284cdc18df0"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0xb9, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x18, 0x3e45}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x81, 0xff, 0x6, [@generic={0x34, 0xc, "374027502b3da8465f0efaca883b84e6a7323baa35e449932821a12af85a772a06c5361bd1f19798a100945ae13abb7b2503"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x40, 0xc4, 0x9, [@generic={0x36, 0x2, "798b0b9aa4fe6d7e4961d4304d379e01d18a0b5a2971ca5c35616720a63dfd40e1c562e85afc5090f6dba14a8c4a3f01b6579ed3"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x20, 0x8, 0x8, [@generic={0xa4, 0x9, "7b7d164d0e2197b67aaf093c4cb42087b7a7ae5ae55960fcdaa4c55e837df9b8890602b3b12ae043ae7fb01e48e00acb6bc3b264d5e02c4a346999e8ea1e9afb2f63a5b9bf4f487177e89c6398130f644534b6e22aa5f86a186772659306f543c5c72fce5e79585f0270a4c82511587da2077dabc6d493482ed8151aee36644cc4febc7fac79f4123c613e429f57cca7291d1d32547bf210dcea9e06b99238b13ca0"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x0, 0x8, 0x4, [@generic={0x99, 0x1, "5ba00632fcf3315fdd9bc8b55cac686c145ed7090ca251f888b526965769d511f6cba91b10eeea2e16c135382720870faf66b8560a55ab90ed222e0dc8512bdb88e2a48857e61726395d0570823b243667812cc4ff799b76a55479359feea89942c8aec4e40f82650eb3e226414fdc5624a360805ba6c905494de0e89f9d7c8c9e69e36ac568edd26f24d7892f874adb514359064d2f5c"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x3f, 0x3f, 0x3f, [@generic={0x5, 0xa, "bbabb2"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x0, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x8, 0x0, 0x8, [@generic={0x54, 0x30, "2a98514692484aab53a8773eb6c9d681d1b58c61f132fb40c3fc453426ab93e99c950a960c586ebeaeb1384262657e1d5b4a579074e8f769d8c9c36aea3f401376ca54e011cdc76f7569378362d3ad15bdc3"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x1, 0x7, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x0, 0x80, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xa3}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x10, 0x6, 0x42, 0x3, 0x40, 0xff}, 0x30, &(0x7f00000009c0)={0x5, 0xf, 0x30, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4f, 0x57, 0x4b13, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x617, 0x0, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "5209dffcbf5d1c9e1daf3e7fb08d7a3a"}]}}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x0, 0x4, 0xfa, {0xfa, 0xc, "176e47a575608872005f4a41a3b1bfc2cd87d605ca50f481a10e66bedd56fcd2a92af8cfffcdda535dbe60bb87878182c54c0fee79f538d67fcc2e6aa4b24857b50b32642c88d7d25de03fc4a52eb3b6cec4626486872396264b73291fde6fc2867e37b1b77b457d797231458f60c158dfc758927bda29b519b950afdc0b487a59f7bb4382569f596d2006bd7963ed9dfb711e3e50029572ea9ee07da25abeb7c152c74535584add844a4fa02e3b7734b920577ea3813ecf4a1d4918abcf955d825cafb89f7253cb04cf6d6dec0efba3a6282a4de140956b41bb384f8a6e4985adeff0a2303f212bf3d6406ad41472f576bd6ca263c8b600"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)={0x40, 0x31, 0xd8, "eb57444b34a1abbc57ff443e19da8e12f693090db8b8005163f70430ec5422259a4c1115f65d27b620bf3c946a39e375972e336f8b272bfdf1b906271fbc0436b9e21215b391590aaea5b070527c2b695110fd1773411dafa6303728fdc536d91b6aabb94c40434dff42d43e57cb2e056881a310c35146e6610dee32c9a875d72557f5dbc4c02f86fd6f9d3abe3668728d3d4a556f10cecfb0565996f35d140640414797312083817677868538d267dc488d8780fe5d1d2d14f15ceff68f2973be4711762a070061ca42985a79d5bcbca84fa7f4a103a3ec"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0x800, 0x3, 0xffff8000, 0x1, 0x7da4, 0x3, 0xa9, 0x80000001, 0x3f, 0x400, 0x7e}}, &(0x7f0000000d80)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xf3d}, &(0x7f0000000e40)={0x20, 0x89, 0x2}}) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x28, 0x94, {0x94, 0x21, "84a19abc00a2941bb90e85abf4259e3ee6e862f218f0266a61853a4ea687439f7fd6d49b720cf8692b7d3038e3d436f65e599fc54205009ebcaee09158096927c070c182f4f582a72517a781445cdcee1c0b1528a58fa8dc569326669442e6cbcf87034e5903a2dd0e3998205793bdaf849d1911411670512ea0a50a3618499709a0ddc12bdddef8f80bc45e0578bb26fc0e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "01fd587e008386f626d01df9e43f009017b9d6d958a7cd17494d6480232560d0fa44526e7b89ff0460435576e6f35f1c6cf3ec165195967e788ac2341f5006126f2ba5952d87c8edf72ac07f834eb76a596bb11221e8926460"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x10, 0xa3, "655afb0900ac28a1b207f08cd1ad6e6fbf1f7db76a8f4eec3ae1de2e6be96bdc7a03c15155f466812d95805e72831588eb00638724099d77e30025615d24aa362d8f71b390e26118fd5a14303f5a5b8fc3635525d03254beea61311aef4e5c1565ba1849d639c541e2b8bf57161261f0a2870e33240522e6883a843a25a9dab789b4744eef722b8f0ee3218f891fd5763742ddf417a30f30dcd3cb9da1ebefb68c6117"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xae}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0xf9, {0xf7, "1f6810882e8633cbfe2a67cee680a61d3ffdea843f15938f11bb339ebeee57df3aab47bea7cf8d589be103fbb047a1104eaf97ef920a5cf2cdd6417121ff2ba7860a7d69717bdf6e39a13c7e1743e9df6dd46ba529465d105bdf79a6a1719e004f8bb26d1d8a51376dd816ea80abe5977ef5b9c8fa81fd93b7b7595efb03634e0cf3a1377f2b6141c04a7e472c7c069fc36fbfe11fbd30099b785cd884e0ae2823cf51fd7342361b2e53945fe8f6bf8c32f653051b40a09a4382b4a4a101abc952b6674d1a459265b9e8344107e507c0772fdef265026a5d8daeee8013cdeeb5b53190ad9fcf701b78dee05f024db5999805b283f8e345"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0xa4}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x1}}) 08:04:40 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x3f000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x800000, 0x0, 0x800}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3180.994209][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3181.003443][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3181.011840][T15443] usb 3-1: Product: syz [ 3181.016231][T15443] usb 3-1: Manufacturer: syz 08:04:40 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x56, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4000000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3181.044429][T15443] usb 3-1: can't set config #1, error -71 [ 3181.058988][T15443] usb 3-1: USB disconnect, device number 21 08:04:40 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x3900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x57, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4100000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:40 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3181.244208][T13196] usb 1-1: new high-speed USB device number 6 using dummy_hcd 08:04:40 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x58, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3181.424238][T15443] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3181.614277][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3181.794351][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3181.805282][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3181.814359][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3181.822319][T13196] usb 1-1: Product: syz [ 3181.826485][T13196] usb 1-1: Manufacturer: syz [ 3181.831064][T13196] usb 1-1: SerialNumber: syz [ 3181.974285][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3181.983660][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3181.991769][T15443] usb 3-1: Product: syz [ 3181.995943][T15443] usb 3-1: Manufacturer: syz [ 3182.000514][T15443] usb 3-1: SerialNumber: syz [ 3182.984231][T13196] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3182.990665][T13196] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3182.998170][T13196] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3183.134238][T15443] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3183.140706][T15443] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3183.148292][T15443] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3183.184568][ T9655] udc-core: couldn't find an available UDC or it's busy [ 3183.191570][ T9655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3183.205512][T13196] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3183.218517][T13196] usb 1-1: USB disconnect, device number 6 [ 3183.228576][T13196] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3183.356238][T15443] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3183.375285][T15443] usb 3-1: USB disconnect, device number 22 [ 3183.381447][T15443] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3183.964191][T11044] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 3184.104161][T20564] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3184.324218][T11044] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3184.464329][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3184.494280][T11044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3184.503350][T11044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:04:43 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:43 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3184.511702][T11044] usb 1-1: Product: syz [ 3184.521850][T11044] usb 1-1: Manufacturer: syz [ 3184.526674][T11044] usb 1-1: SerialNumber: syz [ 3184.544242][T11044] usb 1-1: can't set config #1, error -71 [ 3184.552181][T11044] usb 1-1: USB disconnect, device number 7 08:04:44 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x30, 0x44, {0x44, 0x8, "43087804a1997b57b3ce6c44300af8d5b688c0bdfbcedee37149e8fedd98b660201f5b89504dc0d544c89994a2464ed1828aadfcee5a0138a710d3a78abe03953fd2"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x0, 0x18, 0x53, "9ae4c792b8d84c29b692d2b4d1230f104e033f59ec0d2db395b16fdf6892c7cc9afdc0802534495cc1d8bb694c2b9543708469276cd0544a6941abaa24a6d644e20b080dff1a039f41c7e516c2bd2bfa640c51"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x200, 0x8, 0x8, 0x4b7, 0x0, 0x101, 0x7, 0x5, 0x4, 0x9, 0x7240, 0x9}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x7f}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x7ff}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0xffffffffffffff59}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:44 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x40000800}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x59, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4300000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3184.634805][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3184.644429][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3184.662809][T20564] usb 3-1: Product: syz [ 3184.667203][T20564] usb 3-1: Manufacturer: syz [ 3184.671985][T20564] usb 3-1: SerialNumber: syz [ 3184.694256][T20564] usb 3-1: can't set config #1, error -71 [ 3184.702328][T20564] usb 3-1: USB disconnect, device number 23 08:04:44 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2d00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4400000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x2c00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x500d0000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:44 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4500000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3185.074300][T20564] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3185.082046][T11044] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3185.444281][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3185.455168][T11044] usb 1-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 3185.465315][T11044] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3185.474397][T20564] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 3185.484183][T11044] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3185.654290][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3185.663324][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3185.671468][T11044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3185.680536][T11044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3185.688562][T20564] usb 3-1: Product: syz [ 3185.692712][T20564] usb 3-1: Manufacturer: syz [ 3185.697355][T11044] usb 1-1: Product: syz [ 3185.701513][T11044] usb 1-1: Manufacturer: syz [ 3185.706161][T20564] usb 3-1: SerialNumber: syz [ 3185.711578][T11044] usb 1-1: SerialNumber: syz [ 3185.754825][T11044] cdc_ncm 1-1:1.0: bind() failure [ 3185.945378][T10846] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3186.604563][T10846] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3186.844256][T20564] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3186.850695][T20564] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3186.858258][T20564] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3187.075705][T20564] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3187.275609][T13196] usb 3-1: USB disconnect, device number 24 [ 3187.294216][T13196] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3187.659996][T13196] usb 1-1: USB disconnect, device number 8 [ 3188.044185][T15443] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3188.404251][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3188.415432][T15443] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 08:04:48 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:48 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0xa0, 0xd, 0x21, {0x21, 0xa, "7fea7f6e49ac716d48f55a90ea76e2ae8b6e790562608670687ee8f4289b91"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000000c0)={0xa0, 0x8, 0xa5, "bfb33f7498e79aaa8742a18716a5dd4800665546e944cbd5e20cbdd41ff4982736625d9a20b5cbe435605396aa3e95fbbaf0f53ce08056cb17526813a684326ddde65e7a4c8334a2e141965182987278ea8160ae2820038df3ce1eeb1aa80432398b18d09ebb09c507e6a11e9676b88883f134bade38e0c69dd1d6aea1a5237d26037e407fd65ff41fa162d171db173875afa823e213b472457d92067b82b5b7ced87d1397"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x4, 0x2, 0xfff, 0x9, 0x1f, 0x0, 0x400, 0x6, 0x2e, 0x4, 0x7f}}, &(0x7f0000000280)={0x20, 0x85, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x9d}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:48 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4600000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x5c2a00a0}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f00000003c0)={0x40, 0xe, 0x100, {0x100, 0x4, "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"}}, &(0x7f0000000240)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "a60e09008f9038d12b4a25aaeba8b80d2938cb07dea5b4a8944ab7f8a1e1810e701c7edb2c8a7ec5390449b7ba54fce552deba26db183c9b0e1e7f4008429b79256ebaae18e1822843795333d58198f2ec04b7ce260fc789e459fb66fd6d8358943574b5d1c9581cb698cce38aeae75b242e9ba988496ebe852a5906a7eec308a78de0b62d54828eea1cfcf62dcde9331057c9fd1d7e05c77ecf271c99d70d02a0b5b003cf51d1b4c66841c63d68602399c20f1c51af06a1418049e7a3c8266954020fc339b06645d6b01140887b9e007fb1b7dc"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000180)={0x0, 0x13, 0x5c, "9d7471004fd22b77c90b880e9df0fa3c4a49d5faad0df5407a379fb678071700820410aed957490d0cc2a5828a5e9447eb4e9b8ffa3ac859a78b4ba43d1fd70515077b09b43dc5b1f62cafd293698339231045324bed1597b3528266"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x0, 0x99, {0x97, "71a43d98ad697585b6289f9e8282afc2af698570b1361dba9c138a523d0bfdc2a2a1243c16f3c6599f09bc9e6ca3b94203c25c1c3a53fcdcefb6cbc135e5b33b5c4525d7dc99b25197598bc348ef0028c74a792942dedc05d10f892d283e5f403aa6917abb89fa693d6af74be7ce3152cab15bfdcefb7b5d214c1c7feaeca9576806cccc58e62b0634d89550aacdd831617577761c559f"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3188.604223][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3188.613677][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3188.621999][T15443] usb 3-1: Product: syz [ 3188.626219][T15443] usb 3-1: Manufacturer: syz 08:04:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4700000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:48 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3188.659194][T15443] usb 3-1: can't set config #1, error -71 [ 3188.669437][T15443] usb 3-1: USB disconnect, device number 25 08:04:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4800000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x8c8502a0}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:48 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3188.874234][T13196] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3188.881807][ T9010] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3189.034255][T15443] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3189.244275][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3189.255289][T13196] usb 1-1: config 1 interface 1 has no altsetting 0 [ 3189.264220][ T9010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3189.404290][T15443] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3189.415846][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3189.424945][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3189.433212][T13196] usb 1-1: Product: syz [ 3189.437453][ T9010] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3189.446673][T13196] usb 1-1: Manufacturer: syz [ 3189.451344][T13196] usb 1-1: SerialNumber: syz [ 3189.455961][ T9010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3189.463937][ T9010] usb 4-1: Product: syz [ 3189.469090][ T9010] usb 4-1: Manufacturer: syz [ 3189.473722][ T9010] usb 4-1: SerialNumber: syz [ 3189.584223][T15443] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3189.593273][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3189.601500][T15443] usb 3-1: Product: syz [ 3189.605791][T15443] usb 3-1: Manufacturer: syz [ 3189.610424][T15443] usb 3-1: SerialNumber: syz [ 3189.724240][T13196] usb 1-1: selecting invalid altsetting 0 [ 3189.730307][T13196] usb 1-1: selecting invalid altsetting 0 [ 3189.736268][T13196] cdc_ncm 1-1:1.0: bind() failure [ 3189.742068][T13196] usb 1-1: selecting invalid altsetting 0 [ 3189.747942][T13196] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 3189.754528][T13196] usb 1-1: selecting invalid altsetting 0 [ 3189.760456][T13196] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 3190.627098][T12154] udc-core: couldn't find an available UDC or it's busy [ 3190.634167][T12154] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3190.754222][T15443] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3190.760727][T15443] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3190.768188][T15443] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3190.834199][ T9010] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3190.842014][ T9010] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3190.966050][T15443] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3190.977575][T15443] usb 3-1: USB disconnect, device number 26 [ 3190.984461][T15443] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3191.040987][T20564] usb 4-1: USB disconnect, device number 70 [ 3191.047493][T20564] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 3191.648075][ T9010] usb 1-1: USB disconnect, device number 9 [ 3191.724174][T20564] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3192.084226][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:51 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:51 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x91000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:51 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:51 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4a00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:51 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d00000905820200020000000905679a0302000200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:51 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x0, 0x20, 0xf4, {0xf4, 0x4, "5b1e63c1ba6d14712fc625bd7754b7299f91b225acca96cf5180a1cb240bc3d840bfbf1a7603ba79f91d81f73ec4a1829076de04f49aa29830a5bd2728801c7f8344e36a9df0b4c34d146e3b1ffd25398237833545017ce152187fe7ec7cdeb8e413212d7c0e09c40127db19d8f7fda0b71e6261c4be33cbcde44c47307663871df4c28e4e08c7f2ce2da9775365002cb29e9b5d89056cd39f12444dd369c72b0ecb34bf0b0f2a69eb4c09cf395fdfe710873072c862a0e71213332a1e40e9afcab8982f43f580fa8d2ff9e3e5275a4f9eb224d8e4f480d16f6ba9a034ea3563cd7d206d8d8514feadf3cd3cafb233477001"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x9, 0x54, "dbed9e199c97615a572d1fd1817718cd9ed6e26814a28ca1f391b5d92bc15d6d6681b218ec3e309352b9434718d49b2ef1f9b3093775b17870596e9515bb47ae8363be4f39ae6a1a7bda95bf9bc9b92eaf05c3e6"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x8000, 0x7, 0x5ec, 0xffc0, 0xffff, 0x0, 0x8, 0x66a3, 0x3, 0x2, 0x4857, 0xff7f}}, &(0x7f0000000800)={0x20, 0x85, 0x4}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x8}, &(0x7f00000008c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000980)={0x20, 0x10, 0x53, {0x53, 0x21, "3c990c514332101f6330c00c03cfc3eb3e82b0e1518311d6b41b27627e3dfbf29b6ac6eaa55f830c174680e35c87f7fba24b5ed8fd85e85481c8907f7f467b722a342374041ba51dea3b7bb9f5e721774a"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x11, 0x40, "4a5ca56ee9dabc0ce1c6482634983e6d8319556d91df822210f41b7f8baba0bb7c131e71584f96750c94889234ffe7179cdecbba59d4c01b8308c3e1eed01129"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x4, 0x7, 0x100, 0x3, 0x0, 0x8, 0x101, 0xffffff80, 0x1, 0x10, 0x5, 0x3}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x7fff}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000c80)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6a, {0x6a, 0x22b54f9972ce9da6, "ae6d1199ec4e51ad8ae2f7a85ff4fe0d1479dfc2a32d6e1492e6295626328cee885996fefd0e854f89a3684d49eb9f88191a599966075f913d687a40c7bcbe7d33a09fea19aea1bb525a55491fb8c882f066f429fae687aa1f91495abddad82d7e151c4efec94efa"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0016870000006570fd208603473fcbf5caff7c8b25d172875b7e0eb2e08a63af3bc51fabea947ea1410f930104a2847d9df9f7c8eae3474944b8463bb79e6f1a368ab62120977a2326f52759ccae206dc8b340a4e94f8c795217791dd8d48415cbd368bdf37f63585cce796aec4f34c0cd9fee39489376900100e6242a0b3e157983b5ec8800c5e1c1dd000000"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0xf800, 0x8, 0x1, 0x3, 0x5, 0xc5a, 0x0, 0x8, 0x0, 0x80, 0x3f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000dc0)={0x14, &(0x7f0000000d40)={0x0, 0x477a415994b53fe5, 0x26, {0x26, 0x10, "c9a5e08b1c2955f485b95581b4bec6412d42e23de179e468d2aa3b061a5b209882ee1bca"}}, &(0x7f0000000d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e00)={0x20, 0x17, 0xfa, "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"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x8, 0x3f, 0xfffffffa, 0x7fff, 0xfff8, 0x7, 0x3, 0xfffff001, 0x6, 0x2, 0x8, 0x9}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001000)={0x20, 0x83, 0x2}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0xfffa}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3192.254257][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3192.263309][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3192.271809][T20564] usb 3-1: Product: syz [ 3192.276330][T20564] usb 3-1: Manufacturer: syz [ 3192.297047][T20564] usb 3-1: SerialNumber: syz [ 3192.314333][T20564] usb 3-1: can't set config #1, error -71 [ 3192.323697][T20564] usb 3-1: USB disconnect, device number 27 08:04:51 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:51 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4b00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:51 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x92000000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:51 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4c00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:51 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x60, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:52 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4d00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3192.554184][ T9010] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3192.561860][T13196] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3192.674764][T20564] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3192.924266][ T9010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3192.935269][T13196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3192.946193][ T9010] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x67, skipping [ 3193.034287][T20564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3193.124232][T13196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3193.133540][T13196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3193.141588][T13196] usb 4-1: Product: syz [ 3193.145881][ T9010] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3193.154935][T13196] usb 4-1: Manufacturer: syz [ 3193.159555][ T9010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3193.167611][T13196] usb 4-1: SerialNumber: syz [ 3193.172794][ T9010] usb 1-1: Product: syz [ 3193.177211][ T9010] usb 1-1: Manufacturer: syz [ 3193.182003][ T9010] usb 1-1: SerialNumber: syz [ 3193.204266][T20564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3193.213399][T20564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3193.221910][T20564] usb 3-1: Product: syz [ 3193.226338][T20564] usb 3-1: Manufacturer: syz [ 3193.231145][T20564] usb 3-1: SerialNumber: syz [ 3193.434560][T12243] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3194.104476][T12243] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3194.334238][T13196] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3194.340675][T13196] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3194.348292][ T9010] cdc_ncm 1-1:1.0: bind() failure [ 3194.354050][ T9010] cdc_ncm 1-1:1.1: bind() failure [ 3194.363234][T13196] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3194.364227][T20564] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3194.375561][T20564] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 3194.382915][T20564] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3194.536001][T11044] usb 1-1: USB disconnect, device number 10 [ 3194.555662][T13196] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3194.580059][T20564] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3194.601390][T20564] usb 3-1: USB disconnect, device number 28 [ 3194.607690][T20564] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3194.758552][T12245] udc-core: couldn't find an available UDC or it's busy [ 3194.765692][T12245] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3194.975555][T20564] usb 4-1: USB disconnect, device number 71 [ 3194.994264][T20564] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 3195.304274][T13196] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3195.344169][ T9010] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3195.664279][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3195.675262][T13196] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x67, skipping [ 3195.714287][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:04:55 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xa, 0xa5, {0xa5, 0xc, "cc6bb089bdb9871bd72e354333224ce6513785043a8d180e31cd7317df080f77c31d315d8347bb6b227c4462ac798e7e54b31545b70b8353fb50f3e3faa4755f01506f8b402e0d655e4702df271bd9b6b280f5b3bd0ccc646e48ae2153380a43ab8578bef636008688077fc040e74e8e9b27994167e0221f2a50b492557e3a63a5c5ffa4c62a35e2e9e886c800ad98b0d6ae1a0feda94e614baf87cba4198045d77005"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x0, 0x31, 0xa3, "f1be81819dbb6a546277c475461c09b9e8b698dd3fb0ce953a187232669c78070f1ee742ef682e8ff76eee4c27bfee4180d52ac57102cd488583304684d95703fcffe2c9a20eef09548407b78443b2dc8c0742d7177d105a1006a2625e4d7608542b146306b6c52c476479cb3753c9728a9d074843061db0ca48cbcbae7454a8cd1506130b087966f15b27d4f6628d5bec697666d7660da34910c827c23d0901489f41"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x4, 0x100, 0x0, 0x7, 0xfff, 0x3, 0x8000, 0x7a96, 0x8, 0x2, 0x0, 0x7fff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) 08:04:55 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa0002a5c}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:55 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x61, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4e00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:55 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x0, 0x20, 0xf4, {0xf4, 0x4, "5b1e63c1ba6d14712fc625bd7754b7299f91b225acca96cf5180a1cb240bc3d840bfbf1a7603ba79f91d81f73ec4a1829076de04f49aa29830a5bd2728801c7f8344e36a9df0b4c34d146e3b1ffd25398237833545017ce152187fe7ec7cdeb8e413212d7c0e09c40127db19d8f7fda0b71e6261c4be33cbcde44c47307663871df4c28e4e08c7f2ce2da9775365002cb29e9b5d89056cd39f12444dd369c72b0ecb34bf0b0f2a69eb4c09cf395fdfe710873072c862a0e71213332a1e40e9afcab8982f43f580fa8d2ff9e3e5275a4f9eb224d8e4f480d16f6ba9a034ea3563cd7d206d8d8514feadf3cd3cafb233477001"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x9, 0x54, "dbed9e199c97615a572d1fd1817718cd9ed6e26814a28ca1f391b5d92bc15d6d6681b218ec3e309352b9434718d49b2ef1f9b3093775b17870596e9515bb47ae8363be4f39ae6a1a7bda95bf9bc9b92eaf05c3e6"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x80, 0x1c, {0x8000, 0x7, 0x5ec, 0xffc0, 0xffff, 0x0, 0x8, 0x66a3, 0x3, 0x2, 0x4857, 0xff7f}}, &(0x7f0000000800)={0x20, 0x85, 0x4}, &(0x7f0000000840)={0x20, 0x83, 0x2}, &(0x7f0000000880)={0x20, 0x87, 0x2, 0x8}, &(0x7f00000008c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000980)={0x20, 0x10, 0x53, {0x53, 0x21, "3c990c514332101f6330c00c03cfc3eb3e82b0e1518311d6b41b27627e3dfbf29b6ac6eaa55f830c174680e35c87f7fba24b5ed8fd85e85481c8907f7f467b722a342374041ba51dea3b7bb9f5e721774a"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x11, 0x40, "4a5ca56ee9dabc0ce1c6482634983e6d8319556d91df822210f41b7f8baba0bb7c131e71584f96750c94889234ffe7179cdecbba59d4c01b8308c3e1eed01129"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x4, 0x7, 0x100, 0x3, 0x0, 0x8, 0x101, 0xffffff80, 0x1, 0x10, 0x5, 0x3}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x7fff}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000c80)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6a, {0x6a, 0x22b54f9972ce9da6, "ae6d1199ec4e51ad8ae2f7a85ff4fe0d1479dfc2a32d6e1492e6295626328cee885996fefd0e854f89a3684d49eb9f88191a599966075f913d687a40c7bcbe7d33a09fea19aea1bb525a55491fb8c882f066f429fae687aa1f91495abddad82d7e151c4efec94efa"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="0016870000006570fd208603473fcbf5caff7c8b25d172875b7e0eb2e08a63af3bc51fabea947ea1410f930104a2847d9df9f7c8eae3474944b8463bb79e6f1a368ab62120977a2326f52759ccae206dc8b340a4e94f8c795217791dd8d48415cbd368bdf37f63585cce796aec4f34c0cd9fee39489376900100e6242a0b3e157983b5ec8800c5e1c1dd000000"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0xf800, 0x8, 0x1, 0x3, 0x5, 0xc5a, 0x0, 0x8, 0x0, 0x80, 0x3f}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000dc0)={0x14, &(0x7f0000000d40)={0x0, 0x477a415994b53fe5, 0x26, {0x26, 0x10, "c9a5e08b1c2955f485b95581b4bec6412d42e23de179e468d2aa3b061a5b209882ee1bca"}}, &(0x7f0000000d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e00)={0x20, 0x17, 0xfa, "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"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x8, 0x3f, 0xfffffffa, 0x7fff, 0xfff8, 0x7, 0x3, 0xfffff001, 0x6, 0x2, 0x8, 0x9}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001000)={0x20, 0x83, 0x2}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0xfffa}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:55 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x2, 0x66, {0x66, 0x29, "928911eb81d70188db93c1d956e9ba18b09fd4f96c68ca53d0f9fea881924f0ad91424212f65c23fdb6626c6241de60ad26d8dfc6c246406d5d69ee57c4ab0af58a14b4ba1adf806be8853e9c42d6d587bbc93bd3bb914c36e44a7d40a36addf43b01141"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000100)={0x20, 0xa, 0xa8, "143ad7602f15188bc5e94075edf5d7d66b93918bb294d3c09d04177bc581c0ba367de11105ebcc5bf4e2298f3ccdc4933bc7ee705bc3c159218f18cb591b3a26d68a987883c4cbdfd247d8f094971a70ad59ac0f137f88c3c2b14ca1faa61a9486cf3f19731e3a34d05539da4bffa2e58d21eae2f8f286a597d0dbd6766b4e8334cae3211a49cf7432d036f036ed96a21d87b0e220bd45bcdd8ce4a137aeb69309c2a25db9be4018"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x101, 0x6, 0x6, 0x400, 0x5c, 0x401, 0xf8c, 0x586, 0x2, 0x8001, 0x400, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3195.864294][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3195.875358][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3195.886174][T13196] usb 1-1: Product: syz [ 3195.901846][T13196] usb 1-1: Manufacturer: syz [ 3195.906779][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3195.915850][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3195.923818][ T9010] usb 3-1: Product: syz [ 3195.928455][ T9010] usb 3-1: Manufacturer: syz [ 3195.954529][T13196] usb 1-1: can't set config #1, error -71 08:04:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x4f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3195.961458][ T9010] usb 3-1: can't set config #1, error -71 [ 3195.969589][T13196] usb 1-1: USB disconnect, device number 11 [ 3195.978891][ T9010] usb 3-1: USB disconnect, device number 29 08:04:55 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002858c}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:55 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x62, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5000000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:55 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x63, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:55 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5100000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3196.204239][ T382] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3196.334212][ T9010] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3196.341991][T13196] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3196.624308][ T382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3196.734317][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3196.745221][T13196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3196.794367][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3196.803425][ T382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3196.811761][ T382] usb 4-1: Product: syz [ 3196.816413][ T382] usb 4-1: Manufacturer: syz [ 3196.821003][ T382] usb 4-1: SerialNumber: syz [ 3196.924257][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3196.933392][T13196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3196.942490][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3196.950763][T13196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3196.958874][T13196] usb 1-1: Product: syz [ 3196.963056][ T9010] usb 3-1: Product: syz [ 3196.967385][T13196] usb 1-1: Manufacturer: syz [ 3196.972060][ T9010] usb 3-1: Manufacturer: syz [ 3196.976776][ T9010] usb 3-1: SerialNumber: syz [ 3196.981402][T13196] usb 1-1: SerialNumber: syz [ 3197.704259][T13196] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 3197.710298][T13196] cdc_ncm 1-1:1.0: bind() failure [ 3197.716342][T13196] cdc_ncm 1-1:1.1: bind() failure [ 3197.984194][ T382] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3197.990774][ T382] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3197.998281][ T382] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3198.154233][ T9010] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3198.160739][ T9010] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3198.168202][ T9010] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3198.215739][ T382] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3198.375212][ T9010] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3198.390440][ T9010] usb 3-1: USB disconnect, device number 30 [ 3198.396862][ T9010] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3198.420225][T12721] udc-core: couldn't find an available UDC or it's busy [ 3198.427309][T12721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3198.654851][T20564] usb 4-1: USB disconnect, device number 72 [ 3198.674204][T20564] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 3198.902952][T10606] usb 1-1: USB disconnect, device number 12 [ 3199.124167][ T9010] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3199.484249][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3199.664246][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3199.673310][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3199.681640][ T9010] usb 3-1: Product: syz [ 3199.685925][ T9010] usb 3-1: Manufacturer: syz [ 3199.690495][ T9010] usb 3-1: SerialNumber: syz 08:04:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x64, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002e000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x0, 0xf}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) r3 = dup3(r2, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x11, 0x9, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r1, 0x10, &(0x7f0000000740)={&(0x7f0000000640)=""/245, 0xf5, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0xd, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xb, 0x9, 0x3, 0x18, 0x8}, @call={0x85, 0x0, 0x0, 0xad}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0x9, 0x0, 0x1, 0xfffffffffffffff0, 0x18}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x41}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x22, r3, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x4, 0x1000}, 0x10, r5, r4}, 0x78) read$FUSE(r4, &(0x7f0000003000)={0x2020}, 0x2020) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000000)={0xc029, 0x2}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x0, 0xf}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x3c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x1, 0x4, 0x100000001}, 0x3c) dup3(r7, r6, 0x0) r8 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:59 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x3c, 0xb2, {0xb2, 0x9, "52ada5046558af63471fdaff92968d6c6ac18e24eb4efbed758afeb38c9fcd85e961aa5969a231dce27a91909ac6cf4c1d8d90b76f30be4fbfc212550a47f0fa4607dbdc4126dfe958c198e965c2372a517a74bd17944bff9cd6097cfc8dfa52b6690fc60f508c016267c08b165b428f90adf4949cea2bf2b1bae294e911fb5ba2f6f0c657ccc86551f6981d923925ebace58592b0821d18fdb48d5466e7d20666a172c52c870f645996435731a1a9ac"}}, &(0x7f00000000c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "c8701e87090fc76573f84bf71a3787c0ec2d4e5de014562917da2ec77e1f044324729c24e6e6f7faab2e48a5ad4bd7f5305d865970b5013f7fa3f2122a0c6872209e95bcadab28842af925aac4334b25beb3adfdce66a728c243dee0752d05947f81c73f7e915976545c584427e7198dfc74864fc618279e43ed204c5126005d88f3d79175742f48ee413cf2724e6c58d1e20617927f0aa3ce"}}, &(0x7f0000000180)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x4, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "624a680950047f2254ffb2db276e4ec8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xe7, 0xc6}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x4, 0x3, "0c33e9ed", "6bc84734"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x3f, 0x2, 0x1e, 0x0, 0x9}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0x84, "2ae8a9eabcea308cc1c38edaa0e2bf719f48427a4b29125236531e0aa76b2358215e06ee478b7e10e14c79738a7e91e5f80a8b5ea8bf8dd3fed17cd2ada5271b9c9dd3a476f7c815512b9ac8619c559e2ad4e1e153b29fb0cde20631c43ad83951da8be51cb225e9d5b3e8edfc85e24f88a40bbbce12f049dd8dc0ed43e515be98dd3d8e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, 0xfffffffffffffffd, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x260, 0x21}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "3c9b"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8f3f"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x107b}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x57}}) [ 3199.804206][ T9010] cdc_ncm 3-1:1.0: bind() failure [ 3199.810306][ T9010] cdc_ncm 3-1:1.1: bind() failure [ 3199.820443][ T9010] usb 3-1: USB disconnect, device number 31 08:04:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5300000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x65, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x21, 0x5e, {0x5e, 0x23, "7bf58c9bb55779ad10c4d8a9c782c2bd8962e1f0c4e0ca8afb215f1e44c295eff53edd0012e5220d554b92514fd7ae0fe1bb8ffa76e42d18153a9bce8c2bfe7149d5c19cecad180d2bc3da2c9626d60e8065586856f7631ac85430ab"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x40, 0x8, 0x47, "bf08fee10f670006f96e388d77cb1c7366675bcd90cdeb3cf6a4d6047789cda106b3219db8712a9503a649ac2ea5cd6c69a3b379a84b45375e1281c250100cf586b7939fe786ec"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x38, 0xffff, 0x10000, 0x6, 0x1, 0x7f, 0x0, 0x81, 0x6, 0x4, 0x8, 0x8}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x401}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xdf75}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:04:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5400000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xd0010100}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x66, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5500000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3200.044182][T10606] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3200.052020][T11044] usb 4-1: new high-speed USB device number 73 using dummy_hcd 08:04:59 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5600000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:04:59 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xeffdffff}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3200.324181][ T9010] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3200.404202][T10606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3200.415215][T10606] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 3200.434239][T11044] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3200.584341][T10606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3200.593694][T10606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3200.601806][T10606] usb 1-1: Product: syz [ 3200.606226][T11044] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3200.615748][T10606] usb 1-1: Manufacturer: syz [ 3200.620587][T10606] usb 1-1: SerialNumber: syz [ 3200.625517][T11044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3200.633487][T11044] usb 4-1: Product: syz [ 3200.638909][T11044] usb 4-1: Manufacturer: syz [ 3200.643504][T11044] usb 4-1: SerialNumber: syz [ 3200.714233][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3200.874560][T13250] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3200.884271][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3200.893471][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3200.901660][ T9010] usb 3-1: Product: syz [ 3200.905989][ T9010] usb 3-1: Manufacturer: syz [ 3200.910666][ T9010] usb 3-1: SerialNumber: syz [ 3201.524492][T13250] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 3201.764223][T10606] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3201.770767][T10606] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3201.778228][T10606] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3201.784229][T11044] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3201.790736][T11044] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3201.798207][T11044] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3201.975295][T10606] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3201.987227][T10606] usb 1-1: USB disconnect, device number 13 [ 3201.994093][T10606] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3201.995682][T11044] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3202.035388][ T9010] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3202.041837][ T9010] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3202.049443][ T9010] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3202.203085][T13196] usb 4-1: USB disconnect, device number 73 [ 3202.214363][T13196] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 3202.245732][ T9010] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3202.268699][ T9010] usb 3-1: USB disconnect, device number 32 [ 3202.275424][ T9010] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3202.734188][T28405] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3203.004157][ T2836] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3203.094311][T28405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3203.105468][T28405] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 08:05:02 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5700000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:02 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x67, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:02 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xf5ffffff}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:02 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)=@delchain={0x24, 0x2c, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x1, 0xffff}}}, 0x24}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:05:02 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xeffdffff}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3203.304223][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3203.313401][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3203.321727][T28405] usb 1-1: Product: syz [ 3203.326140][T28405] usb 1-1: Manufacturer: syz [ 3203.349093][T28405] usb 1-1: can't set config #1, error -71 [ 3203.375898][T28405] usb 1-1: USB disconnect, device number 14 [ 3203.394985][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:05:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0xffffffffffffffef}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:05:02 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x68, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:02 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xeffdffff}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:02 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5800000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:02 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xfffffdef}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3203.574453][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3203.583480][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3203.591553][ T2836] usb 3-1: Product: syz [ 3203.595759][ T2836] usb 3-1: Manufacturer: syz [ 3203.614271][ T2836] usb 3-1: can't set config #1, error -71 08:05:03 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xeffdffff}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:03 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x69, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:03 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5900000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3203.625690][ T2836] usb 3-1: USB disconnect, device number 33 08:05:03 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xa002e000}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:03 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xffffff7f}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3203.784252][T28405] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3203.984181][ T2836] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3204.154269][T28405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3204.334259][T28405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3204.343290][T28405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3204.344244][ T2836] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3204.351600][T28405] usb 1-1: Product: syz [ 3204.366339][T28405] usb 1-1: Manufacturer: syz [ 3204.371085][T28405] usb 1-1: SerialNumber: syz [ 3204.514293][ T2836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3204.523399][ T2836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3204.531613][ T2836] usb 3-1: Product: syz [ 3204.535826][ T2836] usb 3-1: Manufacturer: syz [ 3204.540450][ T2836] usb 3-1: SerialNumber: syz [ 3205.054678][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3205.504234][T28405] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3205.510669][T28405] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3205.518167][T28405] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3205.684218][ T2836] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3205.690654][ T2836] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3205.698338][ T2836] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3205.725733][T28405] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3205.737845][T28405] usb 1-1: USB disconnect, device number 15 [ 3205.744946][T28405] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3205.896403][ T2836] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3205.919621][ T2836] usb 3-1: USB disconnect, device number 34 [ 3205.925956][ T2836] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3206.484150][ T2836] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3206.654153][T28405] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3206.844261][ T2836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:05:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$printer(r1, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x40, 0xa, 0xe7, {0xe7, 0x6, "20b0beb4fa2877f0b31d0ea640b0801d68fe0b4a0e510eb4671dc23ca773a2040a4f9826bf3a262a3240876c63b7db0bb18a465ede46a5d1998ec0afa5f32a7807017dc703392ed41b1b823a19a0bdb28bd8832b31a8b3d68f41e0a4945ff550c67199b95669797eafddec6020b7c58212ae676df92077051ff6e9a7efcb6c22e7506f60dba68f85fd66d22186acb9fe5c5feeb8540dc9909b44b301ba4e0188102b2fa5619a958e9aaae891fbc161ed96b69a3010bad2593fa2494b5fb72979d77fad02673c44af8de28a3ed7812fc3dd2ee482f6642b9ca7e9cbed1d837c695d566bfcee"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000740)={0x20, 0x8, 0xff, "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"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x99, {0x97, "f9a96a4c9db2828cc9ad7ca6cd61ae49f6c9a916f49890a2d385ab43f6bb43bc016568651fbc452e89ff724739387f9bd913a2cad6042661983c7484c718ad2f55aa5fc9524890604bc981a7ccc6766f78127729d6903afa3ea23e1e389b9f79577d6e2e79e9bf870993fdd552cb7162da3c35175b1f557449251feee58f389b6c4d26647d48efd121a3fa7b54fec2ef1c6b2c003db88a"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x1, 0xe4, {0xe4, 0x23, "fbcd7df78d32d10d5dde974210de9555727b96a1072c8b2bf0dd3f478af35e60abd914870aa14dcac1f094bdc8ad1c1e452ec462f893991b85a6345f48abe54c355c7df07e9e0d29411daa8103c65e7e3b96ecf31cbde0489ef3626e756ddce85496da0d8859bdd299232d09251842922610c52a5efb5d52270bcc9e249a0e925aeb8d968001b7f8018802a8553705cd33609dbcaf3422340d27978b8df60d5c4a443af2435ada3a5fc51fd7690e9cc51887026038e43028814a4c4c2f108f0a92c2ffdd773150c3e2556de8199a1341ffd264b32014f9755e2b78a8a9ad8fd2063a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0xe61209e593fa3305, 0x8e, "0dcff1105c234df31fb9327e0466a1c8c13be5a62bb7689b06948f80298c44db06a160103ee0b291de4b47f3d21a710dab6efe4080e27c198003c649d3d915a6f3346c76189e8667ce8b7c27119edab207eba122a68b88cf66df19e1fb4db906a80d8f7e0c0849f7296367f334197c49224a1b6833cc0c5177630ea0bc1b84815c7017588c59295364ed2da9fc49"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x17}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x34}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x5, 0x20, 0x0, 0x1f, 0x2f, 0x6, 0x8a9f, 0xffff, 0x6, 0x4, 0xbd21, 0x9}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x7f}, &(0x7f0000000500)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:05:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6a, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3207.024667][T28405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3207.054249][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3207.063406][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3207.071734][ T2836] usb 1-1: Product: syz [ 3207.076080][ T2836] usb 1-1: Manufacturer: syz [ 3207.104292][ T2836] usb 1-1: can't set config #1, error -71 [ 3207.112206][ T2836] usb 1-1: USB disconnect, device number 16 08:05:06 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x69, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:06 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5a00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:06 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xfffffff5}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6b, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:06 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0xc592770f093c9518, 0x9, {0x9, 0xb, "f1c8f91ec62db1"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000000c0)={0x40, 0x14, 0x81, "d55a166e53c74cbcb18c2e0858901d096b5c052634a46149fcc680a07241f95e77839631c0c68dd7e4dc56a2520cb1ff362b88c0276fdf4eb16914a2d0ae07b849e31bfe7e2ede583df0674fe2d2802e77187f33833ac066348682786e71b86a5898c4266085ded1722e135fb1af686f4716c72a4427f4adffcda2ae998459800d"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x0, 0x424c, 0x8000, 0x8c5, 0x1ff, 0x1c, 0x6, 0x1, 0x1, 0x7, 0x20, 0x6}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xffff}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001700)={0x14, &(0x7f00000015c0)={0x20, 0x30, 0xe1, {0xe1, 0x2, "d025f60bbfe7083de346be473c7379756eabddfb981a44843e3ab5c6bf5387ee3d110304423aa4e81e1d30069e079e7eb70117f7c50bf025cd78e9a2bb1a92e3171b43211c068167b5876bbd9e918925ed80aa5fc32c65c3a0524b2231435d56f79a5948cb0729d2a8d8fd56be070d76fc1745c6ec6e923de85b349d0397e2c23f635e6dd80064b11a2fe4b5327dbeee87a6f91a9db970b49b36fd949262a6b8dbc4a6b9f1a3ce8f17575c8773ef913fed725dbd576f45b1e8a46973f6dcbe6e804c164996d2e1a92a06d4ddf4d1eb70c5a6fd0f7191fc4bf7e007e80e75b2"}}, &(0x7f00000016c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a40)={0x44, &(0x7f0000001740)={0x20, 0x6, 0xb7, "721584fbc3fe2aef0fe10939223c94ba25a27bb59d48eece1b6645bbde9f5e60c640a2ebcc9f0b74303bcff336f3bc34e903cc14355b431eba488d3a0a8dafcb732a70aeb8da3b93e2749c1b4444b1b6f9433319f440558f537d76d49b3f50a5363fb8800ec8c6c76a433dbb31a6b350115bc3ca0d0958d2623c8b03c71c10f5088c2a4d7374bec250c66599f9d2bd5a8c19ed06c50324ca23b94b419d42cd2442012c4920597b32801aee3d7b368093b920967121b4af"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001880)={0x20, 0x80, 0x1c, {0x9f9, 0x4, 0xfffff5d6, 0x3ff, 0x7, 0x7, 0x100, 0x10001, 0x8, 0x5, 0xe000, 0x8000}}, &(0x7f00000018c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000001980)={0x20, 0x83, 0x2}, &(0x7f00000019c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000001a00)={0x20, 0x89, 0x2, 0x1}}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001300)={0x14, &(0x7f0000001200)={0x20, 0x6, 0xb8, {0xb8, 0x3, "2a8963d0c86ba552a70c674778fc7915697053c7b653adfdecad90529ec6af6622212e49b5cb53fa04b3d6e9c07ac9388ea039f832252680b05a3b949b3c3f3d978e7286afcdc667037a25269cf6ac83a54d3dbb547c1e489373ca3aa51f89ad739e10253f26c9c5d2d749ccf77bd9647984be3bc650f9bf03cd11df90c9ecde04374ab903b4e698873f694987e1f51dc4a81a8a8b60079bdd87a3d8829a0db54fa80979c4a310dbdb5030b8a5f4d5b266d950cfc756"}}, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001540)={0x44, &(0x7f0000001340)={0x0, 0x17, 0x16, "62ff790e80b08e649a401801f4271d4468e393307024"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001400)={0x20, 0x80, 0x1c, {0x4, 0x7ff, 0x292, 0x100, 0x7, 0x6, 0x6, 0x8376, 0x0, 0xfffd, 0x40, 0x20}}, &(0x7f0000001440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000001480)={0x20, 0x83, 0x2}, &(0x7f00000014c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001500)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000f00)={0x14, &(0x7f0000000500)={0x40, 0x2, 0xbd, {0xbd, 0x22, "4715e7fbabb47db7837eb614835adf1c229aca0091fea4596d9ed2fab201da4cfe592d386f76000b648a13ba4a5c568575b40eb4e984647fe4298fe159300233ef4075e137fb669a9a1020a2b9f3a63168346f73ca0bc55f13e996a833f3bb335c232e3f0755e906d1086c2929da399fa7943d0c542be763f6e133fc909b758655021c7b98f8925807c63941f0b5fd991ccd4013673f9312ed8d98570de573a4f602e35da86752c4dd6400735ceaf37156f8aafe5914126462f0a5"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x20, 0x14, 0x6d, "e52d1575a0f68eb416f4450c8869d52a635fe269b6a5479bb0a521862dd92cebee82bfe5edd4820aa4aed1bb4027e9bdbe9bfddf5c97f5ab9d4aa728c5b576151a97d8867e21678206c7e1b454f655c3f9580935004935bc72b0271a9d6c42c030a1a5d29d8a896211b0fec42c"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0xb6}, &(0x7f0000001000)={0x0, 0x8, 0x1}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x1, 0x8, 0x96, 0x8000, 0x6, 0x20, 0x4, 0x2, 0x9, 0x1000, 0x7, 0x8000}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x1f}, &(0x7f00000010c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001100)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000001140)={0x20, 0x89, 0x2, 0x1}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000009c0)={0x14, &(0x7f0000000900)={0x40, 0x10, 0x3b, {0x3b, 0xb, "fc0d3de2ca3d75f9138d8906b4bc929a8b9054694cb59bd663c4c3000dfde70c83cf54fda300c06997a4dbfdd9ec326a263866f2178e4c300c"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a00)={0x40, 0x0, 0xee, "78c1e336b62b9c6924b5743d405d32afcf0b516857978a4b90be10400fcfc31e5d1bb04c74fce8894d327f132f0757b069561bf79f26831a26bcfbfc4cd0e010077ec7d7ba646a0862af0dfc4e61b1a7ee79351ba71167c59a60c5c36632748f926a4d863adb5fed6ad19884a9be0f8c79f0dbddec2ad0a026c95c0e3cd41aca743111b0185d3dd3557234ba961a9e136a07b07ed6ac5a3027898c70eed19c97681d6639388331dfa476a6c0428c213b9af59574f3516a94eb2579c2d7469f1fd4493cbb6c55fcd7b4c84e542ed24f8f4d042d7f697ce9227315e51d51acb3ce202846cd15d35bec743af36bcb2e"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x0, 0xa5e, 0x3, 0x9, 0x300, 0x3ff, 0x28, 0x401, 0x5, 0x5, 0x5, 0xdb8a}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x101}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0xfffe}, &(0x7f0000000c80)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000640)={0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x40, 0x15, 0x11, "a82bd2564f3d97773b582d8db1fd11757a"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xe6}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x1, 0x61dd, 0x9, 0x7e8, 0x878, 0x8, 0x4, 0xffff8000, 0x3, 0x472, 0x1000, 0x7}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3207.214208][T28405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3207.223465][T28405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3207.231797][T28405] usb 3-1: Product: syz [ 3207.236142][T28405] usb 3-1: Manufacturer: syz [ 3207.254214][T28405] usb 3-1: can't set config #1, error -71 08:05:06 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x69, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:06 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5b00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3207.278954][T28405] usb 3-1: USB disconnect, device number 35 08:05:06 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6c, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:06 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x69, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:06 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0xffffffff}], 0x92, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3207.474261][ T2836] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3207.654206][T28405] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3207.854230][ T2836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3208.024261][T28405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3208.024298][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3208.044659][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.052636][ T2836] usb 1-1: Product: syz [ 3208.056799][ T2836] usb 1-1: Manufacturer: syz [ 3208.061376][ T2836] usb 1-1: SerialNumber: syz [ 3208.194247][T28405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3208.203370][T28405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.211629][T28405] usb 3-1: Product: syz [ 3208.215915][T28405] usb 3-1: Manufacturer: syz [ 3208.220522][T28405] usb 3-1: SerialNumber: syz [ 3208.974525][T14655] udc-core: couldn't find an available UDC or it's busy [ 3208.981935][T14655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3209.264185][ T2836] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3209.270704][ T2836] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3209.278169][ T2836] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3209.354234][T28405] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3209.360660][T28405] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3209.368172][T28405] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3209.475594][ T2836] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3209.487866][ T2836] usb 1-1: USB disconnect, device number 17 [ 3209.494098][ T2836] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3209.565818][T28405] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3209.765306][T14667] udc-core: couldn't find an available UDC or it's busy [ 3209.772262][T14667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3209.984500][T14667] udc-core: couldn't find an available UDC or it's busy [ 3209.991580][T14667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3210.244195][ T2836] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3210.368355][T10606] usb 3-1: USB disconnect, device number 36 [ 3210.394216][T10606] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3210.634294][ T2836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 08:05:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="1201030109025c0002010000000904000001020d000000f4ff0c240f0100000000000000000006241a000000090581a45320b10db6cc950100d3dd5192000904010102020d0000090582020802000002000200"/96], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:05:10 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5c00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6d, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:10 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:10 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x3c, 0xb2, {0xb2, 0x9, "52ada5046558af63471fdaff92968d6c6ac18e24eb4efbed758afeb38c9fcd85e961aa5969a231dce27a91909ac6cf4c1d8d90b76f30be4fbfc212550a47f0fa4607dbdc4126dfe958c198e965c2372a517a74bd17944bff9cd6097cfc8dfa52b6690fc60f508c016267c08b165b428f90adf4949cea2bf2b1bae294e911fb5ba2f6f0c657ccc86551f6981d923925ebace58592b0821d18fdb48d5466e7d20666a172c52c870f645996435731a1a9ac"}}, &(0x7f00000000c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "c8701e87090fc76573f84bf71a3787c0ec2d4e5de014562917da2ec77e1f044324729c24e6e6f7faab2e48a5ad4bd7f5305d865970b5013f7fa3f2122a0c6872209e95bcadab28842af925aac4334b25beb3adfdce66a728c243dee0752d05947f81c73f7e915976545c584427e7198dfc74864fc618279e43ed204c5126005d88f3d79175742f48ee413cf2724e6c58d1e20617927f0aa3ce"}}, &(0x7f0000000180)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x4, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "624a680950047f2254ffb2db276e4ec8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xe7, 0xc6}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x4, 0x3, "0c33e9ed", "6bc84734"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x3f, 0x2, 0x1e, 0x0, 0x9}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0x84, "2ae8a9eabcea308cc1c38edaa0e2bf719f48427a4b29125236531e0aa76b2358215e06ee478b7e10e14c79738a7e91e5f80a8b5ea8bf8dd3fed17cd2ada5271b9c9dd3a476f7c815512b9ac8619c559e2ad4e1e153b29fb0cde20631c43ad83951da8be51cb225e9d5b3e8edfc85e24f88a40bbbce12f049dd8dc0ed43e515be98dd3d8e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, 0xfffffffffffffffd, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x260, 0x21}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "3c9b"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8f3f"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x107b}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x57}}) 08:05:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000007c0)={0x24, &(0x7f0000000580)={0x0, 0x6, 0xb0, {0xb0, 0x7, "36eccf007dd120e0052bfe3d16fdbe9cc649a684e6d71ad832c82e6502b9fe98057e8f39710de9e15193488cabe6dda5d3d0f893f74e9911fb1961cb307f328f9af3765ac2d00c0cd0d8c5682172f5eb2f9cf48ab0f28f9063264d994dd07d07633bac32d6838e762466da31e6f469ef6efe6bba011231ad4543cf5b7df34d131da8b3efb077a45212c06b51815d02ca51649ea3fe75fba3e5de374e1c429802d988ec751e7cff81546e374f5124"}}, &(0x7f0000000640)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "20c6b9353ad3787332d777246e41ee0b310194b9d6182220c211bb6505624a37310d7d99fe618b2a49400d566514a5030655bf60887365b2b895a2c7ca2a1ce9669329030dc718cfbfe9ca1aa2b2423deb1707c91c1b70c4f99da8493ab0d98d274a03f32fb66ed686a5453ad73e3653fa7aa9a49de43ac9c8a5f184c2d85a06d450fc099b4626766376f4c08b7b3fa36a4b5359eaf17cd0da842f51676186882902af2ecce7062e5e0f807a506ca274319f3b0bdfcc8253d98e15360f8884b64fcdf9b71a686d83d70484e97ecfa72221f4c4cc8307b533d3"}}, &(0x7f0000000740)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "a8caeacc"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x56a}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000800)={0x40, 0x31, 0xf5, "2f1284c8c01ef4486384bddc444334f87c4a24de4546e5f2840883b4946859348862ce25d13252599417372a05490622b04947f6530fcdd80af6a1e3852a15bf698084b6be9ece2d5ea5cfc9617ad2332926e16cef64c295734f4beb1ebccbc260ae5940b922a26788a7f80bcee3d985f0002a4186b3ea17944b96480228ce5f40f6e9e00b592817b85c652cf002e5a83188dc7652689c46c6bd8754318606fa239033f8e643455cce1d409912265a08b9143da8fbe856928cad3b8e18be285cb7db09adb0f92fbde229bd4ec83a19708dd5c79d68816452f90ff088f291b5ed24ad52809053eeddb4b9f48d7d26176043cd8de05a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x2f}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x1, 0xb4, "1cf02a842db91d0ec9e22ca6dc57c8971b9ce89677a1669034f3ac9cce5ce44a96c743f54e59e7523766cf2f2b48ac5c1f4f94f196f1bf177b678221329eb52ea361f29af1606377a6f1cef4a354fc29f1764652cde6bed4937b66ed003f048cb2767efb79b196234fca485c5f0fe46b0262b0beedbb9e0fd53898e5797390f33f498dde5f75b33269bcf8634ebd01b0cb43f3325b0fa869db1aed724ea44d3b4c054590016e60e158d00aee5246a2cf6de98b96"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0xc1}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x11, 0xe9, {0xe9, 0x0, "c2933a25163f769ab09a4bf49e0347a2b017f08cde51ecf4416dd7713786101046ec5b4fded65c5662255d98d3570446f071e054f82900a90fde761a88aecfa726847a79e226ca87c96fa708a27216e67bc5b88edc647cf7c93b5078b6f96639e482c9ff71c4f90ad0ee1dbdc930bb4886c32a3ffee7b72619478d427682b3e8d076a839d5121cde0e161c8078dbd00a633cc561771ccd398bfab61865604a9d9c7654c58b36e6ed3898b1dcdef722a2a0584985220fd669aa87672e3c18a16f0a54f6c38c830b0800993fefcbc340548844168afcb165d5e21ae948daadd66cd371b75c0b50e0"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000ac0)={0x40, 0xe, 0x79, "5e085a8072d83d148b184f3c1f2d8bf4c7659281207ba39b23348bf2291dfdd39df514df3823b639c2b9515a70ef046c026147681a496828f0090378d80b006d4c66eebe4a02ce103fb4be69a294dc7d828eb8e99f446d430593a361719b5d7836aecc29969bffcbeb265cbba320865368594f8eeda681168c"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x6, 0x9, 0x8b, 0x9, 0xb72, 0x6, 0x5a, 0x20, 0x8, 0x943c, 0x1, 0x8000}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x7f}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3210.814218][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3210.823296][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3210.831683][ T2836] usb 1-1: Product: syz [ 3210.836076][ T2836] usb 1-1: Manufacturer: syz [ 3210.856388][ T2836] usb 1-1: can't set config #1, error -71 08:05:10 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5d00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6e, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3210.864658][ T2836] usb 1-1: USB disconnect, device number 18 08:05:10 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x3, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:10 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5e00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:10 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6f, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:10 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5f00000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3211.064266][ T9010] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3211.071964][T28405] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 3211.224198][ T2836] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 3211.434234][ T9010] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3211.447366][T28405] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3211.514166][ T2836] usb 1-1: device descriptor read/64, error 18 [ 3211.614258][T28405] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3211.623359][ T9010] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3211.632522][T28405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.640861][ T9010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.649033][T28405] usb 4-1: Product: syz [ 3211.653341][ T9010] usb 3-1: Product: syz [ 3211.657733][T28405] usb 4-1: Manufacturer: syz [ 3211.662365][ T9010] usb 3-1: Manufacturer: syz [ 3211.667155][T28405] usb 4-1: SerialNumber: syz [ 3211.671759][ T9010] usb 3-1: SerialNumber: syz [ 3211.924157][ T2836] usb 1-1: device descriptor read/64, error 18 [ 3212.194165][ T2836] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 3212.494207][ T2836] usb 1-1: device descriptor read/64, error 18 [ 3212.804264][T28405] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3212.810753][ T9010] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3212.817224][T28405] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3212.824701][ T9010] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3212.832113][T28405] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3212.837796][ T9010] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3212.894203][ T2836] usb 1-1: device descriptor read/64, error 18 [ 3213.014240][ T2836] usb usb1-port1: attempt power cycle [ 3213.015810][T28405] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3213.032672][ T9010] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3213.224357][T11044] usb 3-1: USB disconnect, device number 37 [ 3213.230955][T28405] usb 4-1: USB disconnect, device number 74 [ 3213.236962][T11044] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3213.245542][T28405] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 3213.434199][ T2836] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 3213.524570][ T2836] usb 1-1: Invalid ep0 maxpacket: 0 [ 3213.674185][ T2836] usb 1-1: new high-speed USB device number 22 using dummy_hcd 08:05:13 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x0, 0x10, {0x10, 0x1, "98680bfe624a170f644416153c6d"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x40, 0x7, 0x73, "013acc15b9eb7def90d435a12b46b876be86567c0f6e92632c88ef82ebe289199b9985ee837754a22cced43ed139296512e0e0bf0da14f96cdc2108543335fdab11760a83992efaf932e4c0b27dc33cb8b8dcde3777693567ca0a600c659caca646b469dab2deeb7c3a4073637670897103658"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x100, 0xffff, 0x1, 0x1, 0x3, 0x6, 0x7fff, 0x2, 0xfffb, 0x5, 0x90a}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000280)={0x20, 0x83, 0x2}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0xffff}, &(0x7f0000000300)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:05:13 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x4, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:13 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x70, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:13 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x6000000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:13 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x3c, 0xb2, {0xb2, 0x9, "52ada5046558af63471fdaff92968d6c6ac18e24eb4efbed758afeb38c9fcd85e961aa5969a231dce27a91909ac6cf4c1d8d90b76f30be4fbfc212550a47f0fa4607dbdc4126dfe958c198e965c2372a517a74bd17944bff9cd6097cfc8dfa52b6690fc60f508c016267c08b165b428f90adf4949cea2bf2b1bae294e911fb5ba2f6f0c657ccc86551f6981d923925ebace58592b0821d18fdb48d5466e7d20666a172c52c870f645996435731a1a9ac"}}, &(0x7f00000000c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "c8701e87090fc76573f84bf71a3787c0ec2d4e5de014562917da2ec77e1f044324729c24e6e6f7faab2e48a5ad4bd7f5305d865970b5013f7fa3f2122a0c6872209e95bcadab28842af925aac4334b25beb3adfdce66a728c243dee0752d05947f81c73f7e915976545c584427e7198dfc74864fc618279e43ed204c5126005d88f3d79175742f48ee413cf2724e6c58d1e20617927f0aa3ce"}}, &(0x7f0000000180)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x4, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "624a680950047f2254ffb2db276e4ec8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xe7, 0xc6}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x4, 0x3, "0c33e9ed", "6bc84734"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x3f, 0x2, 0x1e, 0x0, 0x9}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0x84, "2ae8a9eabcea308cc1c38edaa0e2bf719f48427a4b29125236531e0aa76b2358215e06ee478b7e10e14c79738a7e91e5f80a8b5ea8bf8dd3fed17cd2ada5271b9c9dd3a476f7c815512b9ac8619c559e2ad4e1e153b29fb0cde20631c43ad83951da8be51cb225e9d5b3e8edfc85e24f88a40bbbce12f049dd8dc0ed43e515be98dd3d8e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, 0xfffffffffffffffd, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x260, 0x21}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "3c9b"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8f3f"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x107b}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x57}}) [ 3213.784253][ T2836] usb 1-1: Invalid ep0 maxpacket: 0 [ 3213.808193][ T2836] usb usb1-port1: unable to enumerate USB device [ 3213.984183][T28405] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3214.094234][T10606] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 3214.164162][ T2836] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 3214.344222][T28405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3214.514245][T28405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3214.514256][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3214.534201][T28405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.542181][T28405] usb 3-1: Product: syz [ 3214.546484][T28405] usb 3-1: Manufacturer: syz [ 3214.551168][T28405] usb 3-1: SerialNumber: syz 08:05:14 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x6100000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x71, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:14 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x5, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0xa4, 0x41, 0xc1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:05:14 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x5, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3214.664508][T28405] cdc_ncm 3-1:1.0: bind() failure [ 3214.671279][T28405] cdc_ncm 3-1:1.1: bind() failure [ 3214.679327][T28405] usb 3-1: USB disconnect, device number 38 [ 3214.684274][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3214.706969][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:05:14 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x6200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) [ 3214.715182][T10606] usb 4-1: Product: syz [ 3214.719376][T10606] usb 4-1: Manufacturer: syz [ 3214.725298][T10606] usb 4-1: SerialNumber: syz [ 3214.734242][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3214.743263][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.751359][ T2836] usb 1-1: Product: syz [ 3214.755576][ T2836] usb 1-1: Manufacturer: syz 08:05:14 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x6, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:14 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x72, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3214.766092][ T2836] usb 1-1: SerialNumber: syz [ 3215.044196][T28405] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3215.294208][T28405] usb 3-1: Using ep0 maxpacket: 16 [ 3215.414202][T28405] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3215.474260][T28405] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3215.481875][T28405] usb 3-1: can't read configurations, error -71 [ 3215.864250][T10606] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3215.870711][T10606] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3215.878455][T10606] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3215.954602][ T2836] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3215.961039][ T2836] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3215.968586][ T2836] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3216.085178][T10606] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3216.174158][T28405] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3216.176028][ T2836] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3216.204267][ T2836] usb 1-1: USB disconnect, device number 23 [ 3216.210411][ T2836] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 3216.302154][ T382] usb 4-1: USB disconnect, device number 75 [ 3216.308681][ T382] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 3216.444149][T28405] usb 3-1: Using ep0 maxpacket: 16 [ 3216.574187][T28405] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3216.634181][T28405] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3216.641852][T28405] usb 3-1: can't read configurations, error -71 [ 3216.648268][T28405] usb usb3-port1: attempt power cycle [ 3216.924213][ T2836] usb 1-1: new high-speed USB device number 24 using dummy_hcd 08:05:16 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x7, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:16 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x6300000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:16 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x73, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:16 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x9, 0xfd, {0xfd, 0xc, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x40, 0x16, 0xbc, "9ea2fc4453584747287cddf2467210dbe7f57790c72cff022721925fed2dc0ff925f780b78678dbe74e9ba810861c9f27a5bb09dd951e3f9cc415e848f8d027019c54c069af32966b24f19cdbf8c97fbcd22030a3cf2b9e9857fe2d8e70e8c455e6164d75f213b5a85d3dd8c08ec7b348591ab84f1bd68f82709997043ce43f722c76ac24305338e94f3613d9ea4c601fe74b562d7d87419fe0eeb0f75927703e1b78c510b9600c7a4b56f8cc453130390d1b27bbab9d4c1c825a444"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xc3, 0x8, 0x6, 0x8, 0x3f, 0x9326, 0x3, 0x8000, 0x8, 0x5, 0x5, 0x4}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x9427}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 08:05:16 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x3c, 0xb2, {0xb2, 0x9, "52ada5046558af63471fdaff92968d6c6ac18e24eb4efbed758afeb38c9fcd85e961aa5969a231dce27a91909ac6cf4c1d8d90b76f30be4fbfc212550a47f0fa4607dbdc4126dfe958c198e965c2372a517a74bd17944bff9cd6097cfc8dfa52b6690fc60f508c016267c08b165b428f90adf4949cea2bf2b1bae294e911fb5ba2f6f0c657ccc86551f6981d923925ebace58592b0821d18fdb48d5466e7d20666a172c52c870f645996435731a1a9ac"}}, &(0x7f00000000c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "c8701e87090fc76573f84bf71a3787c0ec2d4e5de014562917da2ec77e1f044324729c24e6e6f7faab2e48a5ad4bd7f5305d865970b5013f7fa3f2122a0c6872209e95bcadab28842af925aac4334b25beb3adfdce66a728c243dee0752d05947f81c73f7e915976545c584427e7198dfc74864fc618279e43ed204c5126005d88f3d79175742f48ee413cf2724e6c58d1e20617927f0aa3ce"}}, &(0x7f0000000180)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x4, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "624a680950047f2254ffb2db276e4ec8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xe7, 0xc6}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x4, 0x3, "0c33e9ed", "6bc84734"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x3f, 0x2, 0x1e, 0x0, 0x9}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x9, 0x84, "2ae8a9eabcea308cc1c38edaa0e2bf719f48427a4b29125236531e0aa76b2358215e06ee478b7e10e14c79738a7e91e5f80a8b5ea8bf8dd3fed17cd2ada5271b9c9dd3a476f7c815512b9ac8619c559e2ad4e1e153b29fb0cde20631c43ad83951da8be51cb225e9d5b3e8edfc85e24f88a40bbbce12f049dd8dc0ed43e515be98dd3d8e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, 0xfffffffffffffffd, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x260, 0x21}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "3c9b"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "8f3f"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x107b}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x57}}) 08:05:16 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x38, &(0x7f0000000480)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x24, 0xb2, {0xb2, 0xa, "5ed6f5a3e84af3189f705e9c01bfb891583356965426bea30db780ae44afd9e7855b19e85b8b6e9b22fdbb4e0f84e37fa7a4cebe7326fe8155697902a1daed878c191316a4fd35f1c5d966ba59022a41f310b0f757ba3ceda00951798ff17c087473c6ed381ed2c8f83fb4fac552bf751a23b4cd85982ef4487979483734c28970227df0060fa493a2a3ff9c49948149a884196c3a3caa1c31c06c15b9266393b56b22851c85e46b3e4e5dcf309740ad"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0xf, 0x8e, "12e4297e56cc5dcf9e8c74b98fe3a0b5306917c954c16ada17bcff7fb91d75330e7ebf4406218bc60a66292ba22947802bbcc4ffb30787a05671da7dbc12e51e738d680ab0ade64d05f20b1138552734ebe61bd120796ddd97282157dd36e6e3d7d0fab795fb920651d19e89aea546f67ff390b8d288cff9fc811b368eac6ea9da5411c87021f2fc6620d9b02790"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xc7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x0, 0x5, 0x2, 0x80, 0x1, 0x20, 0x9, 0x0, 0x2254, 0x3, 0x2953, 0x7}}, &(0x7f0000000840)={0x20, 0x85, 0x4}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000900)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0xe5, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x1f, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x40}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x6, 0x6, 0x40}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x3, "62fb786a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x7d, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x81, 0x3, 0x6, 0x4, 'g1', "3c1d"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1b2b, 0x7ff, 0xd3, "640f6a162c7b2b184e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x0, "c939e8dfa4c8aaebee"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x54, 0x4, 0xaf, 0x1, "", "95"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xfffc, 0x8, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x4, 0xb4, {0x7, 0x25, 0x1, 0x82, 0xfb, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x20, 0x1}, @as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x64, 0x2, 0x7c, 0x4, "e0", "ea1183"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x6, 0x2, {0x7, 0x25, 0x1, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x310, 0x4, 0x1, 0x8, 0x8, 0x8}, 0x5, &(0x7f0000000b00)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x0, 0xab, {0xab, 0x30, "2397a86cdf67d7aee5378d90499ec6ca87fa7fa9ad99f0ffc59f51f595edcfee186459eea918de736cabf3c4df013097586ae72fb6273f70b76850befb8838c6b3c422d47290762c5c22f5b6eca45e9407759b4039a65dd763ffbf6cd59f113910d933b95058e1090c1f839ef95364de8ed7e4ac8991d747d10c3c8d6a2f4cabdd6962c6167d034c143717eaeb52ecfd44bc1a1877135c2826eb6d5582771bb0c7c14b27c20774e235"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x40, 0x12, 0x8d, "80dfd61a41d0ba9135ffd8703fea2342654742e32718897cb453139f8a96de4f70780beb1a65381e71a0219959baf8feeac836e6cccf095f71581043c9c5ddc3f1aa2c9b4e78d3c8b11bfa1d118189e3fe8653a679d0f2c6298869fed0294b22c9bcf288e0faeb146600d26443ceb165d5d70f9cd503611c3464a4dc3fb272ce49adec5c0ad3648e262fc075e5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1f, 0x4, 0x0, 0x7fff, 0x1f, 0x3, 0xff, 0xffffffff, 0xa09, 0x3, 0x1000, 0xfffb}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1ff}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001940)={0x14, 0x0, &(0x7f0000001900)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 3217.444266][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3217.453291][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.461521][ T2836] usb 1-1: Product: syz [ 3217.466134][ T2836] usb 1-1: Manufacturer: syz [ 3217.470757][ T2836] usb 1-1: SerialNumber: syz [ 3217.514241][ T2836] usb 1-1: can't set config #1, error -71 [ 3217.520814][ T2836] usb 1-1: USB disconnect, device number 24 08:05:17 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x74, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:17 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x6400000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:17 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x8, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:17 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x6500000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=ANY=[], 0x10}}], 0x1, 0x0, 0x0) 08:05:17 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x75, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 08:05:17 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) open(0x0, 0x141042, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x9, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 3217.764217][T10606] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 3217.794265][T28405] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3217.914190][ T2836] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 3218.014306][T28405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3218.144265][T10606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3218.194361][T28405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3218.203502][T28405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3218.211749][T28405] usb 3-1: Product: syz [ 3218.215971][T28405] usb 3-1: Manufacturer: syz [ 3218.220607][T28405] usb 3-1: SerialNumber: syz [ 3218.304240][ T2836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3218.315295][T10606] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3218.324432][T10606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3218.332422][T10606] usb 4-1: Product: syz [ 3218.336661][T10606] usb 4-1: Manufacturer: syz [ 3218.341339][T10606] usb 4-1: SerialNumber: syz [ 3218.484258][ T2836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3218.493294][ T2836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3218.501434][ T2836] usb 1-1: Product: syz [ 3218.505725][ T2836] usb 1-1: Manufacturer: syz [ 3218.510316][ T2836] usb 1-1: SerialNumber: syz [ 3219.364251][T28405] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3219.370670][T28405] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3219.378341][T28405] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 3219.394522][T16524] udc-core: couldn't find an available UDC or it's busy [ 3219.401552][T16524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3219.474246][T10606] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3219.480786][T10606] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3219.488517][T10606] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 3219.577266][T28405] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 3219.590921][T28405] usb 3-1: USB disconnect, device number 41 [ 3219.600113][T28405] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 3219.634269][ T2836] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3219.642586][ T2836] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3219.650433][ T2836] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 3219.696662][T10606] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 3219.724266][ C1] skbuff: skb_over_panic: text:ffffffff830a6c8f len:184 put:172 head:ffff888156191400 data:ffff888156191400 tail:0xb8 end:0x80 dev: [ 3219.738519][ C1] ------------[ cut here ]------------ [ 3219.743956][ C1] kernel BUG at net/core/skbuff.c:110! [ 3219.749429][ C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 3219.755659][ C1] CPU: 1 PID: 16978 Comm: dhcpcd-run-hook Not tainted 5.10.77-syzkaller-01258-g76698ea35fd3 #0 [ 3219.766071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3219.776115][ C1] RIP: 0010:skb_panic+0x14f/0x160 [ 3219.781119][ C1] Code: 87 85 48 8b 75 c0 48 8b 55 b8 8b 4d d4 44 8b 45 d0 4c 8b 4d c8 b8 00 00 00 00 53 41 56 41 55 41 54 e8 8c 4d 89 fd 48 83 c4 20 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 41 [ 3219.800703][ C1] RSP: 0018:ffffc9000015fee8 EFLAGS: 00010286 [ 3219.806744][ C1] RAX: 0000000000000087 RBX: ffffffff85873b60 RCX: 716d263ce4ab1a00 [ 3219.814693][ C1] RDX: 0000000000000703 RSI: 0000000000000703 RDI: 0000000000000000 [ 3219.822642][ C1] RBP: ffffc9000015ff30 R08: ffffffff81545288 R09: ffffed103ee295d8 [ 3219.830681][ C1] R10: ffffed103ee295d8 R11: 0000000000000000 R12: ffff888156191400 [ 3219.838632][ C1] R13: 00000000000000b8 R14: 0000000000000080 R15: dffffc0000000000 [ 3219.846585][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 3219.855502][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3219.862072][ C1] CR2: 00007fd0adbaa9ee CR3: 00000001139dd000 CR4: 00000000003526a0 [ 3219.870037][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3219.878117][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3219.886070][ C1] Call Trace: [ 3219.889336][ C1] [ 3219.892334][ C1] ? cdc_ncm_fill_tx_frame+0x127f/0x3d50 [ 3219.897975][ C1] ? cdc_ncm_fill_tx_frame+0x127f/0x3d50 [ 3219.903586][ C1] skb_over_panic+0x2c/0x30 [ 3219.908071][ C1] ? cdc_ncm_fill_tx_frame+0x127f/0x3d50 [ 3219.913699][ C1] skb_put+0x205/0x210 [ 3219.917760][ C1] cdc_ncm_fill_tx_frame+0x127f/0x3d50 [ 3219.923205][ C1] cdc_ncm_tx_fixup+0x98/0xf0 [ 3219.927901][ C1] usbnet_start_xmit+0x111/0x1a60 [ 3219.932912][ C1] ? validate_xmit_skb+0x62d/0xc40 [ 3219.938025][ C1] ? save_stack+0x96/0x1e0 [ 3219.942426][ C1] xmit_one+0x16a/0x480 [ 3219.946571][ C1] dev_hard_start_xmit+0xad/0x1c0 [ 3219.951599][ C1] sch_direct_xmit+0x28f/0x9b0 [ 3219.956357][ C1] ? asan.module_dtor+0x20/0x20 [ 3219.961189][ C1] __qdisc_run+0x245/0x3e0 [ 3219.965619][ C1] ? sch_direct_xmit+0x9b0/0x9b0 [ 3219.970601][ C1] __dev_queue_xmit+0xe7e/0x2ac0 [ 3219.975549][ C1] ? dev_queue_xmit+0x20/0x20 [ 3219.980220][ C1] ? __local_bh_enable_ip+0xa8/0x170 [ 3219.985497][ C1] ? __kasan_check_write+0x14/0x20 [ 3219.990592][ C1] ? _raw_write_lock_bh+0xa3/0x170 [ 3219.995744][ C1] ? __local_bh_enable_ip+0xa8/0x170 [ 3220.001020][ C1] ? eth_header+0x11f/0x200 [ 3220.005586][ C1] ? memcpy+0x56/0x70 [ 3220.009558][ C1] dev_queue_xmit+0x17/0x20 [ 3220.014120][ C1] neigh_resolve_output+0x693/0x740 [ 3220.019449][ C1] ip6_finish_output2+0x109c/0x1930 [ 3220.024647][ C1] ? __ip6_finish_output+0x7b0/0x7b0 [ 3220.029922][ C1] __ip6_finish_output+0x610/0x7b0 [ 3220.035026][ C1] ip6_finish_output+0x3f/0x1e0 [ 3220.039861][ C1] ? ip6_output+0x1f3/0x4c0 [ 3220.044354][ C1] ip6_output+0x211/0x4c0 [ 3220.048684][ C1] ? asan.module_dtor+0x20/0x20 [ 3220.053521][ C1] ? ip6_output+0x4c0/0x4c0 [ 3220.058010][ C1] ? __rcu_read_lock+0x50/0x50 [ 3220.062856][ C1] ? nf_hook_slow+0x1b6/0x200 [ 3220.067517][ C1] mld_sendpack+0x5fc/0xb20 [ 3220.072008][ C1] ? add_grec+0x1370/0x1370 [ 3220.076509][ C1] ? mld_send_report+0x210/0x210 [ 3220.081445][ C1] mld_ifc_timer_expire+0x85b/0xc50 [ 3220.086765][ C1] ? timerqueue_add+0x268/0x290 [ 3220.091608][ C1] ? mld_gq_timer_expire+0xe0/0xe0 [ 3220.096869][ C1] call_timer_fn+0x35/0x280 [ 3220.101363][ C1] ? mld_gq_timer_expire+0xe0/0xe0 [ 3220.106458][ C1] expire_timers+0x21f/0x3b0 [ 3220.111184][ C1] __run_timers+0x548/0x680 [ 3220.115668][ C1] ? enqueue_timer+0x470/0x470 [ 3220.120546][ C1] run_timer_softirq+0x69/0xf0 [ 3220.125304][ C1] __do_softirq+0x27e/0x598 [ 3220.129796][ C1] asm_call_irq_on_stack+0xf/0x20 [ 3220.134802][ C1] [ 3220.137733][ C1] do_softirq_own_stack+0x60/0x80 [ 3220.142738][ C1] __irq_exit_rcu+0x128/0x150 [ 3220.147400][ C1] irq_exit_rcu+0x9/0x10 [ 3220.151873][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 3220.157491][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3220.163640][ C1] RIP: 0010:update_stack_state+0x349/0x530 [ 3220.169431][ C1] Code: f7 e8 9b b5 72 00 48 8b 45 90 49 89 06 48 b8 00 00 00 00 00 fc ff df 48 8b 4d a0 80 3c 01 00 74 09 48 8b 7d a8 e8 77 b5 72 00 <49> c7 45 58 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 4d c0 [ 3220.189228][ C1] RSP: 0018:ffffc9001012f2c0 EFLAGS: 00000246 [ 3220.195286][ C1] RAX: dffffc0000000000 RBX: 1ffff92002025e87 RCX: 1ffff92002025e8b [ 3220.203241][ C1] RDX: 1ffff92002025e82 RSI: ffffc9001012f918 RDI: ffffc9001012f400 [ 3220.211200][ C1] RBP: ffffc9001012f358 R08: ffffc9001012f4e8 R09: 0000000000000006 [ 3220.219324][ C1] R10: ffffc9001012f4f0 R11: 0000000000000000 R12: 1ffff92002025e88 [ 3220.227276][ C1] R13: ffffc9001012f400 R14: ffffc9001012f438 R15: ffffc9001012f440 [ 3220.235326][ C1] unwind_next_frame+0x3d4/0x740 [ 3220.240245][ C1] ? stack_trace_save+0x1e0/0x1e0 [ 3220.245247][ C1] arch_stack_walk+0x112/0x140 [ 3220.249991][ C1] ? mmput+0x4b/0x50 [ 3220.253877][ C1] stack_trace_save+0x11b/0x1e0 [ 3220.258707][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 3220.263901][ C1] save_stack+0x96/0x1e0 [ 3220.268124][ C1] ? __reset_page_owner+0x170/0x170 [ 3220.273301][ C1] ? free_pcp_prepare+0x18f/0x1c0 [ 3220.278315][ C1] ? __free_pages+0x2e3/0x4a0 [ 3220.282965][ C1] ? free_pages+0x7c/0x90 [ 3220.287270][ C1] ? pgd_free+0x1a1/0x1b0 [ 3220.291572][ C1] ? __mmdrop+0xb1/0x3c0 [ 3220.295793][ C1] ? __mmput+0x2b7/0x2c0 [ 3220.300036][ C1] ? mmput+0x4b/0x50 [ 3220.303918][ C1] ? kvm_sched_clock_read+0x19/0x40 [ 3220.309100][ C1] ? sched_clock+0x3a/0x40 [ 3220.313518][ C1] ? __reset_page_pinner+0x4b0/0x4b0 [ 3220.318798][ C1] __reset_page_owner+0x36/0x170 [ 3220.323716][ C1] free_pcp_prepare+0x18f/0x1c0 [ 3220.328571][ C1] __free_pages+0x2e3/0x4a0 [ 3220.333054][ C1] ? clear_zone_contiguous+0x40/0x40 [ 3220.338349][ C1] ? __kasan_check_write+0x14/0x20 [ 3220.343546][ C1] ? _raw_spin_lock+0xa3/0x1b0 [ 3220.348300][ C1] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 3220.353666][ C1] ? mutex_lock+0xa6/0x110 [ 3220.358059][ C1] free_pages+0x7c/0x90 [ 3220.362191][ C1] pgd_free+0x1a1/0x1b0 [ 3220.366322][ C1] __mmdrop+0xb1/0x3c0 [ 3220.370382][ C1] __mmput+0x2b7/0x2c0 [ 3220.374434][ C1] mmput+0x4b/0x50 [ 3220.378153][ C1] begin_new_exec+0xbb9/0x2360 [ 3220.382978][ C1] ? kernel_read+0x5d/0x70 [ 3220.387368][ C1] ? load_elf_phdrs+0x228/0x280 [ 3220.392195][ C1] ? elf_core_dump+0x3da0/0x3da0 [ 3220.397233][ C1] ? rw_verify_area+0x1d1/0x370 [ 3220.402070][ C1] load_elf_binary+0x876/0x4e60 [ 3220.407276][ C1] ? rw_verify_area+0x370/0x370 [ 3220.412120][ C1] ? load_elf_binary+0x9f1/0x4e60 [ 3220.417136][ C1] ? asan.module_dtor+0x20/0x20 [ 3220.421983][ C1] ? _raw_read_unlock+0x25/0x40 [ 3220.426813][ C1] ? load_misc_binary+0x560/0xac0 [ 3220.431843][ C1] exec_binprm+0x2a9/0xab0 [ 3220.436258][ C1] ? __x32_compat_sys_execveat+0x100/0x100 [ 3220.442045][ C1] ? prepare_creds+0x40b/0x5e0 [ 3220.446891][ C1] bprm_execve+0x6ae/0xa70 [ 3220.451312][ C1] ? alloc_bprm+0x670/0x670 [ 3220.455894][ C1] ? __kasan_check_read+0x11/0x20 [ 3220.460896][ C1] ? count+0x1b9/0x210 [ 3220.464958][ C1] do_execveat_common+0x46f/0x5d0 [ 3220.469962][ C1] __x64_sys_execve+0x92/0xb0 [ 3220.474623][ C1] do_syscall_64+0x31/0x70 [ 3220.479043][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3220.484922][ C1] RIP: 0033:0x7fd0adaf7337 [ 3220.489317][ C1] Code: Unable to access opcode bytes at RIP 0x7fd0adaf730d. [ 3220.496659][ C1] RSP: 002b:00007fff44bb60a8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 3220.505046][ C1] RAX: ffffffffffffffda RBX: 0000557bf8198c80 RCX: 00007fd0adaf7337 [ 3220.513084][ C1] RDX: 0000557bf8198ca8 RSI: 0000557bf8198c80 RDI: 0000557bf8198d38 [ 3220.521038][ C1] RBP: 0000557bf8198d38 R08: 0000557bf8198d3d R09: 00007fd0adce9000 [ 3220.528996][ C1] R10: 00007fd0ad98d800 R11: 0000000000000246 R12: 0000557bf8198ca8 [ 3220.537036][ C1] R13: 00007fd0adc9cff4 R14: 0000557bf8198ca8 R15: 0000000000000000 [ 3220.544990][ C1] Modules linked in: [ 3220.548938][ C1] ---[ end trace 6fa1d000eb72fbb8 ]--- [ 3220.554428][ C1] RIP: 0010:skb_panic+0x14f/0x160 [ 3220.555771][ T2836] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 3220.559457][ C1] Code: 87 85 48 8b 75 c0 48 8b 55 b8 8b 4d d4 44 8b 45 d0 4c 8b 4d c8 b8 00 00 00 00 53 41 56 41 55 41 54 e8 8c 4d 89 fd 48 83 c4 20 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 41 [ 3220.589213][ C1] RSP: 0018:ffffc9000015fee8 EFLAGS: 00010286 [ 3220.591489][ T2836] usb 4-1: USB disconnect, device number 76 [ 3220.595402][ C1] RAX: 0000000000000087 RBX: ffffffff85873b60 RCX: 716d263ce4ab1a00 [ 3220.595409][ C1] RDX: 0000000000000703 RSI: 0000000000000703 RDI: 0000000000000000 [ 3220.595425][ C1] RBP: ffffc9000015ff30 R08: ffffffff81545288 R09: ffffed103ee295d8 [ 3220.625300][ C1] R10: ffffed103ee295d8 R11: 0000000000000000 R12: ffff888156191400 [ 3220.633253][ C1] R13: 00000000000000b8 R14: 0000000000000080 R15: dffffc0000000000 [ 3220.641234][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 3220.650170][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3220.656762][ C1] CR2: 00007fd0adaf730d CR3: 00000001139dd000 CR4: 00000000003526a0 [ 3220.664741][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3220.672699][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3220.680680][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 3220.688174][ C1] Kernel Offset: disabled [ 3220.692523][ C1] Rebooting in 86400 seconds..