443bde768a0c13bc92f"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1704.239367][ T7] usb 2-1: USB disconnect, device number 8 07:09:45 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:45 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9}, 0x0) [ 1704.482644][T15589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:09:45 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1704.651217][ T3001] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1704.669427][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1704.682275][ T7286] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1704.701636][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd 07:09:45 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:45 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1704.874479][T15615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1705.021337][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1705.039163][ T3001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.069603][ T7286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1705.078528][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1705.091900][ T7286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.103369][ T3001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.115912][ T7286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1705.121510][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1705.125562][ T7286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.153649][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.175504][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1705.192913][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.241563][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1705.252683][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1705.262715][ T7286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1705.271904][ T3001] usb 5-1: Product: syz [ 1705.276096][ T3001] usb 5-1: Manufacturer: syz [ 1705.282842][ T7286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1705.290878][ T7286] usb 1-1: Product: syz [ 1705.297490][ T7286] usb 1-1: Manufacturer: syz [ 1705.342448][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1705.347695][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1705.354111][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1705.359346][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1705.361633][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1705.375014][ T3001] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1705.383078][ T7286] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1705.393207][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1705.420543][ T7] usb 2-1: Product: syz [ 1705.437085][ T7] usb 2-1: Manufacturer: syz [ 1705.497624][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1705.511054][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1705.527932][ T7] cdc_wdm 2-1:1.0: cdc-wdm2: USB WDM device [ 1707.288123][ T7286] usb 1-1: USB disconnect, device number 18 07:09:48 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xe}, 0x0) [ 1707.339320][T13379] usb 5-1: USB disconnect, device number 115 [ 1707.377843][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:09:48 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xf3, &(0x7f0000000f00)={0x5, 0xf, 0xf3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xca, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:48 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e8", 0x9d) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1707.401879][ T3001] usb 2-1: USB disconnect, device number 9 07:09:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf}, 0x0) [ 1707.650124][T15708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:09:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x60}, 0x0) [ 1707.871159][ T7286] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1707.910445][T15727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1707.931320][ T3001] usb 2-1: new high-speed USB device number 10 using dummy_hcd 07:09:48 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0}, 0x0) [ 1708.245890][ T7286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1708.261966][ T7286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.285570][ T7286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1708.300881][ T7286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.321289][ T3001] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1708.330277][ T3001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.343911][ T3001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1708.356597][ T3001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.461225][ T7286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1708.470571][ T7286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1708.490069][ T3001] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1708.500106][ T3001] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1708.518490][ T7286] usb 1-1: Product: syz [ 1708.523327][ T3001] usb 2-1: Product: syz [ 1708.527631][ T3001] usb 2-1: Manufacturer: syz [ 1708.542825][ T7286] usb 1-1: Manufacturer: syz [ 1708.593836][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1708.599607][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1708.606491][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1708.622466][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1708.636735][ T3001] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1708.661778][ T7286] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 07:09:51 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xf3, &(0x7f0000000f00)={0x5, 0xf, 0xf3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xca, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1710.534501][ T7] usb 1-1: USB disconnect, device number 19 07:09:51 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:51 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:09:51 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x300}, 0x0) 07:09:51 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1710.585249][ T7286] usb 2-1: USB disconnect, device number 10 [ 1710.651466][T15799] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:09:51 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:09:51 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 07:09:51 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1710.927485][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1711.021199][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd 07:09:51 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1711.071402][ T7286] usb 2-1: new high-speed USB device number 11 using dummy_hcd 07:09:51 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1711.203972][T15838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1711.419687][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1711.445061][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.451282][ T7286] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1711.472834][ T7286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.480611][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1711.495050][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.506971][ T7286] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1711.533548][ T7286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.651275][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1711.671218][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1711.671511][ T7286] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1711.679505][ T7] usb 1-1: Product: syz [ 1711.679520][ T7] usb 1-1: Manufacturer: syz [ 1711.708948][ T7286] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1711.722679][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1711.729284][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1711.731724][ T7286] usb 2-1: Product: syz [ 1711.743589][ T7286] usb 2-1: Manufacturer: syz [ 1711.758973][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1711.802131][ T7286] cdc_wdm 2-1:1.0: skipping garbage [ 1711.807662][ T7286] cdc_wdm 2-1:1.0: skipping garbage [ 1711.828925][ T7286] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1712.301099][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1712.321041][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1712.561093][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1712.823724][T13379] usb 1-1: USB disconnect, device number 20 07:09:54 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xf3, &(0x7f0000000f00)={0x5, 0xf, 0xf3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xca, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:54 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x600}, 0x0) 07:09:54 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:54 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:54 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1713.675536][T22412] usb 2-1: USB disconnect, device number 11 [ 1713.701750][T13379] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1713.763517][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:09:54 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:54 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) [ 1714.021109][ T3001] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1714.033626][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1714.071456][T13379] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1714.090678][T13379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.123638][T13379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1714.139558][T13379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.181176][T22412] usb 2-1: new high-speed USB device number 12 using dummy_hcd 07:09:55 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:55 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1714.271212][T13379] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1714.299180][T13379] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 07:09:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x900}, 0x0) [ 1714.325753][T13379] usb 1-1: Product: syz [ 1714.338038][T13379] usb 1-1: Manufacturer: syz [ 1714.381334][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1714.392540][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1714.398065][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1714.401674][ T3001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.425922][T15940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1714.429920][T13379] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1714.456366][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1714.498541][ T3001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.571507][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1714.599680][T22412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.647208][T22412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1714.671551][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1714.678556][T22412] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.688104][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1714.712769][ T3001] usb 5-1: Product: syz [ 1714.727567][ T3001] usb 5-1: Manufacturer: syz [ 1714.793238][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1714.798805][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1714.817770][ T3001] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1714.853118][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1714.870602][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1714.887471][T22412] usb 2-1: Product: syz [ 1714.894505][T22412] usb 2-1: Manufacturer: syz [ 1714.934165][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1714.939739][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1714.954016][T22412] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1715.521047][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1715.541020][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1715.781049][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1716.042835][ T9889] usb 1-1: USB disconnect, device number 21 07:09:57 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xfa, &(0x7f0000000f00)={0x5, 0xf, 0xfa, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd1, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1716.720517][ T9889] usb 5-1: USB disconnect, device number 116 07:09:57 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:09:57 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xe00}, 0x0) 07:09:57 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1716.797531][ T3203] usb 2-1: USB disconnect, device number 12 [ 1716.870336][T16010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1716.891195][T13161] usb 1-1: new high-speed USB device number 22 using dummy_hcd 07:09:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:57 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:09:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf00}, 0x0) 07:09:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:09:57 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1717.251400][T13161] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1717.260098][T13161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.291102][ T9889] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1717.291433][ T3203] usb 2-1: new high-speed USB device number 13 using dummy_hcd 07:09:58 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1717.336871][T13161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1717.376022][T13161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.521400][T13161] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1717.537314][T13161] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1717.561007][T13161] usb 1-1: Product: syz [ 1717.565192][T13161] usb 1-1: Manufacturer: syz [ 1717.632567][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1717.637821][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1717.663348][T13161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1717.671291][ T9889] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1717.679902][ T9889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.698552][ T3203] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1717.711655][ T3203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.720716][ T9889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1717.735236][ T3203] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1717.756169][ T3203] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.759088][ T9889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.902494][ T3203] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1717.917824][ T3203] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1717.935513][ T3203] usb 2-1: Product: syz [ 1717.940111][ T3203] usb 2-1: Manufacturer: syz [ 1717.941242][ T9889] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1717.971119][ T9889] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1717.979180][ T9889] usb 5-1: Product: syz [ 1718.012283][ T3203] cdc_wdm 2-1:1.0: skipping garbage [ 1718.017537][ T3203] cdc_wdm 2-1:1.0: skipping garbage [ 1718.023278][ T9889] usb 5-1: Manufacturer: syz [ 1718.038403][ T3203] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1718.082474][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1718.087724][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1718.118948][ T9889] cdc_wdm: probe of 5-1:1.0 failed with error -22 07:10:00 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xfa, &(0x7f0000000f00)={0x5, 0xf, 0xfa, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd1, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1719.612108][T13161] usb 1-1: USB disconnect, device number 22 [ 1719.843615][ T9889] usb 5-1: USB disconnect, device number 117 07:10:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf19}, 0x0) 07:10:00 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:00 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xeffdffff00000000) 07:10:00 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:00 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1719.894909][ T3203] usb 2-1: USB disconnect, device number 13 07:10:00 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1720.006027][T16115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1720.061758][T13161] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1720.122238][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 07:10:00 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1720.198513][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 07:10:01 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x190f}, 0x0) 07:10:01 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:01 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1720.411148][ T9889] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1720.421562][T13161] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1720.430181][T13161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.466567][T13161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1720.481250][T13161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.611535][T13161] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1720.620608][T13161] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1720.653236][T13161] usb 1-1: Product: syz [ 1720.657604][T13161] usb 1-1: Manufacturer: syz [ 1720.712411][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1720.717659][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1720.731234][T13379] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1720.749966][T13161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1720.811373][ T9889] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1720.829256][ T9889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.860511][ T9889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1720.884689][ T9889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.031541][ T9889] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1721.040620][ T9889] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1721.050170][ T9889] usb 5-1: Product: syz [ 1721.057634][ T9889] usb 5-1: Manufacturer: syz [ 1721.113335][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1721.118592][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1721.145210][ T9889] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1721.161554][T13379] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1721.175680][T13379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.199260][T13379] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1721.217443][T13379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.351419][T13379] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1721.360488][T13379] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1721.412247][T13379] usb 2-1: Product: syz [ 1721.421340][T13379] usb 2-1: Manufacturer: syz [ 1721.492563][T13379] cdc_wdm 2-1:1.0: skipping garbage [ 1721.499715][T13379] cdc_wdm 2-1:1.0: skipping garbage [ 1721.531812][T13379] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1721.721045][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1721.741044][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1721.981149][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1722.242863][ T9889] usb 1-1: USB disconnect, device number 23 07:10:03 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:03 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6000}, 0x0) 07:10:03 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xfa, &(0x7f0000000f00)={0x5, 0xf, 0xfa, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd1, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:03 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:03 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:03 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf000}, 0x0) 07:10:03 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1723.017894][ T9889] usb 5-1: USB disconnect, device number 118 [ 1723.121129][ T7286] usb 1-1: new high-speed USB device number 24 using dummy_hcd 07:10:03 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:04 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:04 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x30000}, 0x0) 07:10:04 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1723.429385][ T3001] usb 2-1: USB disconnect, device number 14 07:10:04 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1723.491227][ T7286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1723.519427][ T7286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.532611][ T9889] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1723.573551][ T7286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1723.590561][ T7286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.623696][T16249] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1723.751459][ T7286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1723.760541][ T7286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1723.790451][ T7286] usb 1-1: Product: syz [ 1723.808697][ T7286] usb 1-1: Manufacturer: syz [ 1723.862237][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1723.867485][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1723.891697][ T9889] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1723.905263][ T9889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.922061][ T3001] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1723.936103][ T7286] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1723.956126][ T9889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1723.979613][ T9889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.111468][ T9889] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1724.120551][ T9889] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1724.138644][ T9889] usb 5-1: Product: syz [ 1724.148659][ T9889] usb 5-1: Manufacturer: syz [ 1724.212636][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1724.217910][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1724.271500][ T9889] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1724.311449][ T3001] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1724.320093][ T3001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.409671][ T3001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1724.448076][ T3001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1724.612335][ T3001] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1724.621454][ T3001] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1724.629426][ T3001] usb 2-1: Product: syz [ 1724.636370][ T3001] usb 2-1: Manufacturer: syz [ 1724.692876][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1724.698120][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1724.721363][ T3001] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1724.931118][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1724.951055][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1725.191055][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1725.457083][T13379] usb 1-1: USB disconnect, device number 24 07:10:06 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xfd, &(0x7f0000000f00)={0x5, 0xf, 0xfd, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd4, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:06 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1725.984956][T16290] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:06 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 07:10:06 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:06 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1726.149511][ T3001] usb 5-1: USB disconnect, device number 119 [ 1726.228849][T16305] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1726.311109][ T9889] usb 1-1: new high-speed USB device number 25 using dummy_hcd 07:10:07 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1726.459944][T16319] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:07 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:07 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x1000000}, 0x0) [ 1726.538815][T13379] usb 2-1: USB disconnect, device number 15 07:10:07 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1726.621657][ T3001] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1726.654200][T16335] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:07 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1726.681597][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1726.690228][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.738667][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1726.755498][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.801299][T16339] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1726.911487][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1726.920892][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1726.944185][ T9889] usb 1-1: Product: syz [ 1726.950786][ T9889] usb 1-1: Manufacturer: syz [ 1726.982585][T13379] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1727.002362][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1727.007590][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1727.021413][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1727.030046][ T3001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.051303][ T9889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1727.071224][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1727.081343][ T3001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.221231][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1727.230357][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1727.245240][ T3001] usb 5-1: Product: syz [ 1727.249636][ T3001] usb 5-1: Manufacturer: syz [ 1727.302294][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1727.307539][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1727.327125][ T3001] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1727.391441][T13379] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1727.400081][T13379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.487114][T13379] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1727.536139][T13379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.661475][T13379] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1727.671127][T13379] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1727.679129][T13379] usb 2-1: Product: syz [ 1727.702706][T13379] usb 2-1: Manufacturer: syz [ 1727.752434][T13379] cdc_wdm 2-1:1.0: skipping garbage [ 1727.757682][T13379] cdc_wdm 2-1:1.0: skipping garbage [ 1727.781263][T13379] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1727.991048][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1728.011081][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1728.291143][ C0] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1728.554897][ T7286] usb 1-1: USB disconnect, device number 25 [ 1728.561033][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1728.567694][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1728.573782][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 07:10:09 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xfd, &(0x7f0000000f00)={0x5, 0xf, 0xfd, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd4, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x2000000}, 0x0) 07:10:10 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:10 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:10 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x3000000}, 0x0) [ 1729.250375][T22412] usb 5-1: USB disconnect, device number 120 07:10:10 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1729.391455][T13379] usb 1-1: new high-speed USB device number 26 using dummy_hcd 07:10:10 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:10:10 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:10 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x4000000}, 0x0) [ 1729.617040][ T9889] usb 2-1: USB disconnect, device number 16 07:10:10 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1729.741961][T22412] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1729.761433][T13379] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1729.786853][T13379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.816528][T13379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1729.844648][T13379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.910351][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1730.001506][T13379] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1730.015508][T13379] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1730.030565][T13379] usb 1-1: Product: syz [ 1730.041773][T13379] usb 1-1: Manufacturer: syz [ 1730.081482][ T9889] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1730.105664][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1730.114682][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1730.128968][T22412] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1730.142981][T13379] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1730.149268][T22412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.177901][T22412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1730.188038][T22412] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.371089][T22412] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1730.380159][T22412] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1730.404539][T22412] usb 5-1: Product: syz [ 1730.408940][T22412] usb 5-1: Manufacturer: syz [ 1730.451536][ T9889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1730.460194][ T9889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.472445][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1730.478646][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1730.483610][ T9889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1730.528073][T22412] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1730.565444][ T9889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.681054][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1730.701217][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1730.741669][ T9889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1730.750834][ T9889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1730.760450][ T9889] usb 2-1: Product: syz [ 1730.766349][ T9889] usb 2-1: Manufacturer: syz [ 1730.812334][ T9889] cdc_wdm 2-1:1.0: skipping garbage [ 1730.817568][ T9889] cdc_wdm 2-1:1.0: skipping garbage [ 1730.831371][ T9889] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1730.941064][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1731.202463][T22412] usb 1-1: USB disconnect, device number 26 07:10:12 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x5000000}, 0x0) 07:10:13 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='S'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:13 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xfd, &(0x7f0000000f00)={0x5, 0xf, 0xfd, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd4, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:13 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:13 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6000000}, 0x0) [ 1732.319910][T22412] usb 5-1: USB disconnect, device number 121 [ 1732.406147][T16493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:13 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 07:10:13 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x7000000}, 0x0) 07:10:13 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1732.656817][ T3203] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1732.686582][ T7] usb 2-1: USB disconnect, device number 17 [ 1732.776896][T16517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1732.813799][T22412] usb 5-1: new high-speed USB device number 122 using dummy_hcd 07:10:13 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:13 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x8000000}, 0x0) [ 1732.960523][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1733.051715][ T3203] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1733.070724][ T3203] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.127161][ T3203] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1733.146120][ T3203] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.171423][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1733.240591][T22412] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1733.250508][T22412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.287484][T22412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1733.311287][ T3203] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1733.320359][ T3203] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1733.338742][T22412] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.355462][T22412] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.373028][ T3203] usb 1-1: Product: syz [ 1733.377218][ T3203] usb 1-1: Manufacturer: syz [ 1733.452664][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1733.457922][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1733.497722][ T3203] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1733.518394][T22412] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1733.542917][T22412] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1733.559562][T22412] usb 5-1: Product: syz [ 1733.564427][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1733.574494][T22412] usb 5-1: Manufacturer: syz [ 1733.582620][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.604581][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1733.631508][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.642757][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1733.647985][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1733.677676][T22412] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1733.781462][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1733.790651][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1733.839814][ T7] usb 2-1: Product: syz [ 1733.872690][ T7] usb 2-1: Manufacturer: syz [ 1733.952262][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1733.957529][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1733.989609][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1734.021067][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1734.041056][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1734.156787][ T3001] usb 2-1: USB disconnect, device number 18 [ 1734.281052][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1734.542800][ T5] usb 1-1: USB disconnect, device number 27 07:10:16 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='S'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:16 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:16 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9000000}, 0x0) 07:10:16 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) 07:10:16 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xff, &(0x7f0000000f00)={0x5, 0xf, 0xff, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd6, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f637"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1735.430767][ T3001] usb 5-1: USB disconnect, device number 122 [ 1735.498822][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:16 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff28001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:16 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xe000000}, 0x0) [ 1735.745417][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1735.776373][ T17] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1735.784687][ T9889] usb 1-1: new high-speed USB device number 28 using dummy_hcd 07:10:16 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:16 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1735.941229][ T3001] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1736.016077][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:16 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1736.154557][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1736.163560][ T17] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1736.173164][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.191794][ T17] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.213061][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1736.223696][ T17] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1736.247433][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.266911][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.301642][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1736.316613][ T3001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.337365][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1736.356932][ T3001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.374741][ T3001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.431791][ T17] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1736.441535][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1736.456744][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1736.474485][ T17] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1736.501867][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1736.511164][ T9889] usb 1-1: Product: syz [ 1736.518379][ T17] usb 2-1: Product: syz [ 1736.525623][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1736.534521][ T9889] usb 1-1: Manufacturer: syz [ 1736.539531][ T17] usb 2-1: Manufacturer: syz [ 1736.554542][ T3001] usb 5-1: Product: syz [ 1736.560104][ T3001] usb 5-1: Manufacturer: syz [ 1736.592950][ T17] cdc_wdm 2-1:1.0: skipping garbage [ 1736.598245][ T17] cdc_wdm 2-1:1.0: skipping garbage [ 1736.604912][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1736.610192][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1736.617234][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1736.622960][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1736.637970][ T17] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1736.645526][ T3001] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1736.653693][ T9889] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1736.798043][ T17] usb 2-1: USB disconnect, device number 19 [ 1737.157338][T16669] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1738.525892][ T9889] usb 1-1: USB disconnect, device number 28 07:10:19 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='S'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf000000}, 0x0) 07:10:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:19 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:19 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) 07:10:19 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xff, &(0x7f0000000f00)={0x5, 0xf, 0xff, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd6, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f637"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1738.602795][ T3203] usb 5-1: USB disconnect, device number 123 [ 1738.659914][T16694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:19 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff2800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x190f0000}, 0x0) [ 1738.877997][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1738.961085][ T3001] usb 2-1: new high-speed USB device number 20 using dummy_hcd 07:10:19 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1739.051139][ T9889] usb 1-1: new high-speed USB device number 29 using dummy_hcd 07:10:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1739.102302][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1739.112101][ T3203] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1739.331492][ T3001] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1739.340161][ T3001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.355840][ T3001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1739.373665][ T3001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.431582][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1739.440223][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.462182][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1739.476743][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.531474][ T3001] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1739.540733][ T3001] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1739.551839][ T3001] usb 2-1: Product: syz [ 1739.556020][ T3001] usb 2-1: Manufacturer: syz [ 1739.560563][ T3203] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1739.582235][ T3203] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.602766][ T3203] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1739.609347][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1739.612938][ T3203] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.618303][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1739.634929][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1739.641529][ T3203] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.653922][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1739.679507][ T9889] usb 1-1: Product: syz [ 1739.689987][ T3001] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1739.701346][ T9889] usb 1-1: Manufacturer: syz [ 1739.762650][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1739.769130][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1739.794965][ T9889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1739.795615][ T3203] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1739.827891][ T9889] usb 2-1: USB disconnect, device number 20 [ 1739.832357][ T3203] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1739.861458][ T3203] usb 5-1: Product: syz [ 1739.869380][ T3203] usb 5-1: Manufacturer: syz [ 1739.932222][ T3203] cdc_wdm 5-1:1.0: skipping garbage [ 1739.938665][ T3203] cdc_wdm 5-1:1.0: skipping garbage [ 1739.955220][ T3203] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device 07:10:22 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:22 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x60000000}, 0x0) [ 1741.708697][ T5] usb 1-1: USB disconnect, device number 29 [ 1741.726737][ T17] usb 5-1: USB disconnect, device number 124 07:10:22 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:22 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) 07:10:22 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xff, &(0x7f0000000f00)={0x5, 0xf, 0xff, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd6, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f637"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1741.824070][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:22 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:22 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9effffff}, 0x0) [ 1742.043148][T16814] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:22 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1742.111588][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd 07:10:22 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1742.208933][T16821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1742.211154][ T5] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1742.221117][ T17] usb 5-1: new high-speed USB device number 125 using dummy_hcd 07:10:23 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1742.431218][ T17] usb 5-1: device descriptor read/64, error 18 [ 1742.501519][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1742.514795][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.541669][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1742.564297][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.651871][ T5] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1742.660524][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.675412][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1742.687246][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.701922][ T17] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1742.714975][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1742.732116][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1742.761197][ T7] usb 2-1: Product: syz [ 1742.765432][ T7] usb 2-1: Manufacturer: syz [ 1742.825914][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1742.832632][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1742.838114][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1742.847759][ T5] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1742.862066][ T5] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1742.870960][ T5] usb 1-1: Product: syz [ 1742.881342][ T5] usb 1-1: Manufacturer: syz [ 1742.892040][ T17] usb 5-1: device descriptor read/64, error 18 [ 1742.942557][ T5] cdc_wdm 1-1:1.0: skipping garbage [ 1742.947847][ T5] cdc_wdm 1-1:1.0: skipping garbage [ 1742.972298][ T5] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1743.020936][ T17] usb usb5-port1: attempt power cycle [ 1743.029104][ T5] usb 2-1: USB disconnect, device number 21 [ 1743.511050][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1743.541048][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1743.731183][ T17] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1743.821095][ C0] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1743.902203][ T17] usb 5-1: device descriptor read/8, error -61 [ 1744.087436][ T3001] usb 1-1: USB disconnect, device number 30 [ 1744.171319][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1744.341295][ T17] usb 5-1: device descriptor read/8, error -61 [ 1744.461696][ T17] usb usb5-port1: unable to enumerate USB device 07:10:25 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:25 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:25 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:25 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xec, &(0x7f0000000f00)={0x5, 0xf, 0xec, 0x2, [@generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 07:10:25 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) [ 1744.909076][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:25 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:25 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfcffffff}, 0x0) 07:10:25 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1745.171172][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1745.185486][ T7286] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1745.207581][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1745.232044][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd 07:10:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfffff000}, 0x0) 07:10:26 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:26 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1745.421244][ T17] usb 5-1: device descriptor read/64, error 18 [ 1745.551271][ T7286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1745.551714][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1745.559900][ T7286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.596081][ T7286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1745.599947][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.615100][ T7286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.676718][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1745.711062][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.732057][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1745.743927][ T7286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1745.754260][ T7286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1745.763020][ T7286] usb 1-1: Product: syz [ 1745.767396][ T7286] usb 1-1: Manufacturer: syz [ 1745.812191][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1745.817445][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1745.842616][ T7286] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1745.861519][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1745.870602][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1745.889369][ T7] usb 2-1: Product: syz [ 1745.894171][ T7] usb 2-1: Manufacturer: syz [ 1745.921203][ T17] usb 5-1: device descriptor read/64, error 18 [ 1745.945234][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1745.950506][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1745.964943][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1746.041482][ T17] usb usb5-port1: attempt power cycle [ 1746.148639][ T7] usb 2-1: USB disconnect, device number 22 [ 1746.771652][ T17] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1746.941227][ T17] usb 5-1: device descriptor read/8, error -61 [ 1747.211127][ T17] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1747.381350][ T17] usb 5-1: device descriptor read/8, error -61 [ 1747.502508][ T17] usb usb5-port1: unable to enumerate USB device [ 1747.889012][ T3203] usb 1-1: USB disconnect, device number 31 07:10:28 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:28 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:28 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xffffff7f}, 0x0) 07:10:28 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) 07:10:28 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xec, &(0x7f0000000f00)={0x5, 0xf, 0xec, 0x2, [@generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:28 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:28 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xffffff9e}, 0x0) 07:10:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1748.281103][T22412] usb 2-1: new high-speed USB device number 23 using dummy_hcd 07:10:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1748.351321][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd 07:10:29 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1748.402142][ T3203] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1748.551414][ T7] usb 5-1: device descriptor read/64, error 18 [ 1748.661069][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1748.669731][T22412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.695951][T22412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1748.706307][T22412] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.811236][ T3203] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1748.819901][ T3203] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.833109][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1748.841468][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1748.850514][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1748.858869][ T3203] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1748.883545][ T3203] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.894724][T22412] usb 2-1: Product: syz [ 1748.898908][T22412] usb 2-1: Manufacturer: syz [ 1748.942308][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1748.947569][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1748.969309][T22412] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1749.034754][ T3203] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1749.050277][ T3203] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1749.071133][ T7] usb 5-1: device descriptor read/64, error 18 [ 1749.094741][ T3203] usb 1-1: Product: syz [ 1749.109553][ T3203] usb 1-1: Manufacturer: syz [ 1749.146059][ T7286] usb 2-1: USB disconnect, device number 23 [ 1749.182469][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1749.188111][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1749.193930][ T7] usb usb5-port1: attempt power cycle [ 1749.215158][ T3203] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1749.751105][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1749.771469][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1749.913862][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1750.061055][ C0] cdc_wdm 1-1:1.0: unknown notification 96 received: index 1498 len 5348 [ 1750.121546][ T7] usb 5-1: device descriptor read/8, error -61 [ 1750.342171][T22412] usb 1-1: USB disconnect, device number 32 [ 1750.401213][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1750.591283][ T7] usb 5-1: device descriptor read/8, error -61 [ 1750.721682][ T7] usb usb5-port1: unable to enumerate USB device 07:10:31 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfffffff0}, 0x0) 07:10:31 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:31 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:31 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) 07:10:31 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xec, &(0x7f0000000f00)={0x5, 0xf, 0xec, 0x2, [@generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:31 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) 07:10:31 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:31 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) 07:10:32 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfffffffc}, 0x0) 07:10:32 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) [ 1751.280946][T17087] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1751.361214][ T3203] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1751.501384][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1751.691160][ T7] usb 5-1: device descriptor read/64, error 18 [ 1751.721226][ T7286] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1751.724130][ T3203] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1751.763174][ T3203] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.784872][ T3203] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1751.807391][ T3203] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.941596][ T3203] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1751.961180][ T3203] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1751.969395][ T3203] usb 1-1: Product: syz [ 1751.976495][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1751.989934][ T3203] usb 1-1: Manufacturer: syz [ 1752.053160][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1752.058426][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1752.082213][ T3203] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1752.091494][ T7286] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1752.101239][ T7286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.122199][ T7286] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1752.141108][ T7286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.192729][ T7] usb 5-1: device descriptor read/64, error 18 [ 1752.261546][ T7286] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1752.270624][ T7286] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1752.307535][ T7286] usb 2-1: Product: syz [ 1752.321586][ T7] usb usb5-port1: attempt power cycle [ 1752.333223][ T7286] usb 2-1: Manufacturer: syz [ 1752.419465][ T7286] cdc_wdm 2-1:1.0: skipping garbage [ 1752.425513][ T7286] cdc_wdm 2-1:1.0: skipping garbage [ 1752.430870][ T7286] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1752.621296][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1752.631984][ T9889] usb 2-1: USB disconnect, device number 24 [ 1752.641105][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1752.901108][ C0] cdc_wdm 1-1:1.0: unknown notification 96 received: index 1498 len 5348 [ 1753.041120][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1753.173068][ T9889] usb 1-1: USB disconnect, device number 33 [ 1753.248897][ T7] usb 5-1: device descriptor read/8, error -61 [ 1753.521213][ T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1753.701200][ T7] usb 5-1: device descriptor read/8, error -61 [ 1753.821362][ T7] usb usb5-port1: unable to enumerate USB device 07:10:34 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:34 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:34 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x3000000000000}, 0x0) 07:10:34 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 07:10:34 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1754.187534][T17156] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:35 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0) [ 1754.351814][T17169] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:35 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1754.461402][ T9889] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1754.564461][T17183] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1754.591179][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd 07:10:35 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1754.791309][ T7] usb 5-1: device descriptor read/64, error 18 [ 1754.821421][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1754.830055][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.854010][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1754.869343][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.001215][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1755.010654][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1755.031161][ T9889] usb 1-1: Product: syz [ 1755.036642][ T9889] usb 1-1: Manufacturer: syz [ 1755.071258][ T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1755.092463][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1755.097707][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1755.114128][ T9889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1755.261238][ T7] usb 5-1: device descriptor read/64, error 18 [ 1755.392878][ T7] usb usb5-port1: attempt power cycle [ 1756.121117][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1756.301809][ T7] usb 5-1: device descriptor read/8, error -61 [ 1756.591145][ T7] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1756.771603][ T7] usb 5-1: device descriptor read/8, error -61 [ 1756.892463][ T7] usb usb5-port1: unable to enumerate USB device [ 1757.148007][ T7286] usb 1-1: USB disconnect, device number 34 07:10:37 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:37 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x100000000000000}, 0x0) 07:10:37 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 07:10:37 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:37 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1757.282150][T17231] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x200000000000000}, 0x0) [ 1757.455585][T17242] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1757.615710][T17247] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1757.643561][ T7286] usb 1-1: new high-speed USB device number 35 using dummy_hcd 07:10:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1757.681199][ T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd 07:10:38 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 07:10:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x300000000000000}, 0x0) [ 1757.775825][T17251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1757.891566][ T7] usb 5-1: device descriptor read/64, error 18 [ 1758.021553][ T7286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1758.039683][ T7286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.083943][ T7286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1758.124857][ T7286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.172651][ T7] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1758.261638][ T7286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1758.270753][ T7286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1758.289278][ T7286] usb 1-1: Product: syz [ 1758.298965][ T7286] usb 1-1: Manufacturer: syz [ 1758.352232][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1758.357547][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1758.391164][ T7] usb 5-1: device descriptor read/64, error 18 [ 1758.392325][ T7286] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1758.521601][ T7] usb usb5-port1: attempt power cycle [ 1759.241089][ T7] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1759.443321][ T7] usb 5-1: device descriptor read/8, error -61 [ 1759.731171][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1759.931240][ T7] usb 5-1: device descriptor read/8, error -61 [ 1760.051478][ T7] usb usb5-port1: unable to enumerate USB device 07:10:41 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:41 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x400000000000000}, 0x0) 07:10:41 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) 07:10:41 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1760.263911][ T7] usb 1-1: USB disconnect, device number 35 [ 1760.369078][T17292] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1760.478718][T17306] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500000000000000}, 0x0) [ 1760.579906][T17309] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1760.681162][T13379] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1760.711522][ T3203] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1760.763239][T17315] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1760.801197][ T7] usb 1-1: new high-speed USB device number 36 using dummy_hcd 07:10:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x600000000000000}, 0x0) 07:10:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1760.891180][T13379] usb 2-1: device descriptor read/64, error 18 [ 1760.948252][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1761.122422][ T3203] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1761.143072][ T3203] usb 5-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 1761.161121][T13379] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1761.180508][ T3203] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1761.191884][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1761.206553][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.232951][ T3203] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1761.260106][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1761.305296][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.361811][T13379] usb 2-1: device descriptor read/64, error 18 [ 1761.401627][ T3203] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1761.410701][ T3203] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1761.432225][ T3203] usb 5-1: Product: syz [ 1761.436420][ T3203] usb 5-1: Manufacturer: syz [ 1761.471336][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1761.480402][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1761.496267][T13379] usb usb2-port1: attempt power cycle [ 1761.522530][ T3203] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1761.532020][ T7] usb 1-1: Product: syz [ 1761.536205][ T7] usb 1-1: Manufacturer: syz [ 1761.592337][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1761.597617][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1761.641595][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1762.221159][T13379] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1762.411186][T13379] usb 2-1: device descriptor read/8, error -61 [ 1762.682280][T13379] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1762.871305][T13379] usb 2-1: device descriptor read/8, error -61 [ 1762.992232][T13379] usb usb2-port1: unable to enumerate USB device [ 1763.421632][ T7286] usb 1-1: USB disconnect, device number 36 07:10:44 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:44 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x700000000000000}, 0x0) 07:10:44 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:44 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) 07:10:44 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1763.461997][ T3001] usb 5-1: USB disconnect, device number 23 [ 1763.514957][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:44 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x800000000000000}, 0x0) [ 1763.773073][T17392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1763.811275][T13379] usb 2-1: new high-speed USB device number 29 using dummy_hcd 07:10:44 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1763.911430][ T7286] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1763.941719][ T3001] usb 5-1: new high-speed USB device number 24 using dummy_hcd 07:10:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x900000000000000}, 0x0) [ 1764.021093][T13379] usb 2-1: device descriptor read/64, error 18 [ 1764.029950][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:44 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xe00000000000000}, 0x0) [ 1764.282239][ T7286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1764.293171][T17414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1764.296898][ T7286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.305682][T13379] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1764.316152][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1764.365250][ T3001] usb 5-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 1764.400789][ T7286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1764.414010][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1764.432499][ T7286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.446367][ T3001] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1764.532079][T13379] usb 2-1: device descriptor read/64, error 18 [ 1764.593490][ T7286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1764.604043][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1764.620800][ T7286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1764.633084][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1764.650484][ T7286] usb 1-1: Product: syz [ 1764.657465][ T3001] usb 5-1: Product: syz [ 1764.662923][T13379] usb usb2-port1: attempt power cycle [ 1764.665536][ T7286] usb 1-1: Manufacturer: syz [ 1764.673747][ T3001] usb 5-1: Manufacturer: syz [ 1764.722395][ T3001] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1764.732553][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1764.738097][ T7286] cdc_wdm 1-1:1.0: skipping garbage [ 1764.763297][ T7286] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1765.371373][T13379] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1765.581502][T13379] usb 2-1: device descriptor read/8, error -61 [ 1765.851153][T13379] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1766.032294][T13379] usb 2-1: device descriptor read/8, error -61 [ 1766.151277][T13379] usb usb2-port1: unable to enumerate USB device 07:10:47 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:47 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:47 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf00000000000000}, 0x0) 07:10:47 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) 07:10:47 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1766.554742][ T3001] usb 1-1: USB disconnect, device number 37 [ 1766.588578][ T7] usb 5-1: USB disconnect, device number 24 [ 1766.655187][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:47 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x190f000000000000}, 0x0) [ 1766.871271][T17488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1766.921249][ T7286] usb 2-1: new high-speed USB device number 33 using dummy_hcd 07:10:47 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1767.071128][ T7] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1767.083300][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1767.104613][ T3001] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1767.112563][ T7286] usb 2-1: device descriptor read/64, error 18 07:10:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6000000000000000}, 0x0) 07:10:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1767.333711][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1767.381720][ T7286] usb 2-1: new high-speed USB device number 34 using dummy_hcd 07:10:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1767.451545][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1767.462044][ T7] usb 5-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 1767.482704][ T3001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1767.497547][ T3001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.517095][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1767.536557][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1767.536719][ T3001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1767.581296][ T7286] usb 2-1: device descriptor read/64, error 18 [ 1767.593323][ T3001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.631171][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1767.707274][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1767.711816][ T7286] usb usb2-port1: attempt power cycle [ 1767.716616][T17521] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1767.743931][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1767.761658][ T3001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1767.766070][ T7] usb 5-1: Product: syz [ 1767.770713][ T3001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1767.770730][ T3001] usb 1-1: Product: syz [ 1767.770749][ T3001] usb 1-1: Manufacturer: syz [ 1767.834275][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1767.837911][ T7] usb 5-1: Manufacturer: syz [ 1767.839523][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1767.853737][ T3001] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1767.901895][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1768.431269][ T7286] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1768.601450][ T7286] usb 2-1: device descriptor read/8, error -61 [ 1768.871128][ T7286] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1769.041274][ T7286] usb 2-1: device descriptor read/8, error -61 [ 1769.161304][ T7286] usb usb2-port1: unable to enumerate USB device 07:10:50 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:50 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9effffff00000000}, 0x0) 07:10:50 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:50 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 07:10:50 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1769.680186][ T3001] usb 1-1: USB disconnect, device number 38 [ 1769.711198][ T7] usb 5-1: USB disconnect, device number 25 [ 1769.756008][T17562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1769.874629][T17572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:50 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0) [ 1770.011169][T13161] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1770.080376][T17588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1770.190073][T17592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1770.211342][ T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1770.219870][ T3001] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1770.227905][T13161] usb 2-1: device descriptor read/64, error 18 07:10:51 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfcffffff00000000}, 0x0) [ 1770.392233][T17600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1770.499402][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1770.511340][T13161] usb 2-1: new high-speed USB device number 38 using dummy_hcd 07:10:51 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1770.602535][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1770.611641][ T3001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1770.620317][ T3001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.623849][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.668085][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1770.677045][ T3001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1770.688903][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1770.711129][T13161] usb 2-1: device descriptor read/64, error 18 07:10:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) [ 1770.717518][ T3001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.782933][T17614] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1770.831839][T13161] usb usb2-port1: attempt power cycle [ 1770.870790][T17616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1770.871779][ T3001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1770.880784][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1770.921108][ T3001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1770.947725][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1770.961708][ T3001] usb 1-1: Product: syz [ 1770.972728][ T3001] usb 1-1: Manufacturer: syz [ 1770.974100][ T7] usb 5-1: Product: syz [ 1771.009033][ T7] usb 5-1: Manufacturer: syz [ 1771.032778][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1771.038092][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1771.058151][ T3001] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1771.072373][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1771.560420][T13161] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1771.741471][T13161] usb 2-1: device descriptor read/8, error -61 [ 1772.011164][T13161] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1772.191545][T13161] usb 2-1: device descriptor read/8, error -61 [ 1772.311635][T13161] usb usb2-port1: unable to enumerate USB device 07:10:53 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:53 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:53 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfffffffffffff000}, 0x0) 07:10:53 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 07:10:53 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1772.826440][T13379] usb 5-1: USB disconnect, device number 26 [ 1772.835479][ T9889] usb 1-1: USB disconnect, device number 39 [ 1772.920354][T17657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1773.037009][T17679] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:53 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x2}, 0x0) [ 1773.161195][T13161] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1773.331277][T13379] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1773.343745][ T9889] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1773.364919][T13161] usb 2-1: device descriptor read/64, error 18 07:10:54 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3}, 0x0) 07:10:54 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1773.651139][T13161] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1773.711194][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1773.725793][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.741421][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1773.754380][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.757611][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1773.779386][T13379] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 07:10:54 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1773.814931][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1773.835543][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.851131][T13161] usb 2-1: device descriptor read/64, error 18 [ 1773.951691][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1773.960875][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1773.972694][T13161] usb usb2-port1: attempt power cycle [ 1773.981439][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1774.006255][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1774.014765][T13379] usb 5-1: Product: syz [ 1774.014785][T13379] usb 5-1: Manufacturer: syz [ 1774.053197][T13379] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1774.087477][ T9889] usb 1-1: Product: syz [ 1774.108528][ T9889] usb 1-1: Manufacturer: syz [ 1774.192214][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1774.197669][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1774.242698][ T9889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1774.691272][T13161] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1774.891276][T13161] usb 2-1: device descriptor read/8, error -61 [ 1775.161163][T13161] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1775.331394][T13161] usb 2-1: device descriptor read/8, error -61 [ 1775.451591][T13161] usb usb2-port1: unable to enumerate USB device 07:10:56 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:56 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:10:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x4}, 0x0) 07:10:56 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 07:10:56 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:10:56 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1776.010134][T13161] usb 5-1: USB disconnect, device number 27 [ 1776.052438][ T7] usb 1-1: USB disconnect, device number 40 [ 1776.082863][T17768] __nla_validate_parse: 6 callbacks suppressed [ 1776.082878][T17768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x5}, 0x0) [ 1776.249410][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:57 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1776.389872][ T3001] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1776.458380][T17802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6}, 0x0) [ 1776.581236][ T7] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1776.592479][ T3001] usb 2-1: device descriptor read/64, error 18 [ 1776.609439][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1776.619241][T13161] usb 5-1: new high-speed USB device number 28 using dummy_hcd 07:10:57 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:10:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1776.766828][T17822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1776.818919][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 07:10:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x7}, 0x0) 07:10:57 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1776.861474][ T3001] usb 2-1: new high-speed USB device number 46 using dummy_hcd 07:10:57 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1776.961728][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1776.970574][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.985588][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1776.991411][T13161] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1776.997476][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1777.028505][T13161] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.053097][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.053275][ T3001] usb 2-1: device descriptor read/64, error 18 [ 1777.087355][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1777.093702][T13161] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1777.144072][T13161] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1777.222094][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1777.241826][ T3001] usb usb2-port1: attempt power cycle [ 1777.242684][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1777.284156][ T7] usb 1-1: Product: syz [ 1777.299553][ T7] usb 1-1: Manufacturer: syz [ 1777.301467][T13161] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1777.324202][T13161] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1777.348927][T13161] usb 5-1: Product: syz [ 1777.371443][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1777.372555][T13161] usb 5-1: Manufacturer: syz [ 1777.376735][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1777.382678][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1777.442254][T13161] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1777.951186][ T3001] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1778.141672][ T3001] usb 2-1: device descriptor read/8, error -61 [ 1778.411132][ T3001] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1778.581242][ T3001] usb 2-1: device descriptor read/8, error -61 [ 1778.701633][ T3001] usb usb2-port1: unable to enumerate USB device 07:10:59 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1779.103820][T17875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1779.155124][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:00 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:00 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000"], 0x0) 07:11:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x8}, 0x0) 07:11:00 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:00 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:00 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1779.221364][ T3203] usb 1-1: USB disconnect, device number 41 [ 1779.258909][ T7] usb 5-1: USB disconnect, device number 28 07:11:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9}, 0x0) 07:11:00 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:00 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1779.601178][T13161] usb 2-1: new high-speed USB device number 49 using dummy_hcd 07:11:00 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:00 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1779.721135][ T3203] usb 1-1: new high-speed USB device number 42 using dummy_hcd 07:11:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xe}, 0x0) [ 1779.791123][ T7] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1779.981487][T13161] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1779.990178][T13161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.028626][T13161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1780.058897][T13161] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1780.121709][ T3203] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1780.130423][ T3203] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.165290][ T3203] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1780.178941][ T3203] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.199496][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1780.201645][T13161] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1780.210910][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.237782][T13161] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1780.252618][T13161] usb 2-1: Product: syz [ 1780.256985][T13161] usb 2-1: Manufacturer: syz [ 1780.260707][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1780.289279][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1780.312599][T13161] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1780.341637][ T3203] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1780.350774][ T3203] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1780.371925][ T3203] usb 1-1: Product: syz [ 1780.380756][ T3203] usb 1-1: Manufacturer: syz [ 1780.441678][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1780.452331][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1780.457579][ T3203] cdc_wdm 1-1:1.0: skipping garbage [ 1780.466556][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1780.482525][ T3203] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1780.491964][ T7] usb 5-1: Product: syz [ 1780.496213][ T7] usb 5-1: Manufacturer: syz [ 1780.516007][T13161] usb 2-1: USB disconnect, device number 49 [ 1780.552459][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1780.557888][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1782.326783][T13161] usb 1-1: USB disconnect, device number 42 07:11:03 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:03 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:03 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf}, 0x0) 07:11:03 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000"], 0x0) 07:11:03 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x4f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1782.398728][ T3203] usb 5-1: USB disconnect, device number 29 [ 1782.478322][T18007] __nla_validate_parse: 4 callbacks suppressed [ 1782.478334][T18007] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x60}, 0x0) 07:11:03 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:03 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1782.747459][ T7] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1782.783770][T18033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1782.852542][T13161] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1782.911252][ T3203] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1782.913595][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0}, 0x0) 07:11:03 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:03 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1783.115868][T18048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1783.126139][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1783.142760][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.172493][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1783.211702][T13161] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1783.214434][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1783.224254][T13161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.271248][ T3203] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1783.282759][ T3203] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.295873][T18052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:04 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1783.327763][T13161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1783.328425][ T3203] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1783.351908][T13161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:11:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x300}, 0x0) [ 1783.417115][ T3203] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1783.473071][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1783.497777][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1783.511778][T13161] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1783.520835][T13161] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1783.521062][ T7] usb 2-1: Product: syz [ 1783.541385][T18068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1783.571958][T13161] usb 1-1: Product: syz [ 1783.588263][T13161] usb 1-1: Manufacturer: syz [ 1783.592739][ T7] usb 2-1: Manufacturer: syz [ 1783.642049][ T3203] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1783.652724][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1783.657959][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1783.661063][ T3203] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1783.685488][T18069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1783.713632][ T3203] usb 5-1: Product: syz [ 1783.713673][T13161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1783.717824][ T3203] usb 5-1: Manufacturer: syz [ 1783.733937][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1783.792195][ T3203] cdc_wdm 5-1:1.0: skipping garbage [ 1783.801178][ T3203] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1783.937973][ T7] usb 2-1: USB disconnect, device number 50 07:11:06 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:06 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:06 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1785.509024][ T7] usb 5-1: USB disconnect, device number 30 07:11:06 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x4f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x500}, 0x0) 07:11:06 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000"], 0x0) [ 1785.580793][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1785.608386][ T9889] usb 1-1: USB disconnect, device number 43 07:11:06 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x600}, 0x0) 07:11:06 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1785.888832][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1785.951190][ T3203] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1786.001649][ T7] usb 5-1: new high-speed USB device number 31 using dummy_hcd 07:11:06 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:06 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1786.051144][ T9889] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1786.139084][T18164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x700}, 0x0) [ 1786.351382][ T3203] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1786.360040][ T3203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.382218][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1786.400301][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.415774][ T3203] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1786.431680][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1786.437404][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1786.450711][ T3203] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1786.450835][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.483584][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1786.540096][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1786.568155][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.631897][ T3203] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1786.645728][ T3203] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1786.656613][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1786.681174][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1786.689179][ T7] usb 5-1: Product: syz [ 1786.696201][ T3203] usb 2-1: Product: syz [ 1786.700604][ T3203] usb 2-1: Manufacturer: syz [ 1786.712096][ T7] usb 5-1: Manufacturer: syz [ 1786.712820][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1786.747273][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1786.762434][ T3203] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1786.772353][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1786.777647][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1786.779293][ T9889] usb 1-1: Product: syz [ 1786.801320][ T9889] usb 1-1: Manufacturer: syz [ 1786.862205][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1786.867623][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1786.883276][ T9889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1786.970682][ T3001] usb 2-1: USB disconnect, device number 51 07:11:09 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:09 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x900}, 0x0) [ 1788.578778][ T7] usb 5-1: USB disconnect, device number 31 [ 1788.632340][T18223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:09 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x4f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:09 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400"], 0x0) 07:11:09 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:09 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:09 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xe00}, 0x0) [ 1788.832929][ T7] usb 1-1: USB disconnect, device number 44 [ 1788.942063][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:09 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:09 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1789.161447][T13161] usb 2-1: new high-speed USB device number 52 using dummy_hcd 07:11:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0) [ 1789.231141][ T3001] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1789.258912][T18270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1789.341174][ T7] usb 1-1: new high-speed USB device number 45 using dummy_hcd 07:11:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf19}, 0x0) 07:11:10 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:10 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1789.531367][T13161] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1789.542597][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1789.555836][T13161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.593200][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1789.614336][ T3001] usb 5-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 1789.643205][T13161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1789.681716][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1789.695980][T13161] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1789.735508][ T3001] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1789.762158][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1789.776087][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.827457][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1789.850725][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.881493][T13161] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1789.890809][T13161] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1789.911744][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1789.920886][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1789.956792][T13161] usb 2-1: Product: syz [ 1789.961165][T13161] usb 2-1: Manufacturer: syz [ 1789.966545][ T3001] usb 5-1: Product: syz [ 1789.982012][ T3001] usb 5-1: Manufacturer: syz [ 1790.002314][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1790.017357][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1790.032814][T13161] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1790.035958][ T7] usb 1-1: Product: syz [ 1790.042061][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1790.048655][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1790.054509][ T7] usb 1-1: Manufacturer: syz [ 1790.072377][ T3001] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1790.112251][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1790.118815][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1790.141998][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1790.236678][ T7286] usb 2-1: USB disconnect, device number 52 [ 1791.866407][T13379] usb 5-1: USB disconnect, device number 32 07:11:12 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x190f}, 0x0) 07:11:12 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:12 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:12 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400"], 0x0) 07:11:12 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1792.065873][ T3001] usb 1-1: USB disconnect, device number 45 [ 1792.126113][T18350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:13 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000}, 0x0) [ 1792.353671][T18380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:13 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1792.411166][T13161] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1792.421211][ T9889] usb 2-1: new high-speed USB device number 53 using dummy_hcd 07:11:13 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1792.576930][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1792.591242][ T3001] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1792.704218][T18397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:13 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0) [ 1792.791610][T13161] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1792.800685][ T9889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1792.811843][T13161] usb 5-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 1792.835839][ T9889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.873206][T13161] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1792.885006][ T9889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1792.904987][T13161] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1792.918706][ T9889] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1792.952117][ T3001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1792.967709][ T3001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.996951][ T3001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1793.025229][ T3001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.081865][T13161] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1793.091656][ T9889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1793.101629][ T9889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1793.128040][T13161] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1793.145100][ T9889] usb 2-1: Product: syz [ 1793.158960][T13161] usb 5-1: Product: syz [ 1793.167273][ T9889] usb 2-1: Manufacturer: syz [ 1793.172175][T13161] usb 5-1: Manufacturer: syz [ 1793.181585][ T3001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1793.190630][ T3001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1793.203023][ T3001] usb 1-1: Product: syz [ 1793.207507][ T3001] usb 1-1: Manufacturer: syz [ 1793.214173][ T9889] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1793.232300][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1793.237672][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1793.250644][T13161] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1793.262438][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1793.269581][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1793.295869][ T3001] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1793.419617][T13379] usb 2-1: USB disconnect, device number 53 [ 1795.121646][ T3001] usb 5-1: USB disconnect, device number 33 07:11:16 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x30000}, 0x0) 07:11:16 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:16 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:16 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400"], 0x0) 07:11:16 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1795.227945][ T7] usb 1-1: USB disconnect, device number 46 [ 1795.338770][T18467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffff}, 0x0) [ 1795.491424][T18477] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:16 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:16 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1795.581524][T13379] usb 2-1: new high-speed USB device number 54 using dummy_hcd 07:11:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) [ 1795.699903][T18491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1795.719029][ T3001] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1795.731198][ T7] usb 1-1: new high-speed USB device number 47 using dummy_hcd 07:11:16 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1795.826545][T18496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:16 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1795.971676][T13379] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1795.984637][T13379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.004974][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1796.030703][T13379] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1796.080250][T13379] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1796.091260][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1796.093977][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1796.132737][T18516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1796.143821][ T3001] usb 5-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 1796.155827][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.177024][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1796.199377][ T3001] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1796.208369][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1796.247403][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.320504][T13379] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1796.333761][T13379] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1796.353295][T13379] usb 2-1: Product: syz [ 1796.364783][T13379] usb 2-1: Manufacturer: syz [ 1796.371539][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1796.389162][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1796.403062][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1796.416617][ T3001] usb 5-1: Product: syz [ 1796.417808][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1796.430934][T13379] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1796.432267][ T3001] usb 5-1: Manufacturer: syz [ 1796.478269][ T7] usb 1-1: Product: syz [ 1796.492654][ T7] usb 1-1: Manufacturer: syz [ 1796.502438][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1796.508446][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1796.531622][ T3001] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1796.543637][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1796.549571][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1796.566074][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1796.634695][ T7] usb 2-1: USB disconnect, device number 54 [ 1798.290256][ T3001] usb 5-1: USB disconnect, device number 34 07:11:19 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 07:11:19 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:19 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00"], 0x0) 07:11:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:19 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1798.473090][T13379] usb 1-1: USB disconnect, device number 47 [ 1798.533142][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1798.651634][T18583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:19 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) [ 1798.844581][ T9889] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1798.852458][ T3001] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1798.935212][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1799.011383][T13379] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1799.083654][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:19 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:19 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) [ 1799.221589][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1799.230558][ T9889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1799.239664][ T3001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.267496][ T9889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.312926][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1799.322985][ T9889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1799.357745][ T3001] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1799.373243][ T9889] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1799.431743][T13379] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1799.440375][T13379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.499259][T13379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1799.531408][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1799.537311][T13379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.541482][ T9889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1799.582811][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1799.592147][ T9889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1799.611863][ T3001] usb 5-1: Product: syz [ 1799.616501][ T9889] usb 2-1: Product: syz [ 1799.626312][ T3001] usb 5-1: Manufacturer: syz [ 1799.631532][ T9889] usb 2-1: Manufacturer: syz [ 1799.682326][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1799.687586][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1799.694201][ T9889] cdc_wdm 2-1:1.0: skipping garbage [ 1799.699507][ T9889] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1799.714627][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1799.721664][T13379] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1799.730354][ T3001] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1799.740657][T13379] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1799.776682][T13379] usb 1-1: Product: syz [ 1799.794609][T13379] usb 1-1: Manufacturer: syz [ 1799.862257][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1799.867568][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1799.893753][T13379] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1799.905755][ T3001] usb 2-1: USB disconnect, device number 55 [ 1800.441114][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1801.517472][T13161] usb 5-1: USB disconnect, device number 35 07:11:22 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:22 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 07:11:22 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:22 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00"], 0x0) 07:11:22 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1801.786397][T13379] usb 1-1: USB disconnect, device number 48 [ 1801.880189][T18682] __nla_validate_parse: 2 callbacks suppressed [ 1801.880203][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1802.059844][T18691] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) [ 1802.141227][ T3203] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1802.148967][ T7] usb 5-1: new high-speed USB device number 36 using dummy_hcd 07:11:22 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:23 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) [ 1802.331250][T13379] usb 1-1: new high-speed USB device number 49 using dummy_hcd 07:11:23 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1802.395875][T18714] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1802.528460][T18717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1802.561825][ T3203] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1802.570816][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1802.581589][ T3203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.607509][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 07:11:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x8000000}, 0x0) [ 1802.634530][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1802.644007][ T3203] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1802.690214][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1802.722644][T13379] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1802.735416][ T3203] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1802.756985][T13379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.769117][T13379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1802.778681][T13379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.886672][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1802.896684][ T3203] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1802.911866][T13379] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1802.921194][ T3203] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1802.929296][T13379] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1802.960069][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1802.968195][ T3203] usb 2-1: Product: syz [ 1802.972576][T13379] usb 1-1: Product: syz [ 1802.977149][T13379] usb 1-1: Manufacturer: syz [ 1802.981928][ T7] usb 5-1: Product: syz [ 1802.987229][ T7] usb 5-1: Manufacturer: syz [ 1803.003465][ T3203] usb 2-1: Manufacturer: syz [ 1803.068316][ T3203] cdc_wdm 2-1:1.0: skipping garbage [ 1803.075769][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1803.084378][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1803.090683][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1803.097281][ T3203] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1803.104958][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1803.116271][T13379] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1803.122367][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1803.128831][ T7] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1803.287683][ T7] usb 2-1: USB disconnect, device number 56 [ 1803.631112][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1804.828217][ T7] usb 5-1: USB disconnect, device number 36 07:11:25 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:11:25 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 07:11:25 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00"], 0x0) 07:11:25 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:25 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1804.992095][T13161] usb 1-1: USB disconnect, device number 49 [ 1805.063799][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1805.177614][T18791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:26 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xe000000}, 0x0) 07:11:26 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1805.331378][ T3001] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1805.348824][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1805.362523][T13379] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1805.466153][T18810] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:26 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:26 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1805.541520][T13161] usb 1-1: new high-speed USB device number 50 using dummy_hcd 07:11:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) [ 1805.619129][T18823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1805.701612][ T3001] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1805.718410][ T3001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.730243][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1805.743164][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1805.767146][ T3001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1805.768258][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.803636][ T3001] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 07:11:26 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1805.833700][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1805.869001][T13379] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 07:11:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x190f0000}, 0x0) [ 1805.911423][T13161] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1805.929587][T13161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 07:11:26 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1805.961559][ T3001] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1805.978050][T13161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1805.996318][ T3001] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1806.031702][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1806.041194][T13161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.054436][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1806.057772][ T3001] usb 2-1: Product: syz [ 1806.077131][T13379] usb 5-1: Product: syz [ 1806.081157][ T3001] usb 2-1: Manufacturer: syz [ 1806.085540][T13379] usb 5-1: Manufacturer: syz [ 1806.142596][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1806.144377][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1806.151587][ T3001] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1806.174257][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1806.198856][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1806.219440][T13379] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1806.221571][T13161] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1806.282190][T13161] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1806.312637][T13161] usb 1-1: Product: syz [ 1806.316875][T13161] usb 1-1: Manufacturer: syz [ 1806.348132][ T3001] usb 2-1: USB disconnect, device number 57 [ 1806.432416][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1806.437667][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1806.468414][T13161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device 07:11:27 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002"], 0x0) [ 1807.331286][T13379] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1807.741869][T13379] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1807.750565][T13379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.770531][T13379] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1807.782286][T13379] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1807.931402][T13379] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1807.946550][T13379] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1807.956863][T13379] usb 2-1: Product: syz [ 1807.961516][T13379] usb 2-1: Manufacturer: syz [ 1808.022525][T13379] cdc_wdm 2-1:1.0: skipping garbage [ 1808.027789][T13379] cdc_wdm 2-1:1.0: skipping garbage [ 1808.040045][T13379] cdc_wdm: probe of 2-1:1.0 failed with error -22 07:11:28 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1808.100812][T13379] usb 5-1: USB disconnect, device number 37 [ 1808.234931][ T7] usb 2-1: USB disconnect, device number 58 07:11:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x60000000}, 0x0) 07:11:29 executing program 3: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xff, &(0x7f0000000f00)={0x5, 0xf, 0xff, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd6, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f637"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:29 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1808.368826][ T3001] usb 1-1: USB disconnect, device number 50 [ 1808.423461][T18922] __nla_validate_parse: 1 callbacks suppressed [ 1808.423475][T18922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1808.571210][T13379] usb 5-1: new high-speed USB device number 38 using dummy_hcd 07:11:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 1808.639219][T18940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1808.721304][ T3203] usb 4-1: new high-speed USB device number 13 using dummy_hcd 07:11:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:29 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002"], 0x0) [ 1808.824103][T18951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1808.901461][ T3001] usb 1-1: new high-speed USB device number 51 using dummy_hcd 07:11:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 07:11:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1808.951862][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1808.969661][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.984905][T18961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1809.019925][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1809.057363][T13379] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x53, skipping 07:11:29 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1809.101722][ T3203] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1809.117537][ T3203] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.156161][ T3203] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1809.188851][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1809.200265][ T3203] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.212281][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1809.227892][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1809.251207][ T5] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1809.263672][T13379] usb 5-1: Product: syz [ 1809.271595][ T3001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1809.282472][ T3001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.291614][T13379] usb 5-1: Manufacturer: syz [ 1809.341601][ T3001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1809.352496][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1809.359027][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1809.367401][ T3001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.396236][T13379] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1809.422054][ T3203] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1809.443137][ T3203] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1809.470875][ T3203] usb 4-1: Product: syz [ 1809.484563][ T3203] usb 4-1: Manufacturer: syz [ 1809.512186][ T3001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1809.525793][ T3001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1809.551492][ T3001] usb 1-1: Product: syz [ 1809.556446][ T3001] usb 1-1: Manufacturer: syz [ 1809.556534][ T3203] cdc_wdm 4-1:1.0: skipping garbage [ 1809.577917][ T3203] cdc_wdm 4-1:1.0: skipping garbage [ 1809.605827][ T3203] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1809.612436][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1809.618648][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1809.652532][ T3001] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1809.671404][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1809.691671][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.719655][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1809.736114][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1809.921318][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1809.951355][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1810.001253][ T5] usb 2-1: Product: syz [ 1810.026416][ T5] usb 2-1: Manufacturer: syz [ 1810.102494][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1810.108409][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1810.131454][ T5] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1810.161103][ C1] cdc_wdm 4-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1810.181102][ C1] cdc_wdm 4-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1810.308491][ T3001] usb 2-1: USB disconnect, device number 59 [ 1810.421279][ C1] cdc_wdm 4-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1810.687455][ T7] usb 4-1: USB disconnect, device number 13 07:11:31 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfcffffff}, 0x0) 07:11:31 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:31 executing program 3: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0xff, &(0x7f0000000f00)={0x5, 0xf, 0xff, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd6, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f637"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1811.170604][ T3001] usb 5-1: USB disconnect, device number 38 [ 1811.260012][T19033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1811.581349][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd 07:11:32 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x94, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede4160000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:32 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002"], 0x0) 07:11:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 07:11:32 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1811.711184][ T3001] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1811.732366][ T17] usb 1-1: USB disconnect, device number 51 [ 1811.805223][T19064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:32 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1811.951576][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1811.969522][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.994619][T19079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1812.011237][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1812.044093][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:11:32 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1812.091549][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1812.100848][T13161] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1812.115009][ T3001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.162496][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1812.179416][ T3001] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x53, skipping [ 1812.210587][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1812.224504][ T17] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1812.233890][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1812.262323][ T7] usb 4-1: Product: syz [ 1812.270808][T19090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1812.286659][ T7] usb 4-1: Manufacturer: syz [ 1812.311932][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1812.333103][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1812.352451][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 1812.357704][ T7] cdc_wdm 4-1:1.0: skipping garbage 07:11:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 1812.374360][ T3001] usb 5-1: Product: syz [ 1812.393872][ T7] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1812.396484][ T3001] usb 5-1: Manufacturer: syz [ 1812.405223][T19092] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1812.472096][T13161] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1812.492212][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1812.497655][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1812.505874][T13161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.524076][ T3001] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1812.537854][T13161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1812.562740][T13161] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.602236][ T17] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1812.610951][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.643060][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1812.675236][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.751858][T13161] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1812.766686][T13161] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1812.789902][T13161] usb 2-1: Product: syz [ 1812.803061][T13161] usb 2-1: Manufacturer: syz [ 1812.841683][ T17] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1812.852519][T13161] cdc_wdm 2-1:1.0: skipping garbage [ 1812.857771][T13161] cdc_wdm 2-1:1.0: skipping garbage [ 1812.864909][ T17] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1812.880555][T13161] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1812.890095][ T17] usb 1-1: Product: syz [ 1812.896552][ T17] usb 1-1: Manufacturer: syz [ 1812.943736][ T17] cdc_wdm 1-1:1.0: skipping garbage [ 1812.949015][ T17] cdc_wdm 1-1:1.0: skipping garbage [ 1812.964024][ T17] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1813.065347][ T7] usb 2-1: USB disconnect, device number 60 [ 1813.521158][ C0] cdc_wdm 4-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1813.541109][ C0] cdc_wdm 4-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1813.811205][ C0] cdc_wdm 4-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1814.098165][T13161] usb 4-1: USB disconnect, device number 14 [ 1814.101088][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1814.110786][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1814.116874][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 07:11:35 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 07:11:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1814.315593][ T3203] usb 5-1: USB disconnect, device number 39 [ 1814.385024][T19152] __nla_validate_parse: 1 callbacks suppressed [ 1814.385038][T19152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1814.458940][T19156] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1814.480178][T19156] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:35 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xd500000000000000) [ 1814.709747][T19167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1814.780657][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1814.802659][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1814.831379][ T3203] usb 5-1: new high-speed USB device number 40 using dummy_hcd 07:11:35 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x94, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede4160000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:35 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009"], 0x0) 07:11:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffffffc}, 0x0) 07:11:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1814.875977][ T7] usb 1-1: USB disconnect, device number 52 07:11:35 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x65020000) [ 1814.955128][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1815.046573][T19193] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1815.064391][T19193] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1815.095521][T19201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:11:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0) [ 1815.221544][ T3203] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1815.233222][ T3203] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.246358][ T5] usb 2-1: new high-speed USB device number 61 using dummy_hcd 07:11:36 executing program 3: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1815.279526][ T3203] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1815.293776][ T3203] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x53, skipping [ 1815.411544][ T7] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1815.441317][ T3203] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1815.463177][ T3203] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1815.485236][ T3203] usb 5-1: Product: syz [ 1815.493361][ T3203] usb 5-1: Manufacturer: syz [ 1815.542883][ T3203] cdc_wdm 5-1:1.0: skipping garbage [ 1815.549682][ T3203] cdc_wdm 5-1:1.0: skipping garbage [ 1815.565541][ T3203] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1815.641602][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1815.651319][T13379] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1815.662836][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.687946][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1815.701219][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1815.790090][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1815.799688][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.815359][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1815.824958][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.851670][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1815.861296][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1815.869705][ T5] usb 2-1: Product: syz [ 1815.877356][ T5] usb 2-1: Manufacturer: syz [ 1815.924121][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1815.929653][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1815.936612][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1815.943914][ T5] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1815.962054][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1815.973073][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1815.982204][ T7] usb 1-1: Product: syz [ 1815.986855][ T7] usb 1-1: Manufacturer: syz [ 1816.052457][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1816.057750][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1816.063683][T13379] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1816.089591][T13379] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.116180][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1816.165593][T13379] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1816.224213][T13379] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.293692][ T7] usb 2-1: USB disconnect, device number 61 [ 1816.401870][T13379] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1816.416241][T13379] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1816.424824][T13379] usb 4-1: Product: syz [ 1816.430019][T13379] usb 4-1: Manufacturer: syz [ 1816.483482][T13379] cdc_wdm 4-1:1.0: skipping garbage [ 1816.488795][T13379] cdc_wdm 4-1:1.0: skipping garbage [ 1816.508686][T13379] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1816.621118][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 07:11:38 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 07:11:38 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009"], 0x0) [ 1817.447004][T13379] usb 5-1: USB disconnect, device number 40 [ 1817.787056][ T5] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1817.951201][T13379] usb 5-1: new high-speed USB device number 41 using dummy_hcd 07:11:38 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x94, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede4160000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1817.991578][ T7] usb 1-1: USB disconnect, device number 53 [ 1818.001166][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1818.008291][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1818.014395][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1818.162055][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1818.172646][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.201356][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 07:11:39 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c00000000580002005400"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 1818.201409][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1818.331916][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1818.341401][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1818.350448][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1818.366110][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.379093][ T5] usb 2-1: Product: syz [ 1818.383967][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1818.395013][ T5] usb 2-1: Manufacturer: syz [ 1818.403331][T13379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.452738][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1818.458684][ T5] cdc_wdm 2-1:1.0: skipping garbage 07:11:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 1818.495140][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1818.519162][ T5] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1818.531360][ T7] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1818.542647][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1818.559816][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 07:11:39 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c00000000580002005400"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1818.574024][T13379] usb 5-1: Product: syz [ 1818.580025][T13379] usb 5-1: Manufacturer: syz [ 1818.622616][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1818.628669][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1818.641666][T13379] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1818.656550][T13161] usb 2-1: USB disconnect, device number 62 [ 1818.921705][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1818.933596][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.947839][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1818.958648][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:11:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 1819.093347][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1819.094017][T13161] usb 4-1: USB disconnect, device number 15 [ 1819.123432][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1819.158272][ T7] usb 1-1: Product: syz [ 1819.170770][ T7] usb 1-1: Manufacturer: syz [ 1819.252023][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1819.257280][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1819.283963][ T7] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 07:11:41 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:41 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c00000000580002005400"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:41 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009"], 0x0) 07:11:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c00000000580002005400"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1820.554100][T22412] usb 5-1: USB disconnect, device number 41 [ 1820.626011][T19379] __nla_validate_parse: 13 callbacks suppressed [ 1820.626025][T19379] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1820.697308][T19378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1820.891147][T13161] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1821.031140][T22412] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1821.261249][T13161] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1821.269908][T13161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.290063][T13161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1821.299169][T13161] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1821.431214][T22412] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1821.431271][T13161] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1821.448254][T22412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.449260][T13161] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1821.468899][T22412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1821.483053][T13161] usb 2-1: Product: syz [ 1821.489086][T22412] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.492068][T13161] usb 2-1: Manufacturer: syz [ 1821.562012][T13161] cdc_wdm 2-1:1.0: skipping garbage [ 1821.567268][T13161] cdc_wdm 2-1:1.0: skipping garbage [ 1821.591659][T13161] cdc_wdm 2-1:1.0: skipping garbage [ 1821.596974][T13161] cdc_wdm: probe of 2-1:1.0 failed with error -22 07:11:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 07:11:42 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:42 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x99, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/153) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:42 executing program 3 (fault-call:17 fault-nth:0): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1821.631584][T22412] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1821.668977][T22412] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1821.698962][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1821.712972][T22412] usb 5-1: Product: syz [ 1821.728650][T22412] usb 5-1: Manufacturer: syz [ 1821.767826][ T3001] usb 2-1: USB disconnect, device number 63 [ 1821.768218][ T5] usb 1-1: USB disconnect, device number 54 [ 1821.792822][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1821.814025][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1821.855709][T22412] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1821.871822][T19417] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1821.874897][T19411] FAULT_INJECTION: forcing a failure. [ 1821.874897][T19411] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.905672][T19411] CPU: 0 PID: 19411 Comm: syz-executor.3 Not tainted 5.10.0-rc7-syzkaller #0 [ 1821.907396][T19417] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1821.914446][T19411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1821.914454][T19411] Call Trace: [ 1821.914479][T19411] dump_stack+0x107/0x163 [ 1821.914501][T19411] should_fail.cold+0x5/0xa [ 1821.914518][T19411] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1821.914536][T19411] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1821.914556][T19411] should_failslab+0x5/0x10 [ 1821.914571][T19411] __kmalloc+0x72/0x3e0 [ 1821.914593][T19411] tomoyo_realpath_from_path+0xc3/0x620 [ 1821.914613][T19411] ? tomoyo_profile+0x42/0x50 [ 1821.914638][T19411] tomoyo_path_number_perm+0x1d5/0x590 [ 1821.983705][T19411] ? tomoyo_path_number_perm+0x18d/0x590 [ 1821.989356][T19411] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1821.995213][T19411] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1822.000782][T19411] ? __fget_files+0x294/0x400 [ 1822.005879][T19411] security_file_ioctl+0x50/0xb0 [ 1822.011023][T19411] __x64_sys_ioctl+0xb3/0x200 [ 1822.015717][T19411] do_syscall_64+0x2d/0x70 [ 1822.021304][T19411] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1822.028330][T19411] RIP: 0033:0x45e159 [ 1822.032713][T19411] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:11:42 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 1822.052333][T19411] RSP: 002b:00007f3f40496c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1822.061679][T19411] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000045e159 [ 1822.069667][T19411] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1822.078664][T19411] RBP: 00007f3f40496ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1822.086674][T19411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1822.094678][T19411] R13: 00000000016afb7f R14: 00007f3f404979c0 R15: 000000000119bf8c [ 1822.214206][T19444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:43 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905"], 0x0) [ 1822.328094][T19446] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1822.356556][T19446] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1822.391362][ T5] usb 1-1: new high-speed USB device number 55 using dummy_hcd 07:11:43 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1822.503199][T19411] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1822.520782][T19459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1822.578987][T19464] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1822.721203][ T3001] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1822.781473][ T5] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1822.790130][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.812002][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1822.826606][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.965441][ T5] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1822.974770][ T5] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1822.992428][ T5] usb 1-1: Product: syz [ 1823.022590][ T5] usb 1-1: Manufacturer: syz [ 1823.085141][ T5] cdc_wdm 1-1:1.0: skipping garbage [ 1823.090407][ T5] cdc_wdm 1-1:1.0: skipping garbage [ 1823.091558][ T3001] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1823.123180][ T5] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1823.140748][ T3001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.199686][ T3001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1823.262025][ T3001] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1823.441957][ T3001] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1823.451236][ T3001] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1823.459263][ T3001] usb 2-1: Product: syz [ 1823.463648][ T3001] usb 2-1: Manufacturer: syz [ 1823.512628][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1823.519077][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1823.534847][ T3001] cdc_wdm: probe of 2-1:1.0 failed with error -22 07:11:44 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 07:11:44 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:11:44 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b62656469740024000280060007"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1823.649620][ T5] usb 5-1: USB disconnect, device number 42 [ 1823.721772][ T7] usb 2-1: USB disconnect, device number 64 07:11:44 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b62656469740024000280060007"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 1824.171300][ T5] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1824.531296][ T5] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1824.540188][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.553138][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1824.562865][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.711246][ T5] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1824.711269][ T5] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1824.711284][ T5] usb 5-1: Product: syz [ 1824.711313][ T5] usb 5-1: Manufacturer: syz [ 1824.783543][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1824.788783][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1824.821596][ T5] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device 07:11:45 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x99, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/153) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:45 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x2, 0x0) 07:11:45 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b62656469740024000280060007"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:45 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905"], 0x0) 07:11:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 1825.067327][ T9889] usb 1-1: USB disconnect, device number 55 07:11:46 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974002400028006000700000000"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1825.431143][ T3001] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1825.571450][ T9889] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1825.801262][ T3001] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1825.810085][ T3001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.823505][ T3001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1825.833662][ T3001] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1825.941246][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1825.950043][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.963217][ T3001] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1825.972946][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1825.982482][ T3001] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1825.990602][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.002155][ T3001] usb 2-1: Product: syz [ 1826.006467][ T3001] usb 2-1: Manufacturer: syz [ 1826.052433][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1826.057712][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1826.072110][ T3001] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1826.131426][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1826.141640][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1826.149735][ T9889] usb 1-1: Product: syz [ 1826.154061][ T9889] usb 1-1: Manufacturer: syz [ 1826.202577][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1826.207830][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1826.229033][ T9889] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1826.272208][ T9889] usb 2-1: USB disconnect, device number 65 07:11:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xe00000000000000}, 0x0) 07:11:47 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x10, 0x0) 07:11:47 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974002400028006000700000000"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:47 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1826.761151][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1826.767793][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1826.769246][ T9889] usb 5-1: USB disconnect, device number 43 [ 1826.773885][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 07:11:47 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905"], 0x0) [ 1826.876196][T19628] __nla_validate_parse: 21 callbacks suppressed [ 1826.876209][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1826.954700][T19638] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1826.979447][T19638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.002038][T19638] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.039281][T19638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:47 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974002400028006000700000000"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1827.191300][T22438] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1827.205944][T19653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.277664][T19655] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.287362][T19655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.291238][ T9889] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1827.320101][T19655] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.356254][T19655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.601648][T22438] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1827.610327][T22438] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.665657][T22438] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1827.671280][ T9889] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1827.686526][ T9889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.708415][ T9889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1827.714936][T22438] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1827.718055][ T9889] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.861282][ T9889] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1827.870516][ T9889] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1827.871299][T22438] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1827.879146][ T9889] usb 5-1: Product: syz [ 1827.892602][ T9889] usb 5-1: Manufacturer: syz [ 1827.924746][T22438] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1827.932143][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1827.937977][ T9889] cdc_wdm 5-1:1.0: skipping garbage [ 1827.946037][T22438] usb 2-1: Product: syz [ 1827.950903][T22438] usb 2-1: Manufacturer: syz [ 1827.961260][ T9889] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1828.012316][T22438] cdc_wdm 2-1:1.0: skipping garbage [ 1828.018641][T22438] cdc_wdm 2-1:1.0: skipping garbage [ 1828.041803][T22438] cdc_wdm: probe of 2-1:1.0 failed with error -22 07:11:48 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x99, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/153) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 07:11:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x7a0, 0x0) 07:11:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b62656469740024000280060007000000000018"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1828.151097][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1828.175739][T22438] usb 1-1: USB disconnect, device number 56 [ 1828.216019][ T5] usb 2-1: USB disconnect, device number 66 07:11:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b62656469740024000280060007000000000018"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:49 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x7a7, 0x0) 07:11:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x190f000000000000}, 0x0) 07:11:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b62656469740024000280060007000000000018"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:49 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x7af, 0x0) [ 1828.711276][T22438] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1829.101370][T22438] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1829.113038][T22438] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.143203][T22438] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1829.169880][T22438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.324698][T22438] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1829.339696][T22438] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1829.376281][T22438] usb 1-1: Product: syz [ 1829.395159][T22438] usb 1-1: Manufacturer: syz [ 1829.462571][T22438] cdc_wdm 1-1:1.0: skipping garbage [ 1829.467825][T22438] cdc_wdm 1-1:1.0: skipping garbage [ 1829.508782][T22438] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 07:11:50 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:50 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974002400028006000700000000001800"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:50 executing program 1: lstat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000000)) keyctl$get_persistent(0x16, r0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0], 0x0) [ 1829.911921][ T5] usb 5-1: USB disconnect, device number 44 [ 1830.211274][T22438] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1830.401225][ T5] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1830.408964][T22438] usb 2-1: device descriptor read/64, error 18 [ 1830.691443][T22438] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1830.801400][ T5] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1830.810042][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.830697][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1830.844195][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.891614][T22438] usb 2-1: device descriptor read/64, error 18 [ 1830.981413][ T5] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1830.990520][ T5] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1831.007095][ T5] usb 5-1: Product: syz [ 1831.014674][T22438] usb usb2-port1: attempt power cycle [ 1831.020150][ T5] usb 5-1: Manufacturer: syz [ 1831.072373][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1831.077631][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1831.101837][ T5] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1831.291165][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes 07:11:52 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x9b, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/155) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 07:11:52 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 07:11:52 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974002400028006000700000000001800"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1831.390011][ T17] usb 1-1: USB disconnect, device number 57 07:11:52 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b6265646974002400028006000700000000001800"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:52 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x541b, 0x0) 07:11:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 1831.721204][T22438] usb 2-1: new high-speed USB device number 69 using dummy_hcd 07:11:52 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:52 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x5421, 0x0) [ 1831.915455][T19849] __nla_validate_parse: 18 callbacks suppressed [ 1831.915470][T19849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1831.921250][T22438] usb 2-1: device descriptor read/8, error -61 [ 1831.932191][ T17] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1831.999710][T19850] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1832.018306][T19850] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1832.231306][T22438] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1832.311461][ T17] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1832.320106][ T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.342031][ T17] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1832.356517][ T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.422933][T22438] usb 2-1: device descriptor read/8, error -61 [ 1832.491409][ T17] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1832.505296][ T17] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1832.524372][ T17] usb 1-1: Product: syz [ 1832.534839][ T17] usb 1-1: Manufacturer: syz [ 1832.542539][T22438] usb usb2-port1: unable to enumerate USB device [ 1832.582913][ T17] cdc_wdm 1-1:1.0: skipping garbage [ 1832.588153][ T17] cdc_wdm 1-1:1.0: skipping garbage [ 1832.605337][ T17] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 07:11:53 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:53 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1833.032634][T22412] usb 5-1: USB disconnect, device number 45 [ 1833.079284][T19885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1833.163282][T19896] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1833.178818][T19896] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1833.531207][T22412] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1833.901513][T22412] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1833.910223][T22412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.928266][T22412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1833.942403][T22412] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.083602][T22412] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1834.093642][T22412] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1834.108636][T22412] usb 5-1: Product: syz [ 1834.117772][T22412] usb 5-1: Manufacturer: syz [ 1834.162414][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1834.167666][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1834.190665][T22412] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1834.381118][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes 07:11:55 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x9b, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/155) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:55 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x5450, 0x0) 07:11:55 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000080)=@ipx={0x4, 0x1f, 0x5b1ccb22, "9d2e2e763357", 0xff}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)="e4986b8840b082c20d8284493421d22e6c4d0132b667b327d770fb00bd4f84bb5c707b155de4d6b829960b99f27da5ba1bb32e380052290606c2381d44602fd2332d19fb5eead662550050e6a49b6edc72d362c708354cf7041f7b32ce69c68efbc0f2bf4e4984ef171b71035f7538619ffbc505c35adad8038f4c3dac96b74a7392cd4d0e939ffcd30a0ec39170dd32e25b7ef05d80959dfca2f14ed364e2b8cc02ce371701d27149a5a2add15f226584254505711d4a0d7b011b3790c445999a465aef266ab7f1a42a9e69e40e96586019d9f2a8b6a9a133f43c0717", 0xdd}, {&(0x7f0000000200)="9873d9fdea141c2ba689578e172bab5eb51a289a7868fa2522d15fb0a60730df5d009a4c547bed18", 0x28}, {&(0x7f0000000240)="cd1bec59b26227cb5bd4c55ca838083e64587ac0f20b70510128ebd334dc427d58025c829ad3294b7b499d16d0d9c17f7c0c69e6be3d3a5a12e98bfe27a2b6cffef2eb1303498b9608068ff9b4ce3ae9c93343c09d29d531dabce66782b98225ae666ece4675de4c20a0db65527bf76197297eeba0a509cef3902e133782923a81178d70eff16ab03308d3b32ae235e5a68fc8d8fa3d619965155f7641f22fce0e526102dde54c7c299e53eb05a091a636b2b29dd5fa74e9be01c52e923796a5430a6f7aab4f1b3bbd9e3823e3a950aa125db43b612f37ba2a4eb35c35bc81b661da77daa4b9c342d439908f60f8d86050d832cb7a8b3a4636d2a16a2c8dee62b09d73029d0311be194ad7f8771a5d3691d2f57dd4b9a50ba2649aadb80a7678d0a649c6eba3c919b7a766f66a225d49386e5d68b29b0cc743b81f0d88cfec2d0744370715ecb46db2b5162ec368afb01cd67cc9f79cb514d7b88952063752841eea05712cea2a08e742700e3ff2b483e3feea2a2ab6f1f4a90476938fe986915414ce390754d442ce46ba3519fabbb07fe24760a41d0b650e1ede36092a321b8942fea44acd9f29a19b62577b606e629c7719effd9dd70bcb7223430220119406aceb143dd1bf79ad19dc9e322284d451dac2baed3e1d684a503e34f6eeb8143c833be71ebdae2717abe45059d7aecf8ac5bc2fa7a687fa59d50b02d8059a8631b0fb974f9fd040b8531daee62ea926f375e30c9de45e00e48301c89ca2b8c71a9f684edeed9397b3590d3be1ad477e9038df715f5f7cc704ccc3929df37aec60641abc1dcdc4a640acb344305a2f9cd40e751664158600c22da22e2c63677dcc08302e2b1f6710e89c15328b0f75b6dd99abf87d9d3c2c31d316a5ea816f0c85408185fd53026c3d471b476d5068029dbdfb8c7742aee62b5944e2d7cfcabaa36bf54ba930b4136c9e1793044414fb4ecd029bce20fe7ae68803e410fd861dc90b455f65dbeaf7aba6d875befa82a8bd84978cb9469fb30adb2c1421c45d05ebdf4bb2ac58ee50711e0469162bd35ea3045b35247f56143d7722254389a6bc22ebc79914f323b098acc011a26aabd139e44ed192c3898f427e82afe67cd3ed3163f08e5bb91f1b9f1ca7e572ed4ccb24cfdbc97e15a8bde667b642f86264a8590713842b22a15101945b238b7653cbc4932f94475714fb79e117e0d21ebce03a4711121a76d3a04b99261a488a9af84fc18505e8d02a0a75834ace3c0288455c2660969b47b7f3d398ca80c848cba87be3a83321091b45255c55a316597e6f47d5c410792baf619b4188084a8780e6911f34ece75e448bcbf6f11eca57c933e6543f2f86f929e6bc569643d7c5816a1cb435701656cf94fc223a675e458bd6bd8cbe9fe08e886ef9c510450edc75dce73340f0cfb7befd6e50540d9449475da1a2a9a603c3a9f8b0a0ce9d86b2eb43343bdac437ecffee23bbf0c331b4ffb17d24f98ba3523d36a81e1cb5d26a5025c7f31dddcd7822696cde519dd32a02884e60b6f9862d3cbf69cab80f1aa631ee6d1536ba2ab31cfa260c97342926fc857bbf2a7e341898cc4f9690fd0e7c44af561d54aef77977b7244c62c3bc0151b498b71063f27c68de6482bf2b7b8481187e3c98bff6170ebbc0972b687342342b0d959fc601e6b05bf2d9a185fd46f6527ebcec2925002c728e3e70b56cb1044ceec14e5f0c4f6f2d28e1287d2d3f0ea6cc914cbccdc2255abad2fc80c447d206aa9d3933c318c30cdc1769a7b7c7482993b81935e18f74b4c73ea7e815d9971847dc7ee92083ca2b9b86e45952a944952aa33d77c7023e8f80b385df9a0ccfb44e799b409f22e4ab95fc31afbdb35dbc3615b0b2d242064712d4333d7a2f703c0512a5c936bbc99387704768c9a689a58caa95da79dc417a378beffb99c16254da35af4aae4d63b5a7e71e399ed4f73569c991bd42bea7da4ad1467679e269761246acb067169416d4cb32d4b009cc768473818f789a3a4e461ac5b78edf2cda1f92c0c3e197680f501bbab6dec60ef9be3c2ae71d15e1293d09b974a4b926309a8fcf069ff9a1770cb558b94006aa530e74c63730375ae4b173af657fb6856bcc2d28e70484b6f9f38452c4c88fef4ee953d15a3ddf5ee96931bb800136368ffe58c9936191f00ff65046f16f95bf28377cc96648650f96218da4aeb01bdc2aea69d3c370f1e9fae616f65ca51b77eb6884e9b2976fb6e0cdd06390f4498a1b49f5b491415bb1000c231a411aef0c577045037580f4b838e4dc7edbb110042a473650999e22d4f11a052876ad84049690b5f9e736ad3c877097aa4fee9d86755a625534107ff44ff9678618e1ca07306930247a29898001f5256905ffb2911bd63b6d07bcb55aa319fe29e05dbfce9aef554deb76fe928f1ce750e3dcdb4b8ab9e9bb5fffb6e230bfcd06c7f0e9697d4eef3dc68016b1c5c46e7814ba91bb420b1ed8b9b39816be67709e2ae901ce03a864ec1eff134076911eecc607fdbbfce48919d240ed3b51c20ab7b8c6f788b54bea81ef938d037f4d6705b3a373e1aeea85dcd6b6b79337774a0ad2eebfc1a9bc3626a085964ba3cde296bba377222189a2b7adcb5a7b92f837771b573c731dd3632a9520b50f783eb40b2f1bb2075334ee2f24f94b2054bfc835d185f5a62ece85ad189cdcb254a59fe5c3827d3952102bf599091a58d183a14668034b5abd8a0b15277716c606242ca5004851070d430ff95a35f31d07713c8d32ac88581ec56c15e7e4fe30922e09f9c2a1c014a8d09fa0fb39dab439763b21eeb8d311b5544aa7fd1da7902d02054480a9595f7cc3fb9fa5dd152d8590f643281d870840b68cae5154ede75cd82c272c0a16dbee966928ceb6682291924cd4ca8c15f67a390f7037e82216785a7b7e5c72ed2823441bf120e835050f34a62045b94dc6ef23b0bc0c0e119b44aa27af8989732a8ed6e41e2b243c903f2720a65f4b93c50c745afcf48d2a43e5c4b4b779518ecb71769df78c2610c506c985a57ac5dadb3ed0fe55778a08e241e16377e6ec61209098a1481e0985d7986b9bfc8adefa68a1d7fade8c08c0fb26a1e7323bb18d66a4b23e9d56832816d3293f6ec0ef54a9775247857a4fee2c02e3f0183e43b0b2a0541606b409b9f04b97567fa747a557a45dc987d6a9756224d1218a0f8c3f496b18a97eb77d12f78a94881e254bb18ac9ace775c92f5d1622aafafc42dbafa2de7b24946b07af90005a020d85ecd9b1cb44e3549fcd48f83f79e22fb1a5d89faf64f46e6fedca53d64661436f45dc6a761282e271379afac97dacbadbd77590d10efb6a70a524d002b44951998b5877d2f3c3031d3e65b3215d14e6ae5c0790aa958e2c3de1c87b05f07b6c7e70da43175cf78c8b19298f136dce3849eda689c5c4acd40b2e1d405a8beb3665a5ae0bdcc7bf41ceb45528a57a0257a002011bf1448ea8a9e78453f45d1903897825ab3a08ddd4bd0c93a15587356f8972f7a8dd66826b7ec56f43ebca19c19d34eadf8025022ea291bb0e95ea7d19022480f868d0536390f10147e6c618898e5be7fdd3772ed1f5ce44191bb63989667752beced9a541aabc4c65885e382ca8ca34ce684b910b786a3741bf0954c5ae460181816ae4de8e7981826f7a9ad1e885b68ef3f90bf28c167df755dc8ae1edc8a5582e71b227bf87641f8bc0c1d5d862dfb5465ebc4dbe5d8d80a82fdc765cb066460d3b1b91b98661f6466d32de73c35381cab905c51560f840d5816fd7df6c99fe87334e1875c01f39c3b98d14f296b495ac7681b9e21dca62eb813b75bfd8cf3ce1c1e5ea660b449450c52161a233c80d904c418335d32a6918a815935517439721d7ff69facdd1996ada2daf34644d3578dbbbf9f587a8b1254e41ffaeff557b77216e20382768537931e707f8fc8d22cf63aedf6c51ec27e9cdf9533b1cc28bb0121485541de517425b25f979ba20c911155e1f9199e84e4979777670597dd5237e514515315a83d91688fb0d549ea5df4bf1ba8704dba6549005aa5e28ce22a79d78c36f9e0d088cdefab02c9e526e0415e77c571d9d86ca85bc03b18805be306af227546dee8ddbab3c62633561318af190ba5f027ea16f289de3844c6302e6be2875b2dfb3cf8737c5de1dbcd710100a15c04f0fbae9b6707469ec682686a3a8e0f15e07edcd1735d3d4011850a230a5c40328cbbe66f264accfbea9c472a21f797e65fd4f305a931593042f5a5bf319648a83245de5073913769ddaed12fa24b0c72813c7023c1185a6a55c0a314237633dd58e500dce7b88870af9187f665e0b58c6f0a5e18503d182cc61c8fc948ee6d292e7bf3b9f77caae6c7062fd2f9380dde500ddd319623a14ab5a38fdfa25adf3d6d140f06d56308b208e4d077532ae82ac894cc26d6c1a94054526a19ad66f6d92b3b729bec56861277f5d2048aa579139a48326e502b265cee5566e09c1756a918cafad972f71eba964b7e39c6fcf1f34e085ed1b09fa86683bda57fcf2b1b48c30d708ab1118b2a6c2140582c332d447b32e45a977454dcccb1d6de460f59e4feb8796fdf3ab2f85675e5ede4c367d8989c104d324431f93112b8e2ba7e48edf5e3e25b2c96bf5009d2ee28e4231d94aa25d219e944d060d51709a897cdd93e4f375b3837887457f7499ecf22821ca481a22a0d3efdd2bbbd207a8cba7e1412bf15abd899a96269a0ff8ead493f8e19f63812916cd27ff13b9a6dbd9eb8c76648eb102225b62e81300d5b01f6945e51b3f25b922555e2887adb01d6a24121bd499b1359066c056b0c7d1d6b4af5bc48b78cbfa85e3bfe11b47496e36a6cae82b22f2cc9f5c7922bf4bba79ec5b078a9cec0f88c4202b7f40470a962e8e2a57231087d97d21b458ae365e82f574b621539a3863e7a6c24551f931191b694089f2e43af8cb667bf7d5d28a4ed7d688490c3e79634239560f65e699e94f6e069680082b302d7108c76bf614114d541d976d922dc55c77a789b1d7ad3eeca30281e8058b149113fe3a6e34d81442696e3c9ad1c08ce8574d885dd017c991b62b4a950680150480be9bd58044a9c74426473e7a22b4519f2e9a56f56bec03381d7c06fd4988622a44c4da01cca0008ab2b5892c90ee13a80207451e3217e783a61b736b4df335aadc68229f2c177c767cd90b797a373961e88cb779c465649a81edac4ab36b7250922c527e457902b684b0e908f60c2fd971247cf849b59f9a4ede5bdcdc7ddef4ab4b0d8d4f7fc9dd11d6e16fd2f44698b6b99dd5d8f85864e248d50bc4f7294f07eac5ae1a79c473fb792d750a20fa7dcc49dc2c4094104d411ad6bbec1092b325ff741cc935581f8e3b7605f5463a27f77003464e1004ff09a9c7459bd8d775294e4cc5dc2f021e784935174b358cd761ca068ca1bd743708bd272268be809486d2efbc2ef515c834b4d4570b543a489f51ad000e7051acd205a57da0d47dbd942e3784d7fa2e3512681e641ee81db03051164a9b551cde1d97a8ffe014669aee817cde0a2440094def35960b20e212d6983a2a48f7be5eb7a7cb663704d1cf88829caf6398f85d7c21512d74ca39994fa6e6f85a1f648e2de93e9b0b186792c2852552a8681fe580691d8096fed23d1d32f8bdabb9a3dcf8e56f92a5625b06ee67816eab8ca7b3286ec1a10649dbe93023320e1d50208e5c269b2042aa7c74a08b9497a62def17d8de06e544b031be3365477eb3f8c48377b14cfedf7368ee7fa6a761c84384", 0x1000}], 0x3}}, {{&(0x7f0000001280)=@ipx={0x4, 0xcc2, 0x7ff, "6f10169c08ce", 0x6}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001300)="fca185aaf7d7a3ebb988a67d641c5eb5bcff8838", 0x14}], 0x1, &(0x7f0000001380)=[{0xa8, 0x118, 0x1, "d243fc4b25464506e5c3c49d30b6fb6daa78b0fb1bea9f86ee5edebf8b1ab768698bc86bb3224b5193a89bdb6b54e3f5b5ac10a1a1adab187fd30f3ce5a5f622ed1b88a3006ade77089b67d116d9821e9ab6d6f47d5e29a7b3995aa91644b616ce891ec1699907a3576a90ecc500f4d46a74cba9afa540d225d5272f1fb6045feac9dec44393a5e046d3102728a1d4b8750c78996d1583a2"}, {0x98, 0x102, 0x200, "ee981d83dd4c46c73df634bbe36222a4dd0940f396fd7dd5d55958211ff2250b1ea81d7b7f5920a86603f56807f7d1d18684802961f7a36b93bcd5e0398f0b946851ab63dc24ebc7d51757d0e8b1185e1dd6180782beff9df258d5bbb246c360bdb3135297d1165bce180a8533ab1a717573920be314c6e3167aeb12b8e005875ce6f0"}, {0xe0, 0x116, 0x2, "270c5df28612078089bd631020283a0109e65841f25bac27f025bc0feb4a74c3c19945372fa1634f02c99ce47ef8e63d83d38724cf75744209b638c6adecb6f6e3f0b9afeb15e6ae7caa9939b4358ae08b56dd8047e06a1a1c9385e7c7816a96ee9bae4cc6305444decc6da349f3022d3f4612e813fb7cfc97ebae348e7ce03baa94034674be6f2c466b2b47a713b551e2355fc20f02fe9f50a159cdbbc8ebc7814d2cfa862a8c270c01d4d0d4c4966e51d3ba02a9b68e46b21832c7ba57f522e30c7f35f4e6420a0a13039fb41e3d14"}, {0x98, 0x107, 0x2, "8214a4a4d39a25afb1e0645a741adb56d07b2a5c0b2eb62ab42cf0ba10eadbad098b81a95b23cf7c0d5693828107a140d097dc45e35f7b1fe300dd3f9badfeedd9c2c6dd28c23acf28684c3b1cbe84b594ff4f841db7bf0cbe8c7c35872714a0fa53dfeca25fed7fef72c45563d320c841537e165641bf4fa4dcfb3da98e4a5815ee1c"}], 0x2b8}}, {{&(0x7f0000001640)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000001940)=[{&(0x7f00000016c0)="abb0e34626688eb80433c47112bbae15574002f2eba44b6a596bfd9d4e1815dabc33312c3b7c7e291d8ce50502e127d3c680c110d21bb3b5a64691bf9f66706037332a76a48d3aa3e7ea40cf854b2e1566b9bc700deae9229467fb185277c48f50d151f9d36f01a0373dc0e0d176b594385059db6cc5c3c5c031ce5afde0dace3b83bdd471936302ff87b139ac191c078e4741c56061e2ea2e63e45f01f75fa5f26815e7efac2d9578d93cba19e5c25aad9bdf3297828f6f859a8ddb7c9ed3eed5df83ad0ad5b7c9d23182311f87199cedf7b6743ef2a5836574dbd562f07d0fa6368f8a9558e77d4e1c412aee03bd", 0xef}, {&(0x7f00000017c0)="69361757abf51d496eeae6d7885163e568657652ad2f1f65c9cbba8f8e3ab94894623f0ca5118b8b5893e686fdb7cc8f07b0dfa19a2f5a131be9b334c69284566ce661c65d0a80fb0c2ce66cfb44674c6788913cb2a150559258eff4aa4f2ca5d67469a7bb79e9fad354cb0148c50114ee4bedee2593b698ad6fd6c2a40bfa7c18f90d88c1e4d59700d0e2d0150535921e15a4578d4513ec2b54858907e6d0105392980701b4d5ba8a5aef3b60", 0xad}, {&(0x7f0000001880)="0efb1d5684c6f7ad99d846430169b9f508ca052cc1c6784e6abfd9afa13ddd2faf84d66a1cb51e377af236f1b9ae44a65bae0915036ef3865d72ec2f72f549f783371d991574ff72cb6f58e4f71f4f77ce6bcf78b8629c321d1f698ab1bb2025702f133f1ae6c545b2ba2603960c06f8e5b8e993096d3cddf1460141b6a2dab39b744ee26c92907afd1ce94a5a1e800ee385c635e35a7efeef16265cc210ea9a4489914cfd4e377887388d46aa259de0784573ffc2d133ec6dbe9728e456000f", 0xc0}], 0x3, &(0x7f0000001980)=[{0x18, 0x110, 0x10001, "0307d9ef3958"}], 0x18}}, {{&(0x7f00000019c0)=@llc={0x1a, 0x110, 0x13, 0x6, 0x5, 0x5, @multicast}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001a40)="348ba5abcbbaf5ea3f19fa86f8", 0xd}], 0x1, &(0x7f0000001ac0)=[{0x98, 0x101, 0x3, "dd311ce60678182ef3c6eb500ad2523b0aefdb3a07cdf804392e3c358e43d98d360a1b4a9930dce7ec9278d210c0f431017acc416d1803f5a5c00a8c0837003c8abde499008444d8e4d2cc66b789e988655fbe18fd0e303bd9ec36052be45e56005707b1a2ae9f8052212f59f9f16bec8aa5ef8da15ddb9ebf0f10ce1bdda49a9128d966f365d107"}, {0xf0, 0xff, 0x800, "aeb23176c029de19e48f0ebe53d05ce13d421a98a5636d0f15970d0b0545ee97202fe236fcb8284d25629d9e95712b098109ea4a0441516c0e31e32f0eb3e67b8a69b2921b9de8304d7d21b7ab120a1ad29632da7ce7826ead4e0a29ed7f342de2f85d891efe9bbf654416e5f06ef09fdb4c94e2726b5511efe452db76281f0a0b9a2eb0db629caef416cdce5303fc64fbeba38f0409110c4b93796cab4baf73d7df44c912411702daf69005849313d44322edbd80ffaf45ecd757c14b86da3b1dc77cf271bd1810682143df903065ebd9c3877ea698c6e5a669c18d0684"}, {0xb8, 0x109, 0x400, "35114738ae04910f5062fb31fb404010279b1ec846737c676543d2dca8440387a978247b68f196104f6394df9368cba0b0342e83e39bfb2307604a608971a6219e05f0bd2f82a18d6cbf2842ba6904c83d513909c00d75149a6547202b9cc72cb1f112947a1b5fe4e7b18232c445f25e68bbfc35a3571820cdaa61b475c918d3ebeba132f334f0b32c4af7dc95c3a3bb4426d2ed4be8fe9af8424e587bcf288eea56e2501758628a"}, {0x110, 0x116, 0x2, "76a8798817db5c5e2c06bb1bb02819700f9c7c06800b6ae974defc0cec1a108a8b7db3e57f2bc104478fa6ce97b35f34f2676ce1b336f56fb85d0e22e3ba5c4dcf6b6a6db8d2c7c0ade3ce542980f6f89722cec8a1ab3fb96a731867e007d9378b147a1b1c9405f62206bd0478414cb258036147f7c0404a169f435fceed0f0fd8e29365ffc64c2850cae4be4c29f7b08c3535864a9ba359827ab98362120e28aae04bd0df7d2c2bce3811d547a863ce791370b373461c06b5a82d93f6c882c18a8b7228ce915ba8da604ca8d5011cbc8c5816e19932b9730dcfc48a6026dff13190ca1463d2ea28031f2abb26405ada98fef6ccf1e9e4fd84a0"}, {0xb8, 0x100, 0x4, "c2151cb680ce0738056c0d000c80c24c1e49b5d946ae756969ba5106f043c95effde9589e8109d6151030000f97b1c8e32140e33709ca195b2e98fd55c1171777ce2e6d1d1540b0338b088b051cbd066595b61ccc9bff019e8a2eca2434795a6a7e57452fb8175f25e700d5dcb9ee8bd3d0a5185f5d24caadccf029738333e7f0e73b3b1072eafab8111cd9f3f3dcd6d298645f3c116b08b280db6fd34baa604df17"}, {0x68, 0x1, 0x9, "6159e4dcdf30df285dca7951e56e448196c086ed1bd88aeee25eed301aa041a63cf27c08391ef5ef876dc9174885354b3f70f41204a09304d397416bacff2bd0ae60126ca2d091126bbd882e84639293e3590b6ce1"}, {0xf8, 0x100, 0xccba, "2b86aac79ee84414fa966e280a35b0d7da6decf4178ebb788d3c54a5f339e377b9122b298c657ed3401d9629d2ee44631b282b565d8cec6cc9249c3f7126746ad30217c5cca8bcdc56598dabff58ca54e741b5b98dd384daa0410213fb3ec04d16b112cfe930f78e610d6ffb98db7e8468e9ff0f98159ca0e35d3b04f5fea515f1b504e36b0f16519366dd5f9c0baaaa853ff147f3d68f6bd90b1e064e1f038348b01fd1dd12b7417ad405d0b06adc740071e426022e1acff19332219d84f8077eae5c22a18e25bebb1e29af1988d0587ccf854745ba6c2c15403f36c28075f63eada7fa"}, {0xc0, 0x118, 0x9, "fa30f1e9cefc604b7c93d0d7e8310ba6540d7fb3fd9105d54b4332543975885bffacb3bce252a2ff34ede9fcb32ab5624c91700d266002e75246d9b41c46d68403f7da8bfd542cab8f3afa817770c2d0e41155040d28dbfd51766dd5e295493af1162ce91fcd469bb0f4e2c3668db77f1b167331f68eff3c48ee435a9308033e081f4df5469bb7face59e0640e70f414f70db77cf8338035b63252cdec116106701d91d49cd5b5bf1a198944ee8db067"}], 0x628}}], 0x4, 0x4800) 07:11:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 07:11:55 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1834.511327][T22438] usb 1-1: USB disconnect, device number 58 [ 1834.586173][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 1834.691793][T19937] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1834.711002][T19937] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:55 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:55 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x5451, 0x0) [ 1834.861357][ T3001] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1834.933251][T19957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:55 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1835.032113][T22438] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1835.221534][ T3001] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1835.230169][ T3001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.259317][ T3001] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1835.282621][ T3001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.411614][T22438] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1835.420257][T22438] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.421637][ T3001] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1835.450893][ T3001] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1835.462366][ T3001] usb 2-1: Product: syz [ 1835.466771][ T3001] usb 2-1: Manufacturer: syz [ 1835.475054][T22438] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1835.511148][T22438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.512346][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1835.533120][ T3001] cdc_wdm 2-1:1.0: skipping garbage [ 1835.545216][ T3001] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1835.671511][T22438] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1835.680588][T22438] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1835.702678][T22438] usb 1-1: Product: syz [ 1835.751157][T22438] usb 1-1: Manufacturer: syz [ 1835.759169][ T7] usb 2-1: USB disconnect, device number 71 [ 1835.842515][T22438] cdc_wdm 1-1:1.0: skipping garbage [ 1835.847773][T22438] cdc_wdm 1-1:1.0: skipping garbage [ 1835.875416][T22438] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 07:11:56 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:56 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x5452, 0x0) 07:11:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 1836.132793][ T17] usb 5-1: USB disconnect, device number 46 [ 1836.491276][ T7] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1836.641254][ T17] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1836.921455][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1836.930247][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.947825][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1836.961774][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.001758][ T17] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1837.010387][ T17] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.033383][ T17] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1837.047558][ T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.121854][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1837.130956][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1837.141784][ T7] usb 2-1: Product: syz [ 1837.146753][ T7] usb 2-1: Manufacturer: syz [ 1837.171596][ T17] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1837.181758][ T17] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1837.189987][ T17] usb 5-1: Product: syz [ 1837.197051][ T17] usb 5-1: Manufacturer: syz [ 1837.202179][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1837.207410][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1837.231695][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1837.269791][ T17] cdc_wdm 5-1:1.0: skipping garbage [ 1837.281473][ T17] cdc_wdm 5-1:1.0: skipping garbage [ 1837.303661][ T17] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1837.421492][ T17] usb 2-1: USB disconnect, device number 72 [ 1837.471117][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes 07:11:58 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x9b, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/155) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:11:58 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:58 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x5460, 0x0) 07:11:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 07:11:58 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="2d2472cc5e87aaa0ebe1639b4f5399b20bc36a1cd57bc4abc196c959d0c37816f2610d2acf3ed13fcceb", 0x2a) [ 1837.760409][ T3001] usb 1-1: USB disconnect, device number 59 [ 1837.830356][T20064] __nla_validate_parse: 1 callbacks suppressed [ 1837.830370][T20064] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:58 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:11:58 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x5501, 0x0) [ 1838.111350][T13161] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1838.120982][T20089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:11:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 1838.251182][ T3001] usb 1-1: new high-speed USB device number 60 using dummy_hcd 07:11:59 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1838.411897][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1838.481554][T13161] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1838.490200][T13161] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.541917][T13161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1838.553008][T13161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.631417][ T3001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1838.640061][ T3001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.671225][ T3001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1838.680197][ T3001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.731342][T13161] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1838.740633][T13161] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1838.751608][T13161] usb 2-1: Product: syz [ 1838.756133][T13161] usb 2-1: Manufacturer: syz [ 1838.804886][T13161] cdc_wdm 2-1:1.0: skipping garbage [ 1838.810136][T13161] cdc_wdm 2-1:1.0: skipping garbage [ 1838.821229][ T3001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1838.830284][ T3001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1838.861343][T13161] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1838.882105][ T3001] usb 1-1: Product: syz [ 1838.887511][ T3001] usb 1-1: Manufacturer: syz [ 1838.952195][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1838.957470][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1838.966280][ T3001] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1839.006778][ T7] usb 2-1: USB disconnect, device number 73 07:12:00 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x5509, 0x0) 07:12:00 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:00 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1839.279990][ T3001] usb 5-1: USB disconnect, device number 47 [ 1839.359921][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1839.781800][ T3001] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1839.792517][T22412] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1840.141469][ T3001] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1840.150366][ T3001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.167824][ T3001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1840.181963][ T3001] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.201703][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1840.210331][T22412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.231274][T22412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1840.240280][T22412] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.311445][ T3001] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1840.320494][ T3001] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1840.338548][ T3001] usb 5-1: Product: syz [ 1840.344666][ T3001] usb 5-1: Manufacturer: syz [ 1840.391629][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1840.392389][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1840.400719][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1840.406191][ T3001] cdc_wdm 5-1:1.0: skipping garbage [ 1840.422443][ T3001] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1840.461140][T22412] usb 2-1: Product: syz [ 1840.465368][T22412] usb 2-1: Manufacturer: syz [ 1840.542381][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1840.547633][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1840.577018][T22412] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1840.611370][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1840.751619][T22412] usb 2-1: USB disconnect, device number 74 07:12:01 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x9c, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/156) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:01 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x550c, 0x0) 07:12:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 07:12:01 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:01 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="02d812c00a74d665a2995ca4e202cb5a55f8151e731bed9637674b7b16b9734205a27335187b225d5ceaee4b186bb6fb91d8cd94b452c6855aeddc2b45c85d8978a8d87cd3b7e071a340c6f87911f8f51f0ab33995881ac2be44ea33707966fd7c419c032cb320c4df9d3960e7c015e127109bf48fb90d64ef43999857dc7b4520fa1f84"], 0x0) r0 = open(0x0, 0x420002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='\x1a\x02\x18\b\x95\x9f\xcd\xbe\xe2\x96\x00\x00\x00\x00\x01\xb1\x87\xea\x1c\xd9;W\xc5,\x112Vj\xa5\xd6\x00\\\x85\xfd\xdd\xaa\x17l&\x18') r1 = open(0x0, 0x420002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = open(0x0, 0x420002, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000080)='\x1a\x02\x18\b\x95\x9f\xcd\xbe\xe2\x96\x00\x00\x00\x00\x01\xb1\x87\xea\x1c\xd9;W\xc5,\x112Vj\xa5\xd6\x00\\\x85\xfd\xdd\xaa\x17l&\x18') ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000140)={0x9, 0x2, 0x3}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\x1a\x02\x18\b\x95\x9f\xcd\xbe\xe2\x96\x00\x00\x00\x00\x01\xb1\x87\xea\x1c\xd9;W\xc5,\x112Vj\xa5\xd6\x00\\\x85\xfd\xdd\xaa\x17l&\x18') ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x1, 0x60]) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) [ 1840.900012][T24431] usb 1-1: USB disconnect, device number 60 [ 1840.975427][T20201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:01 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:01 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x6364, 0x0) 07:12:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 1841.241161][ T3001] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1841.266594][T20226] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:02 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1841.381252][T24431] usb 1-1: new high-speed USB device number 61 using dummy_hcd 07:12:02 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x8913, 0x0) [ 1841.442469][ T3001] usb 2-1: device descriptor read/64, error 18 [ 1841.479695][T20243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:02 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d0000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1841.711148][ T3001] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1841.757657][T20262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1841.767538][T24431] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1841.791122][T24431] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.813306][T24431] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1841.840675][T24431] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.872056][T20263] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1841.885034][T20263] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1841.923137][ T3001] usb 2-1: device descriptor read/64, error 18 [ 1841.981328][T24431] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1841.999243][T24431] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1842.025984][T24431] usb 1-1: Product: syz [ 1842.030449][T24431] usb 1-1: Manufacturer: syz [ 1842.052082][ T3001] usb usb2-port1: attempt power cycle [ 1842.124500][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1842.129788][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1842.145618][T24431] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 07:12:03 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1842.401855][ T7] usb 5-1: USB disconnect, device number 48 [ 1842.771235][ T3001] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1842.821270][ T7] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1842.941251][ T3001] usb 2-1: device descriptor read/8, error -61 [ 1843.211157][ T3001] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1843.211278][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1843.229610][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.243328][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1843.258313][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.381500][ T3001] usb 2-1: device descriptor read/8, error -61 [ 1843.394222][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1843.403607][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1843.414587][ T7] usb 5-1: Product: syz [ 1843.419175][ T7] usb 5-1: Manufacturer: syz [ 1843.462200][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1843.467441][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1843.484056][ T7] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1843.501620][ T3001] usb usb2-port1: unable to enumerate USB device [ 1843.681242][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes 07:12:04 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x9c, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/156) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:04 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a440000104004967900f004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) 07:12:04 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x8914, 0x0) 07:12:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 07:12:04 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d0000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1844.058584][ T3001] usb 1-1: USB disconnect, device number 61 [ 1844.135602][T20312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) [ 1844.197571][T20322] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1844.232381][T20322] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:05 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d0000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 07:12:05 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x8933, 0x0) [ 1844.411479][T24431] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1844.431798][T20341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1844.489558][T20345] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1844.502130][T20345] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:05 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d00000009000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1844.614674][ T3001] usb 1-1: new high-speed USB device number 62 using dummy_hcd 07:12:05 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae01, 0x0) [ 1844.701355][T24431] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 1844.733548][T20361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1844.821589][T24431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1844.832984][T24431] usb 2-1: can't read configurations, error -61 [ 1844.847071][T20364] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1844.873107][T20364] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1844.981647][ T3001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1844.990323][ T3001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.031178][T24431] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1845.058039][ T3001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1845.090963][ T3001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.231576][ T3001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1845.240656][ T3001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1845.262967][ T3001] usb 1-1: Product: syz [ 1845.267335][ T3001] usb 1-1: Manufacturer: syz [ 1845.312255][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1845.317501][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1845.342542][ T3001] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1845.361494][T24431] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 1845.481619][T24431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1845.489230][T24431] usb 2-1: can't read configurations, error -61 07:12:06 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x4f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1845.531322][T24431] usb usb2-port1: attempt power cycle [ 1845.547131][T22412] usb 5-1: USB disconnect, device number 49 [ 1846.061266][T22412] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1846.261161][T24431] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1846.391524][T24431] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 1846.441447][T22412] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1846.450354][T22412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.471115][T22412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1846.480122][T22412] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.511488][T24431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1846.519502][T24431] usb 2-1: can't read configurations, error -61 [ 1846.631641][T22412] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1846.641332][T22412] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1846.649339][T22412] usb 5-1: Product: syz [ 1846.662577][T22412] usb 5-1: Manufacturer: syz [ 1846.671474][T24431] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1846.732395][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1846.737644][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1846.764268][T22412] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1846.801854][T24431] usb 2-1: too many configurations: 73, using maximum allowed: 8 [ 1846.921796][T24431] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1846.929677][T24431] usb 2-1: can't read configurations, error -61 [ 1846.936818][T24431] usb usb2-port1: unable to enumerate USB device [ 1846.961136][ C0] cdc_wdm 5-1:1.0: unknown notification 61 received: index 46970 len 38478 07:12:08 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x9c, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/156) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 07:12:08 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d00000009000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:08 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae41, 0x0) 07:12:08 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRESOCT], 0x0) [ 1847.250335][T13161] usb 1-1: USB disconnect, device number 62 [ 1847.325354][T20430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:08 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d00000009000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:08 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xaf01, 0x0) 07:12:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1847.581239][T22412] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1847.761381][T13161] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1847.794231][T22412] usb 2-1: device descriptor read/64, error 18 07:12:08 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d00000009000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:08 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4004240b, 0x0) 07:12:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xe}, 0x0) [ 1848.061351][T22412] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1848.141619][T13161] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1848.159648][T13161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.186709][T13161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1848.204082][T13161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.271297][T22412] usb 2-1: device descriptor read/64, error 18 [ 1848.341669][T13161] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1848.350808][T13161] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1848.370184][T13161] usb 1-1: Product: syz [ 1848.380189][T13161] usb 1-1: Manufacturer: syz [ 1848.402625][T22412] usb usb2-port1: attempt power cycle [ 1848.432555][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1848.437797][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1848.477434][T13161] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device 07:12:09 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x4f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1848.692656][T13161] usb 5-1: USB disconnect, device number 50 [ 1849.121152][T22412] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1849.121166][T13161] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1849.311516][T22412] usb 2-1: device descriptor read/8, error -61 [ 1849.481206][T13161] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1849.490251][T13161] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.508955][T13161] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1849.521484][T13161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.591158][T22412] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1849.651293][T13161] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1849.660366][T13161] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1849.678569][T13161] usb 5-1: Product: syz [ 1849.685991][T13161] usb 5-1: Manufacturer: syz [ 1849.732627][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1849.737891][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1849.767761][T13161] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1849.781470][T22412] usb 2-1: device descriptor read/8, error -61 [ 1849.912510][T22412] usb usb2-port1: unable to enumerate USB device [ 1849.971264][ C0] cdc_wdm 5-1:1.0: unknown notification 61 received: index 46970 len 38478 07:12:11 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:11 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x400448c9, 0x0) 07:12:11 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d00000009000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 07:12:11 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0xd5, 0x1, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x4400, 0xa, 0x1, {0x22, 0x70b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xa7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x66, 0x7f, 0x7}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x3, 0x2, 0xff, 0x10, 0x4}, 0x42, &(0x7f0000000500)={0x5, 0xf, 0x42, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x4, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc8, 0x4, 0x15, 0x9, 0x6a}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "aa1b472629bae99ec81ce2d2ffbcadfc"}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "f5875e58c2721d6ad209caecd83f7480"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0xf2, &(0x7f0000000280)=@string={0xf2, 0x3, "d750c8820e18b4c85f0b69202719040a378438082e29b6d71c2a2e94dfcceb1ee7868401603402259f77b6d94e2653d3caff36a9041463bab63d7b24f7be10aa8a8696f4d61ca4cf34551d13b09f0ad052223905c33d1ce79088147d4c2fe744f8df9410ae5e31192ec6ff0e68b71928beae50d14572e5f5521ff96aa77eddd68c0d5a4466773f1432115eaeda1b98c9cc436bf34dd60ecfc5f524cdde625ad53836a7bd237c0f4f60b664057949cdfeb90d46302aa423fda7a8c793ca6077f16e6041b4fb6ccecb13877261a57a4fbd3472f37931d18d715aed7b1027fbe5fa61f5ea4a0675587cf907509335e05a17"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xcc83}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x441}}]}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/153}) prctl$PR_CAPBSET_DROP(0x18, 0x1f) [ 1850.363735][T22412] usb 1-1: USB disconnect, device number 63 [ 1850.443264][T20542] __nla_validate_parse: 8 callbacks suppressed [ 1850.443279][T20542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1850.500179][T20542] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1850.515179][T20542] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:11 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d00000009000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:11 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x400448dd, 0x0) 07:12:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 1850.657697][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1850.691206][ T5] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1850.760876][T20563] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1850.783824][T20563] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1850.801248][T22412] usb 1-1: new high-speed USB device number 64 using dummy_hcd 07:12:11 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d0000000900000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:11 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) [ 1850.957952][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1851.046230][T20586] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1851.071458][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1851.084139][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.104695][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1851.105309][T20586] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1851.115454][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 07:12:11 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d0000000900000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1851.212016][T22412] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1851.220670][T22412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.244266][T22412] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1851.285209][T22412] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.326131][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1851.349324][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1851.370130][ T5] usb 2-1: Product: syz [ 1851.378618][ T5] usb 2-1: Manufacturer: syz [ 1851.435571][T20606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1851.447583][T22412] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1851.460682][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1851.481159][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1851.486536][ T5] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1851.494732][T22412] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1851.511194][T22412] usb 1-1: Product: syz [ 1851.515377][T22412] usb 1-1: Manufacturer: syz [ 1851.578346][T22412] cdc_wdm 1-1:1.0: skipping garbage [ 1851.584172][T22412] cdc_wdm 1-1:1.0: skipping garbage [ 1851.609511][T22412] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1851.671078][T20534] udc-core: couldn't find an available UDC or it's busy [ 1851.678255][T20534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1851.714335][T22412] usb 2-1: USB disconnect, device number 87 07:12:12 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x4f, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1851.782431][ T5] usb 5-1: USB disconnect, device number 51 [ 1852.213889][ T5] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1852.521257][ T7] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1852.601401][ T5] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1852.610187][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.623235][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1852.632915][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.792038][ T5] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1852.801279][ T5] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1852.809350][ T5] usb 5-1: Product: syz [ 1852.821869][ T5] usb 5-1: Manufacturer: syz [ 1852.882455][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1852.887701][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1852.901242][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1852.909887][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.933293][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1852.942668][ T5] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1852.963158][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.111207][ C0] cdc_wdm 5-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1853.120422][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1853.142467][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1853.150467][ T7] usb 2-1: Product: syz [ 1853.161493][ T7] usb 2-1: Manufacturer: syz [ 1853.232506][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1853.237846][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1853.250189][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1853.404469][T24431] usb 2-1: USB disconnect, device number 88 07:12:14 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:14 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4004550a, 0x0) 07:12:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 07:12:14 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d0000000900000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:14 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) [ 1853.477015][ T7] usb 1-1: USB disconnect, device number 64 07:12:14 executing program 5: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 07:12:14 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 07:12:14 executing program 5: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 1853.921201][T24431] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1853.942844][ T7] usb 1-1: new high-speed USB device number 65 using dummy_hcd 07:12:14 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 1854.142035][T24431] usb 2-1: device descriptor read/64, error 18 [ 1854.371387][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1854.380043][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.392989][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1854.404056][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.421241][T24431] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1854.531359][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1854.540724][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1854.557314][ T7] usb 1-1: Product: syz [ 1854.567319][ T7] usb 1-1: Manufacturer: syz [ 1854.621500][T24431] usb 2-1: device descriptor read/64, error 18 [ 1854.634831][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1854.640062][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 1854.649798][ T7] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1854.741820][T24431] usb usb2-port1: attempt power cycle 07:12:15 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1854.882776][T13161] usb 5-1: USB disconnect, device number 52 [ 1855.391307][T13161] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1855.451199][T24431] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1855.621207][T24431] usb 2-1: device descriptor read/8, error -61 [ 1855.751322][T13161] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1855.760122][T13161] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.770497][T13161] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1855.780035][T13161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.891314][T24431] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1855.911366][T13161] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1855.920457][T13161] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1855.937945][T13161] usb 5-1: Product: syz [ 1855.946166][T13161] usb 5-1: Manufacturer: syz [ 1855.992389][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1855.998293][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1856.024059][T13161] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1856.091511][T24431] usb 2-1: device descriptor read/8, error -61 [ 1856.221207][ C0] cdc_wdm 5-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1856.221330][T24431] usb usb2-port1: unable to enumerate USB device 07:12:17 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 07:12:17 executing program 5: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 07:12:17 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:17 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r0 = open(0x0, 0x420002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='\x1a\x02\x18\b\x95\x9f\xcd\xbe\xe2\x96\x00\x00\x00\x00\x01\xb1\x87\xea\x1c\xd9;W\xc5,\x112Vj\xa5\xd6\x00\\\x85\xfd\xdd\xaa\x17l&\x18') ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000180)=0x1f) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000140)={0x7fff, 0x1, &(0x7f0000000080)=[0x4], &(0x7f00000000c0)=[0x3ff, 0x200, 0x8000, 0x8], &(0x7f0000000100)=[0x2, 0x7]}) [ 1856.580676][T13161] usb 1-1: USB disconnect, device number 65 [ 1856.665333][T20794] __nla_validate_parse: 7 callbacks suppressed [ 1856.665348][T20794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 07:12:17 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 07:12:17 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4004af61, 0x0) [ 1856.897789][T20814] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1856.911277][T24431] usb 2-1: new high-speed USB device number 93 using dummy_hcd 07:12:17 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 07:12:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 1857.071386][T20829] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1857.093791][T13161] usb 1-1: new high-speed USB device number 66 using dummy_hcd 07:12:17 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 1857.258939][T20843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1857.292613][T24431] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1857.312433][T24431] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.347915][T24431] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1857.381538][T24431] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.481784][T13161] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1857.491024][T13161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.521227][T13161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1857.531500][T24431] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1857.540978][T24431] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1857.571630][T13161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.597427][T24431] usb 2-1: Product: syz [ 1857.607680][T24431] usb 2-1: Manufacturer: syz [ 1857.664422][T24431] cdc_wdm 2-1:1.0: skipping garbage [ 1857.669716][T24431] cdc_wdm 2-1:1.0: skipping garbage [ 1857.699109][T24431] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1857.711544][T13161] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1857.725477][T13161] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1857.741874][T13161] usb 1-1: Product: syz [ 1857.746282][T13161] usb 1-1: Manufacturer: syz [ 1857.792313][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1857.798272][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1857.813297][T13161] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1857.867774][T13161] usb 2-1: USB disconnect, device number 93 07:12:18 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:18 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x40085503, 0x0) 07:12:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 07:12:18 executing program 5: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0x9b, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/155) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1858.055901][ T5] usb 5-1: USB disconnect, device number 53 [ 1858.461261][ T7] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1858.611614][ T5] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1858.661399][T22412] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1858.851308][ T7] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1858.860166][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.873253][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1858.882918][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.011601][ T5] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1859.020271][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.033534][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1859.042696][ T7] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1859.052151][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1859.062044][T22412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.072638][ T7] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1859.080712][ T7] usb 6-1: Product: syz [ 1859.085442][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.096742][T22412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1859.106127][ T7] usb 6-1: Manufacturer: syz [ 1859.112690][T22412] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.162410][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 1859.169861][ T7] cdc_wdm 6-1:1.0: skipping garbage [ 1859.184464][ T7] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1859.261401][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1859.270903][ T5] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1859.280213][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1859.300118][ T5] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1859.311759][T22412] usb 2-1: Product: syz [ 1859.316549][T22412] usb 2-1: Manufacturer: syz [ 1859.321392][ T5] usb 5-1: Product: syz [ 1859.325601][ T5] usb 5-1: Manufacturer: syz [ 1859.382343][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1859.387594][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1859.394346][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1859.399596][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 1859.421913][T22412] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1859.432167][ T5] cdc_wdm 5-1:1.0: cdc-wdm2: USB WDM device [ 1859.589122][T13161] usb 2-1: USB disconnect, device number 94 [ 1859.611168][ C0] cdc_wdm 6-1:1.0: unknown notification 61 received: index 46970 len 38478 07:12:20 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:20 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x40085507, 0x0) 07:12:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 07:12:20 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) r0 = open(0x0, 0x420002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='\x1a\x02\x18\b\x95\x9f\xcd\xbe\xe2\x96\x00\x00\x00\x00\x01\xb1\x87\xea\x1c\xd9;W\xc5,\x112Vj\xa5\xd6\x00\\\x85\xfd\xdd\xaa\x17l&\x18') sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8) r1 = open(0x0, 0x420002, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\x1a\x02\x18\b\x95\x9f\xcd\xbe\xe2\x96\x00\x00\x00\x00\x01\xb1\x87\xea\x1c\xd9;W\xc5,\x112Vj\xa5\xd6\x00\\\x85\xfd\xdd\xaa\x17l&\x18') sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, [], 0x1}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0xc811) [ 1859.713085][T24431] usb 1-1: USB disconnect, device number 66 07:12:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf19}, 0x0) 07:12:20 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x40095505, 0x0) [ 1860.121440][T13161] usb 2-1: new high-speed USB device number 95 using dummy_hcd 07:12:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x190f}, 0x0) [ 1860.174319][T24431] usb 1-1: new high-speed USB device number 67 using dummy_hcd 07:12:21 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x40186366, 0x0) [ 1860.482240][T13161] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1860.490892][T13161] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1860.551538][T24431] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1860.561361][T13161] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1860.570632][T24431] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.588855][T13161] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1860.604428][T24431] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1860.613791][T24431] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.741515][T13161] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1860.750795][T24431] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1860.764152][T24431] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1860.783101][T13161] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1860.796528][T24431] usb 1-1: Product: syz [ 1860.800820][T24431] usb 1-1: Manufacturer: syz [ 1860.812530][T13161] usb 2-1: Product: syz [ 1860.816717][T13161] usb 2-1: Manufacturer: syz [ 1860.893607][T13161] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1860.912301][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1860.917558][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1860.972641][T24431] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1861.098976][ T5] usb 2-1: USB disconnect, device number 95 [ 1861.160385][T22412] usb 6-1: USB disconnect, device number 25 [ 1861.166477][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1861.166496][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1861.166516][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 07:12:22 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x76, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:22 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 07:12:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 07:12:22 executing program 5 (fault-call:8 fault-nth:0): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1861.252451][T24431] usb 5-1: USB disconnect, device number 54 [ 1861.315062][T21026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1861.394169][T21034] FAULT_INJECTION: forcing a failure. [ 1861.394169][T21034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.441322][T21034] CPU: 0 PID: 21034 Comm: syz-executor.5 Not tainted 5.10.0-rc7-syzkaller #0 [ 1861.450132][T21034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1861.460210][T21034] Call Trace: [ 1861.463527][T21034] dump_stack+0x107/0x163 [ 1861.467880][T21034] should_fail.cold+0x5/0xa [ 1861.473017][T21034] _copy_from_user+0x2c/0x180 [ 1861.477719][T21034] __copy_msghdr_from_user+0x91/0x4b0 [ 1861.483113][T21034] ? __ia32_sys_shutdown+0x70/0x70 [ 1861.488247][T21034] ? mark_lock+0xf7/0x1730 [ 1861.492688][T21034] ? __lock_acquire+0xbd6/0x5500 [ 1861.497674][T21034] sendmsg_copy_msghdr+0xa1/0x160 [ 1861.502852][T21034] ? do_recvmmsg+0x6c0/0x6c0 [ 1861.507477][T21034] ? lock_chain_count+0x20/0x20 [ 1861.512831][T21034] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1861.518972][T21034] ___sys_sendmsg+0xc6/0x170 [ 1861.523590][T21034] ? sendmsg_copy_msghdr+0x160/0x160 [ 1861.528938][T21034] ? __fget_files+0x272/0x400 [ 1861.533656][T21034] ? lock_downgrade+0x6d0/0x6d0 [ 1861.538567][T21034] ? __fget_files+0x294/0x400 [ 1861.543274][T21034] ? __fget_light+0xea/0x280 [ 1861.547920][T21034] __sys_sendmmsg+0x195/0x470 [ 1861.552625][T21034] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1861.557667][T21034] ? lock_downgrade+0x6d0/0x6d0 [ 1861.562532][T21034] ? ksys_write+0x12d/0x250 [ 1861.567086][T21034] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1861.572660][T21034] ? wait_for_completion+0x260/0x260 [ 1861.577984][T21034] ? vfs_write+0x18e/0xa30 [ 1861.582452][T21034] ? fput_many+0x2f/0x1a0 [ 1861.586809][T21034] __x64_sys_sendmmsg+0x99/0x100 [ 1861.591762][T21034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.597686][T21034] do_syscall_64+0x2d/0x70 [ 1861.602118][T21034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1861.608018][T21034] RIP: 0033:0x45e159 [ 1861.611925][T21034] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1861.631653][T21034] RSP: 002b:00007f6bb094dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1861.640115][T21034] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e159 [ 1861.648097][T21034] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1861.656106][T21034] RBP: 00007f6bb094dca0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.664095][T21034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.672082][T21034] R13: 00000000016afb7f R14: 00007f6bb094e9c0 R15: 000000000119c034 [ 1861.691863][T24431] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1862.072161][T24431] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1862.072608][T22412] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1862.092080][T24431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.127362][T24431] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1862.151709][T24431] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.282104][T24431] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1862.299126][T24431] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1862.309718][T24431] usb 5-1: Product: syz [ 1862.315100][T24431] usb 5-1: Manufacturer: syz [ 1862.362373][T24431] cdc_wdm 5-1:1.0: skipping garbage [ 1862.367650][T24431] cdc_wdm 5-1:1.0: skipping garbage [ 1862.394002][T24431] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1862.491477][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1862.500302][T22412] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1862.513390][T22412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1862.523096][T22412] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1862.581157][ C1] cdc_wdm 5-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1862.662641][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1862.671873][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1862.679902][T22412] usb 2-1: Product: syz [ 1862.686811][T22412] usb 2-1: Manufacturer: syz [ 1862.771353][T22412] usb 2-1: can't set config #1, error -71 [ 1862.780677][T22412] usb 2-1: USB disconnect, device number 96 07:12:23 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 07:12:23 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4020ae46, 0x0) 07:12:23 executing program 5 (fault-call:8 fault-nth:1): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:23 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100c3ea0000f40400000102090000052406000105240000000d240f01000004000000001f0006000000048002000905810000"], 0x0) [ 1862.850417][T24431] usb 1-1: USB disconnect, device number 67 [ 1862.929369][T21086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1863.000685][T21096] FAULT_INJECTION: forcing a failure. [ 1863.000685][T21096] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.074088][T21096] CPU: 1 PID: 21096 Comm: syz-executor.5 Not tainted 5.10.0-rc7-syzkaller #0 [ 1863.083674][T21096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.093766][T21096] Call Trace: [ 1863.144115][T21096] dump_stack+0x107/0x163 [ 1863.148462][T21096] should_fail.cold+0x5/0xa [ 1863.152980][T21096] ? __alloc_skb+0x71/0x550 [ 1863.157508][T21096] should_failslab+0x5/0x10 [ 1863.162036][T21096] kmem_cache_alloc_node+0x55/0x470 [ 1863.167256][T21096] __alloc_skb+0x71/0x550 [ 1863.171615][T21096] netlink_sendmsg+0x94f/0xd90 [ 1863.176391][T21096] ? netlink_unicast+0x7d0/0x7d0 [ 1863.181366][T21096] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1863.186667][T21096] ? netlink_unicast+0x7d0/0x7d0 [ 1863.191611][T21096] sock_sendmsg+0xcf/0x120 [ 1863.196037][T21096] ____sys_sendmsg+0x331/0x810 [ 1863.200831][T21096] ? kernel_sendmsg+0x50/0x50 [ 1863.205530][T21096] ? do_recvmmsg+0x6c0/0x6c0 [ 1863.210133][T21096] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1863.216129][T21096] ___sys_sendmsg+0xf3/0x170 [ 1863.220744][T21096] ? sendmsg_copy_msghdr+0x160/0x160 [ 1863.226039][T21096] ? __fget_files+0x272/0x400 [ 1863.230738][T21096] ? lock_downgrade+0x6d0/0x6d0 [ 1863.235607][T21096] ? __fget_files+0x294/0x400 [ 1863.240322][T21096] ? __fget_light+0xea/0x280 [ 1863.244937][T21096] __sys_sendmmsg+0x195/0x470 [ 1863.249632][T21096] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1863.254693][T21096] ? lock_downgrade+0x6d0/0x6d0 [ 1863.259577][T21096] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1863.265157][T21096] ? wait_for_completion+0x260/0x260 [ 1863.270465][T21096] ? vfs_write+0x18e/0xa30 [ 1863.274889][T21096] ? fput_many+0x2f/0x1a0 [ 1863.279235][T21096] __x64_sys_sendmmsg+0x99/0x100 [ 1863.284195][T21096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1863.290110][T21096] do_syscall_64+0x2d/0x70 [ 1863.294543][T21096] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1863.300438][T21096] RIP: 0033:0x45e159 [ 1863.304355][T21096] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1863.324084][T21096] RSP: 002b:00007f6bb094dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1863.332524][T21096] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e159 [ 1863.340514][T21096] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1863.348487][T21096] RBP: 00007f6bb094dca0 R08: 0000000000000000 R09: 0000000000000000 [ 1863.356459][T21096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.364447][T21096] R13: 00000000016afb7f R14: 00007f6bb094e9c0 R15: 000000000119c034 07:12:24 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 07:12:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 07:12:24 executing program 5 (fault-call:8 fault-nth:2): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 1863.581637][T22412] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1863.631796][T24431] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1863.757019][T21124] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1863.815789][T21128] FAULT_INJECTION: forcing a failure. [ 1863.815789][T21128] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.897986][T21128] CPU: 0 PID: 21128 Comm: syz-executor.5 Not tainted 5.10.0-rc7-syzkaller #0 [ 1863.907013][T21128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.918044][T21128] Call Trace: [ 1863.921362][T21128] dump_stack+0x107/0x163 [ 1863.925733][T21128] should_fail.cold+0x5/0xa [ 1863.930263][T21128] should_failslab+0x5/0x10 [ 1863.934788][T21128] __kmalloc_node_track_caller+0x72/0x3e0 [ 1863.940544][T21128] ? netlink_sendmsg+0x94f/0xd90 [ 1863.945519][T21128] __alloc_skb+0xae/0x550 [ 1863.949887][T21128] netlink_sendmsg+0x94f/0xd90 [ 1863.955709][T21128] ? netlink_unicast+0x7d0/0x7d0 [ 1863.960906][T21128] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1863.966601][T21128] ? netlink_unicast+0x7d0/0x7d0 [ 1863.971951][T21128] sock_sendmsg+0xcf/0x120 [ 1863.976412][T21128] ____sys_sendmsg+0x331/0x810 [ 1863.981198][T21128] ? kernel_sendmsg+0x50/0x50 [ 1863.985889][T21128] ? do_recvmmsg+0x6c0/0x6c0 [ 1863.990730][T21128] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1863.991539][T24431] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1863.996736][T21128] ___sys_sendmsg+0xf3/0x170 [ 1863.996763][T21128] ? sendmsg_copy_msghdr+0x160/0x160 [ 1863.996794][T21128] ? __fget_files+0x272/0x400 [ 1863.996813][T21128] ? lock_downgrade+0x6d0/0x6d0 [ 1863.996852][T21128] ? __fget_files+0x294/0x400 [ 1863.996880][T21128] ? __fget_light+0xea/0x280 [ 1864.024828][T24431] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.026789][T21128] __sys_sendmmsg+0x195/0x470 [ 1864.026818][T21128] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1864.026836][T21128] ? lock_downgrade+0x6d0/0x6d0 [ 1864.026874][T21128] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1864.026895][T21128] ? wait_for_completion+0x260/0x260 [ 1864.026921][T21128] ? vfs_write+0x18e/0xa30 [ 1864.026940][T21128] ? fput_many+0x2f/0x1a0 [ 1864.026967][T21128] __x64_sys_sendmmsg+0x99/0x100 [ 1864.026990][T21128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.027007][T21128] do_syscall_64+0x2d/0x70 [ 1864.027027][T21128] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1864.027044][T21128] RIP: 0033:0x45e159 [ 1864.027062][T21128] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1864.027076][T21128] RSP: 002b:00007f6bb094dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1864.027097][T21128] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e159 [ 1864.027108][T21128] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1864.027119][T21128] RBP: 00007f6bb094dca0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.027129][T21128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.027149][T21128] R13: 00000000016afb7f R14: 00007f6bb094e9c0 R15: 000000000119c034 [ 1864.049998][T24431] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1864.141400][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1864.144081][T24431] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1864.176580][T22412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.216697][T22412] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 1864.341697][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1864.350905][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1864.373446][T22412] usb 2-1: Product: syz [ 1864.383092][T22412] usb 2-1: Manufacturer: syz [ 1864.392269][T24431] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 07:12:25 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:25 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 07:12:25 executing program 5 (fault-call:8 fault-nth:3): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 1864.434639][T24431] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1864.480946][T22412] usb 5-1: USB disconnect, device number 55 [ 1864.523229][T24431] usb 1-1: Product: syz [ 1864.536796][T21144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1864.562855][T24431] usb 1-1: Manufacturer: syz [ 1864.612648][T21159] FAULT_INJECTION: forcing a failure. [ 1864.612648][T21159] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.632588][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1864.638329][T13379] usb 2-1: USB disconnect, device number 97 [ 1864.656110][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1864.690275][T24431] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1864.714819][T21159] CPU: 0 PID: 21159 Comm: syz-executor.5 Not tainted 5.10.0-rc7-syzkaller #0 [ 1864.723620][T21159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1864.733745][T21159] Call Trace: [ 1864.737103][T21159] dump_stack+0x107/0x163 [ 1864.745457][T21159] should_fail.cold+0x5/0xa [ 1864.752077][T21159] ? skb_clone+0x14f/0x3c0 [ 1864.756514][T21159] should_failslab+0x5/0x10 [ 1864.761058][T21159] kmem_cache_alloc+0x5b/0x440 [ 1864.765873][T21159] skb_clone+0x14f/0x3c0 [ 1864.770911][T21159] netlink_deliver_tap+0x990/0xb70 [ 1864.777060][T21159] netlink_unicast+0x5e5/0x7d0 [ 1864.781893][T21159] ? netlink_attachskb+0x810/0x810 [ 1864.787030][T21159] ? __check_object_size+0x30/0x3f0 [ 1864.792251][T21159] netlink_sendmsg+0x856/0xd90 [ 1864.797677][T21159] ? netlink_unicast+0x7d0/0x7d0 [ 1864.803776][T21159] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1864.809114][T21159] ? netlink_unicast+0x7d0/0x7d0 [ 1864.814071][T21159] sock_sendmsg+0xcf/0x120 [ 1864.818507][T21159] ____sys_sendmsg+0x331/0x810 [ 1864.823640][T21159] ? kernel_sendmsg+0x50/0x50 [ 1864.828344][T21159] ? do_recvmmsg+0x6c0/0x6c0 [ 1864.832977][T21159] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1864.839007][T21159] ___sys_sendmsg+0xf3/0x170 [ 1864.843624][T21159] ? sendmsg_copy_msghdr+0x160/0x160 [ 1864.850119][T21159] ? __fget_files+0x272/0x400 [ 1864.854820][T21159] ? lock_downgrade+0x6d0/0x6d0 [ 1864.859702][T21159] ? __fget_files+0x294/0x400 [ 1864.864457][T21159] ? __fget_light+0xea/0x280 [ 1864.869067][T21159] __sys_sendmmsg+0x195/0x470 [ 1864.873760][T21159] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1864.878795][T21159] ? lock_downgrade+0x6d0/0x6d0 [ 1864.883679][T21159] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1864.890281][T21159] ? wait_for_completion+0x260/0x260 [ 1864.895589][T21159] ? vfs_write+0x18e/0xa30 [ 1864.900036][T21159] ? fput_many+0x2f/0x1a0 [ 1864.904402][T21159] __x64_sys_sendmmsg+0x99/0x100 [ 1864.910101][T21159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.916015][T21159] do_syscall_64+0x2d/0x70 [ 1864.920451][T21159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1864.926354][T21159] RIP: 0033:0x45e159 [ 1864.930264][T21159] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1864.949882][T21159] RSP: 002b:00007f6bb094dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1864.958311][T21159] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e159 [ 1864.966296][T21159] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1864.974278][T21159] RBP: 00007f6bb094dca0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.982285][T21159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1864.990904][T21159] R13: 00000000016afb7f R14: 00007f6bb094e9c0 R15: 000000000119c034 [ 1865.174500][T21159] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1865.190450][T21159] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1865.221122][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1865.242665][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1865.282385][T22412] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1865.312664][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 1865.493122][ C0] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1865.653870][T22412] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1865.665378][T22412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.675854][ T7] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1865.703668][T22412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1865.733751][T22412] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1865.922005][T22412] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1865.931277][T22412] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1865.939374][T22412] usb 5-1: Product: syz [ 1865.946511][T22412] usb 5-1: Manufacturer: syz [ 1865.992585][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1865.997835][T22412] cdc_wdm 5-1:1.0: skipping garbage [ 1866.025443][T22412] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1866.051580][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1866.060223][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.092285][ T7] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 1866.301503][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1866.310587][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1866.351588][ T7] usb 2-1: can't set config #1, error -71 [ 1866.359123][ T7] usb 2-1: USB disconnect, device number 98 07:12:27 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:27 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x41015500, 0x0) 07:12:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 07:12:27 executing program 5 (fault-call:8 fault-nth:4): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:27 executing program 1: ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000180)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008814}, 0x8800) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000040)={0xfd, 0x5, 0x2}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007627a9495341eb09040097dd0260004201000000693e04153ebf96ed00052406000105240000001f0006031a00050000000200090581"], 0x0) [ 1866.780342][ T3001] usb 1-1: USB disconnect, device number 68 [ 1866.792414][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1866.866674][T21218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1866.925403][T21227] FAULT_INJECTION: forcing a failure. [ 1866.925403][T21227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1866.977589][T21227] CPU: 0 PID: 21227 Comm: syz-executor.5 Not tainted 5.10.0-rc7-syzkaller #0 [ 1866.986401][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1866.996472][T21227] Call Trace: [ 1866.999792][T21227] dump_stack+0x107/0x163 [ 1867.004148][T21227] should_fail.cold+0x5/0xa [ 1867.008706][T21227] _copy_from_user+0x2c/0x180 [ 1867.013409][T21227] __copy_msghdr_from_user+0x91/0x4b0 [ 1867.018810][T21227] ? __ia32_sys_shutdown+0x70/0x70 [ 1867.023974][T21227] ? lock_chain_count+0x20/0x20 [ 1867.028847][T21227] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1867.034163][T21227] ? netlink_unicast+0x7d0/0x7d0 [ 1867.039127][T21227] ? sock_sendmsg+0x55/0x120 [ 1867.043749][T21227] sendmsg_copy_msghdr+0xa1/0x160 [ 1867.048799][T21227] ? do_recvmmsg+0x6c0/0x6c0 [ 1867.053445][T21227] ? __lock_acquire+0x16b7/0x5500 [ 1867.058504][T21227] ___sys_sendmsg+0xc6/0x170 [ 1867.063120][T21227] ? sendmsg_copy_msghdr+0x160/0x160 [ 1867.068542][T21227] ? find_held_lock+0x2d/0x110 [ 1867.073339][T21227] ? __might_fault+0xd3/0x180 [ 1867.078035][T21227] ? lock_downgrade+0x6d0/0x6d0 [ 1867.082934][T21227] __sys_sendmmsg+0x195/0x470 [ 1867.087637][T21227] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1867.092766][T21227] ? lock_downgrade+0x6d0/0x6d0 [ 1867.097650][T21227] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1867.103315][T21227] ? wait_for_completion+0x260/0x260 [ 1867.108626][T21227] ? vfs_write+0x18e/0xa30 [ 1867.113067][T21227] ? fput_many+0x2f/0x1a0 [ 1867.117452][T21227] __x64_sys_sendmmsg+0x99/0x100 [ 1867.122426][T21227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1867.129741][T21227] do_syscall_64+0x2d/0x70 [ 1867.134165][T21227] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1867.140066][T21227] RIP: 0033:0x45e159 [ 1867.143997][T21227] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1867.163612][T21227] RSP: 002b:00007f6bb094dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1867.172041][T21227] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e159 [ 1867.180018][T21227] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1867.188000][T21227] RBP: 00007f6bb094dca0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.195982][T21227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1867.203957][T21227] R13: 00000000016afb7f R14: 00007f6bb094e9c0 R15: 000000000119c034 07:12:28 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 07:12:28 executing program 5 (fault-call:8 fault-nth:5): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1867.321220][ T3001] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1867.371810][ T7] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1867.389420][T21244] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1867.450311][T21248] FAULT_INJECTION: forcing a failure. [ 1867.450311][T21248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1867.502245][T21248] CPU: 1 PID: 21248 Comm: syz-executor.5 Not tainted 5.10.0-rc7-syzkaller #0 [ 1867.511075][T21248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1867.521250][T21248] Call Trace: [ 1867.524560][T21248] dump_stack+0x107/0x163 [ 1867.528915][T21248] should_fail.cold+0x5/0xa [ 1867.533453][T21248] _copy_from_user+0x2c/0x180 [ 1867.538154][T21248] iovec_from_user+0x246/0x3c0 [ 1867.543039][T21248] __import_iovec+0x65/0x500 [ 1867.547662][T21248] import_iovec+0x10c/0x150 [ 1867.552192][T21248] sendmsg_copy_msghdr+0x12d/0x160 [ 1867.557349][T21248] ? do_recvmmsg+0x6c0/0x6c0 [ 1867.561987][T21248] ? __lock_acquire+0x16b7/0x5500 [ 1867.567066][T21248] ___sys_sendmsg+0xc6/0x170 [ 1867.571683][T21248] ? sendmsg_copy_msghdr+0x160/0x160 [ 1867.577030][T21248] ? find_held_lock+0x2d/0x110 [ 1867.581822][T21248] ? __might_fault+0xd3/0x180 [ 1867.586515][T21248] ? lock_downgrade+0x6d0/0x6d0 [ 1867.591395][T21248] __sys_sendmmsg+0x195/0x470 [ 1867.596117][T21248] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1867.601675][T21248] ? lock_downgrade+0x6d0/0x6d0 [ 1867.607303][T21248] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1867.612880][T21248] ? wait_for_completion+0x260/0x260 [ 1867.618208][T21248] ? vfs_write+0x18e/0xa30 [ 1867.622673][T21248] ? fput_many+0x2f/0x1a0 [ 1867.627063][T21248] __x64_sys_sendmmsg+0x99/0x100 [ 1867.632713][T21248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1867.638665][T21248] do_syscall_64+0x2d/0x70 [ 1867.643919][T21248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1867.649853][T21248] RIP: 0033:0x45e159 [ 1867.653759][T21248] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1867.673399][T21248] RSP: 002b:00007f6bb094dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1867.682446][T21248] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e159 [ 1867.691280][T21248] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1867.700148][T21248] RBP: 00007f6bb094dca0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.709910][T21248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1867.717898][T21248] R13: 00000000016afb7f R14: 00007f6bb094e9c0 R15: 000000000119c034 [ 1867.811253][ T7] usb 2-1: device descriptor read/64, error 18 [ 1867.891589][ T3001] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1867.915976][ T3001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 07:12:28 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:28 executing program 5 (fault-call:8 fault-nth:6): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 07:12:28 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 1867.948829][ T3001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1867.984422][ T3001] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.998685][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1868.014656][T13161] usb 5-1: USB disconnect, device number 56 [ 1868.070779][T21278] FAULT_INJECTION: forcing a failure. [ 1868.070779][T21278] name failslab, interval 1, probability 0, space 0, times 0 [ 1868.101236][ T7] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1868.122238][ T3001] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1868.142303][ T3001] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1868.161219][ T3001] usb 1-1: Product: syz [ 1868.174489][T21278] CPU: 0 PID: 21278 Comm: syz-executor.5 Not tainted 5.10.0-rc7-syzkaller #0 [ 1868.174911][ T3001] usb 1-1: Manufacturer: syz [ 1868.183282][T21278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1868.183291][T21278] Call Trace: [ 1868.183320][T21278] dump_stack+0x107/0x163 [ 1868.183344][T21278] should_fail.cold+0x5/0xa [ 1868.183371][T21278] ? __alloc_skb+0x71/0x550 [ 1868.183393][T21278] should_failslab+0x5/0x10 [ 1868.183413][T21278] kmem_cache_alloc_node+0x55/0x470 [ 1868.183443][T21278] __alloc_skb+0x71/0x550 [ 1868.183469][T21278] netlink_sendmsg+0x94f/0xd90 [ 1868.183495][T21278] ? netlink_unicast+0x7d0/0x7d0 [ 1868.183525][T21278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1868.183541][T21278] ? netlink_unicast+0x7d0/0x7d0 [ 1868.183564][T21278] sock_sendmsg+0xcf/0x120 [ 1868.183588][T21278] ____sys_sendmsg+0x331/0x810 [ 1868.183627][T21278] ? kernel_sendmsg+0x50/0x50 [ 1868.265904][T21278] ? do_recvmmsg+0x6c0/0x6c0 [ 1868.270508][T21278] ? __lock_acquire+0x16b7/0x5500 [ 1868.275547][T21278] ___sys_sendmsg+0xf3/0x170 [ 1868.280148][T21278] ? sendmsg_copy_msghdr+0x160/0x160 [ 1868.285449][T21278] ? find_held_lock+0x2d/0x110 [ 1868.290220][T21278] ? __might_fault+0xd3/0x180 [ 1868.294898][T21278] ? lock_downgrade+0x6d0/0x6d0 [ 1868.299766][T21278] __sys_sendmmsg+0x195/0x470 [ 1868.304449][T21278] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1868.309471][T21278] ? lock_downgrade+0x6d0/0x6d0 [ 1868.314340][T21278] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1868.319892][T21278] ? wait_for_completion+0x260/0x260 [ 1868.325208][T21278] ? vfs_write+0x18e/0xa30 [ 1868.329665][T21278] ? fput_many+0x2f/0x1a0 [ 1868.334033][T21278] __x64_sys_sendmmsg+0x99/0x100 [ 1868.338996][T21278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1868.344890][T21278] do_syscall_64+0x2d/0x70 [ 1868.349332][T21278] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1868.355225][T21278] RIP: 0033:0x45e159 [ 1868.359123][T21278] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1868.378729][T21278] RSP: 002b:00007f6bb094dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1868.387151][T21278] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e159 [ 1868.395127][T21278] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 1868.403121][T21278] RBP: 00007f6bb094dca0 R08: 0000000000000000 R09: 0000000000000000 [ 1868.411185][T21278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1868.419156][T21278] R13: 00000000016afb7f R14: 00007f6bb094e9c0 R15: 000000000119c034 [ 1868.483720][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1868.491124][ T3001] cdc_wdm 1-1:1.0: skipping garbage [ 1868.491256][ T7] usb 2-1: device descriptor read/64, error 18 [ 1868.524175][ T3001] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1868.621541][T13161] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1868.632281][ T7] usb usb2-port1: attempt power cycle [ 1868.982154][T13161] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1869.001948][T13161] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.040870][T13161] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1869.078344][T13161] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1869.221340][T13161] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1869.230446][T13161] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1869.261189][T13161] usb 5-1: Product: syz [ 1869.265386][T13161] usb 5-1: Manufacturer: syz [ 1869.351365][ T7] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1869.352119][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1869.392083][T13161] cdc_wdm 5-1:1.0: skipping garbage [ 1869.408640][T13161] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1869.461543][ T7] usb 2-1: Invalid ep0 maxpacket: 73 [ 1869.571346][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1869.591121][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1869.631177][ T7] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1869.651190][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 1869.731291][ T7] usb 2-1: Invalid ep0 maxpacket: 73 [ 1869.736730][ T7] usb usb2-port1: unable to enumerate USB device [ 1869.831157][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1870.097394][ T3001] usb 1-1: USB disconnect, device number 69 07:12:31 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858b9d24e0014871d26945e9e7d30f8a871aab7c10366a5a549d5067c36670e47895e961af76d0f18c4e02e04e434d668c13cf5f3b97429b56ec3ad06ad08a1416aca6f655e16396f7c1b11c32c906aa6c84ca78f1983e39942b6c49c4159577d64d9a2715da3eac386c1aa7470689d3c76b0170d393f19d1b1d979a9fd323ab989c658592badde3cf8d201", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 07:12:31 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 07:12:31 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:12:31 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x27, &(0x7f0000000000)={0x2c, 0x0, 0xec55}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) [ 1870.678377][T21339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1870.742542][T21350] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1870.788614][T21350] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:31 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec68, 0x0) 07:12:31 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x80085502, 0x0) 07:12:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 1870.968333][T13379] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1870.971333][T13161] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1870.995711][T21366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1871.083104][T21367] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1871.100124][T21367] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1871.134996][T21366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1871.150633][T21377] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1871.173020][T21377] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1871.201236][T13379] usb 2-1: device descriptor read/64, error 18 07:12:32 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x8a, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:32 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x2) 07:12:32 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x80086301, 0x0) 07:12:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 1871.352685][ T7] usb 5-1: USB disconnect, device number 57 [ 1871.373081][T13161] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1871.399681][T13161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.448120][T13161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1871.473840][T13161] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.491279][T13379] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1871.641769][T13161] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1871.659125][T13161] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1871.681395][T13379] usb 2-1: device descriptor read/64, error 18 [ 1871.692555][T13161] usb 1-1: Product: syz [ 1871.709407][T13161] usb 1-1: Manufacturer: syz [ 1871.762255][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1871.767496][T13161] cdc_wdm 1-1:1.0: skipping garbage [ 1871.786989][T13161] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1871.811404][T13379] usb usb2-port1: attempt power cycle [ 1871.831514][ T7] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1872.201222][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1872.231917][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.276116][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1872.292418][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.341128][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1872.361186][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1872.431294][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 1872.451698][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1872.460794][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1872.478685][ T7] usb 5-1: Product: syz [ 1872.486892][ T7] usb 5-1: Manufacturer: syz [ 1872.533150][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1872.538427][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 1872.551441][T13379] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1872.568101][ T7] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1872.611338][ C0] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1872.721409][T13379] usb 2-1: device descriptor read/8, error -61 [ 1872.991177][T13379] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1873.171326][T13379] usb 2-1: device descriptor read/8, error -61 [ 1873.291915][T13379] usb usb2-port1: unable to enumerate USB device 07:12:34 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:34 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x3) 07:12:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 07:12:34 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 07:12:34 executing program 1: lstat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000080)=0x404, 0x4) [ 1873.898183][T22412] usb 1-1: USB disconnect, device number 70 [ 1873.911193][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1873.995469][T21462] __nla_validate_parse: 6 callbacks suppressed [ 1873.995483][T21462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 1874.143331][T21469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:34 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x4) 07:12:35 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 1874.231231][ T7] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1874.278007][T21485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1874.363953][T21490] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1874.386833][T21490] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1874.445216][T21485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1874.461189][T22412] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1874.463401][T21501] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1874.468883][ T7] usb 2-1: device descriptor read/64, error 18 [ 1874.520218][T21501] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1874.771490][ T7] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1874.841635][T22412] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1874.850509][T22412] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.874243][T22412] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1874.903961][T22412] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:12:35 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x94, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede4160000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 07:12:35 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 07:12:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x5) [ 1874.981183][ T7] usb 2-1: device descriptor read/64, error 18 [ 1875.008208][T13379] usb 5-1: USB disconnect, device number 58 [ 1875.081569][T22412] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1875.086002][T21521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1875.104682][T22412] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1875.113655][ T7] usb usb2-port1: attempt power cycle [ 1875.166818][T22412] usb 1-1: Product: syz [ 1875.194223][T22412] usb 1-1: Manufacturer: syz [ 1875.228113][T21524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1875.262672][T22412] cdc_wdm 1-1:1.0: skipping garbage [ 1875.268549][T22412] cdc_wdm 1-1:1.0: skipping garbage [ 1875.306474][T22412] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1875.571922][T13379] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1875.821326][ T7] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1875.831164][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1875.851107][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1875.911125][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 1875.971315][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1875.980393][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.993523][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1876.003043][T13379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.014970][ T7] usb 2-1: device descriptor read/8, error -61 [ 1876.091157][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1876.151821][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1876.160943][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1876.170330][T13379] usb 5-1: Product: syz [ 1876.176771][T13379] usb 5-1: Manufacturer: syz [ 1876.242474][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1876.247746][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1876.272124][T13379] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1876.331360][ T7] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1876.501282][ T7] usb 2-1: device descriptor read/8, error -61 [ 1876.625200][ T7] usb usb2-port1: unable to enumerate USB device 07:12:38 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x6) 07:12:38 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 07:12:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 07:12:38 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'xfrm0\x00'}) r1 = socket$inet(0x2b, 0x1, 0x1) bind$inet(r1, &(0x7f0000000080)={0xa, 0x4e24, @multicast1}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) [ 1877.368531][T13379] usb 1-1: USB disconnect, device number 71 [ 1877.371169][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 07:12:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x7) 07:12:38 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 07:12:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 1877.711266][T22412] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1877.881382][T13379] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1878.111463][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1878.120103][T22412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.167280][T22412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1878.182877][T22412] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1878.261692][T13379] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1878.270351][T13379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.300122][T13379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1878.315226][T13379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.329222][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1878.347641][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1878.363875][T22412] usb 2-1: Product: syz [ 1878.368289][T22412] usb 2-1: Manufacturer: syz [ 1878.422708][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1878.427952][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1878.454610][ T3001] usb 5-1: USB disconnect, device number 59 [ 1878.461586][T13379] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 07:12:39 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x94, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede4160000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:39 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x8) 07:12:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x190f0000}, 0x0) 07:12:39 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc0085504, 0x0) [ 1878.477572][T22412] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1878.516410][T13379] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1878.586810][T13379] usb 1-1: Product: syz [ 1878.614316][T13379] usb 1-1: Manufacturer: syz [ 1878.673435][T22438] usb 2-1: USB disconnect, device number 111 [ 1878.716943][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1878.739219][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1878.775085][T13379] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1879.121397][T13379] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1879.291134][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1879.311149][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1879.371130][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 1879.411297][ T9889] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1879.501263][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1879.510147][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.527303][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1879.541530][T13379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.551244][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1879.671263][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1879.680464][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1879.688651][T13379] usb 5-1: Product: syz [ 1879.693569][T13379] usb 5-1: Manufacturer: syz [ 1879.742986][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1879.748238][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1879.769161][T13379] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1879.772319][ T9889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1879.788633][ T9889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.828709][ T9889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1879.846192][ T9889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.971458][ T9889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1879.980723][ T9889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1879.990302][ T9889] usb 2-1: Product: syz [ 1879.995157][ T9889] usb 2-1: Manufacturer: syz [ 1880.042249][ T9889] cdc_wdm 2-1:1.0: skipping garbage [ 1880.047556][ T9889] cdc_wdm 2-1:1.0: skipping garbage [ 1880.072184][ T9889] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1880.251607][ T9889] usb 2-1: USB disconnect, device number 112 07:12:41 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x9) 07:12:41 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc0106438, 0x0) 07:12:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 07:12:41 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140c, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xff5, 0x28}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000) [ 1880.829729][T13379] usb 1-1: USB disconnect, device number 72 [ 1880.831118][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1880.842057][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1880.848659][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1880.854743][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1880.914659][T21711] __nla_validate_parse: 14 callbacks suppressed [ 1880.914673][T21711] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.039609][T21720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:41 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xa) 07:12:41 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc0185500, 0x0) 07:12:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 1881.201264][T22412] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1881.220347][T21739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.311614][T21744] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.340921][T21744] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.359013][T13379] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1881.404810][T21739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.424523][T21759] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.449909][T21759] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.583531][T22412] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1881.606945][T22412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.633736][T22412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1881.649329][T22412] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.771462][T13379] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1881.780107][T13379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.800606][T13379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1881.814970][T13379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.831344][T22412] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1881.840445][T22412] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1881.893609][T22412] usb 2-1: Product: syz [ 1881.916053][T22412] usb 2-1: Manufacturer: syz 07:12:42 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x94, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede4160000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:42 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc01864c6, 0x0) 07:12:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 07:12:42 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xb) [ 1881.942746][ T9889] usb 5-1: USB disconnect, device number 60 [ 1881.979604][T13379] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1882.002847][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1882.008119][T22412] cdc_wdm 2-1:1.0: skipping garbage [ 1882.042879][T13379] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1882.069480][T21784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1882.103477][T22412] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1882.113128][T13379] usb 1-1: Product: syz [ 1882.118210][T13379] usb 1-1: Manufacturer: syz [ 1882.197152][ T5] usb 2-1: USB disconnect, device number 113 [ 1882.205888][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1882.239730][T13379] cdc_wdm 1-1:1.0: skipping garbage [ 1882.282289][T13379] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1882.326791][T21788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1882.681247][T13379] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1882.791131][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1882.811137][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1882.991287][ T5] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1883.051197][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1883.111319][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1883.120092][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.140384][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1883.153905][T13379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.281870][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1883.294481][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1883.303101][T13379] usb 5-1: Product: syz [ 1883.307326][T13379] usb 5-1: Manufacturer: syz [ 1883.362482][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1883.367721][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1883.382526][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1883.401358][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.412936][T13379] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1883.424699][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1883.447402][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.601333][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1883.610561][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1883.625661][ T5] usb 2-1: Product: syz [ 1883.629820][ T5] usb 2-1: Manufacturer: syz [ 1883.692480][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1883.697864][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1883.721224][ T5] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1883.899726][ T5] usb 2-1: USB disconnect, device number 114 07:12:45 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 07:12:45 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 07:12:45 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xc) 07:12:45 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000}, {0x2, 0x0, @dev}, {0x2, 0x4e21, @remote}, 0x45, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1, 0x4000000002000000, 0xc}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) [ 1884.340937][ T9889] usb 1-1: USB disconnect, device number 73 [ 1884.351171][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 07:12:45 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xe) 07:12:45 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 07:12:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1884.681452][ T5] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1884.841543][ T9889] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1885.071616][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1885.080253][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.121163][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1885.130220][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.211812][ T9889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1885.220459][ T9889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.256245][ T9889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1885.276019][ T9889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.291769][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1885.313668][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1885.351221][ T5] usb 2-1: Product: syz [ 1885.375731][ T5] usb 2-1: Manufacturer: syz [ 1885.449408][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1885.449427][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1885.449559][ T5] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1885.471695][ T9889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1885.481594][ T9889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 07:12:46 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0xf) 07:12:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 07:12:46 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 07:12:46 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x99, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/153) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1885.501148][ T9889] usb 1-1: Product: syz [ 1885.536979][ T9889] usb 1-1: Manufacturer: syz [ 1885.559524][T24431] usb 5-1: USB disconnect, device number 61 [ 1885.622783][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1885.653382][ T9889] cdc_wdm 1-1:1.0: skipping garbage [ 1885.694317][ T9889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1885.739547][ T5] usb 2-1: USB disconnect, device number 115 [ 1886.021244][T24431] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1886.201153][ C1] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1886.221137][ C1] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1886.391455][T24431] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1886.400279][T24431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.413709][T24431] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1886.423333][T24431] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.461231][ C1] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1886.511234][ T5] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1886.551536][T24431] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1886.560781][T24431] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1886.576712][T24431] usb 5-1: Product: syz [ 1886.580923][T24431] usb 5-1: Manufacturer: syz [ 1886.633012][T24431] cdc_wdm 5-1:1.0: skipping garbage [ 1886.638274][T24431] cdc_wdm 5-1:1.0: skipping garbage [ 1886.661615][T24431] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1886.911298][ T5] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1886.911323][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.911341][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1886.911412][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.071554][ T5] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1887.080981][ T5] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1887.097577][ T5] usb 2-1: Product: syz [ 1887.106451][ T5] usb 2-1: Manufacturer: syz [ 1887.162367][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1887.167630][ T5] cdc_wdm 2-1:1.0: skipping garbage [ 1887.191685][ T5] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1887.375705][ T5] usb 2-1: USB disconnect, device number 116 07:12:48 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) 07:12:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x10) 07:12:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xc0884123, 0x0) 07:12:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 07:12:48 executing program 1: lstat(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r0, 0x0) lstat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="7161cbdb961f029b420d381cd555902e6f6449f7e46e8c1b84c6eea9d9dc4a547048f775997a20466431b0107cec7d63240ecb6226823e460ea3041a7c5ae3c8a92487b7373a79df7bfd851b940000000000000000fc0d00"], 0x0) [ 1887.737570][T24431] usb 1-1: USB disconnect, device number 74 [ 1887.751153][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1887.756774][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1887.763472][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1887.769581][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1887.840356][T21988] __nla_validate_parse: 14 callbacks suppressed [ 1887.840368][T21988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1887.930730][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1887.958992][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.008146][T21988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:48 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xd01c4813, 0x0) [ 1888.050726][T22009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.086897][T22009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 07:12:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x11) [ 1888.315749][T22026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.321210][T24431] usb 1-1: new high-speed USB device number 75 using dummy_hcd 07:12:49 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x2) [ 1888.423282][T22028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 07:12:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf6, 0xf6, 0x3, [@datasec={0x10, 0x5, 0x0, 0xf, 0x3, [{0x4, 0x7, 0x34}, {0x4, 0x9, 0xfffff801}, {0x1, 0x8, 0xfffffff7}, {0x2, 0x0, 0xff}, {0x4, 0x8001, 0x401}], "4f1e09"}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x3ff, [{0x2, 0x2, 0x1ff}, {0xe, 0x4, 0x1}, {0x1, 0x4, 0x8}, {0xb, 0x3, 0xae}, {0x1, 0x3, 0x5}, {0x7, 0x5, 0xff}]}, @datasec={0x3, 0x3, 0x0, 0xf, 0x3, [{0x5, 0xe1, 0x7}, {0x5, 0x6f, 0x4}, {0x4, 0x3}], "9dd1da"}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61]}}, &(0x7f00000001c0)=""/214, 0x113, 0xd6, 0x1}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581"], 0x0) 07:12:49 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x25) [ 1888.608757][T22050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.711428][T24431] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1888.732332][T22050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.732705][T24431] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.763611][T24431] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1888.781620][T24431] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:12:49 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x99, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/153) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1888.871385][ T7] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1888.891870][T13379] usb 5-1: USB disconnect, device number 62 [ 1888.921394][T24431] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1888.930494][T24431] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1888.963360][T24431] usb 1-1: Product: syz [ 1888.967699][T24431] usb 1-1: Manufacturer: syz [ 1889.022303][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1889.027549][T24431] cdc_wdm 1-1:1.0: skipping garbage [ 1889.061762][T24431] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1889.241630][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1889.262595][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.310858][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1889.352607][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.365095][T13379] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1889.521354][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1889.531149][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1889.539145][ T7] usb 2-1: Product: syz [ 1889.552382][ T7] usb 2-1: Manufacturer: syz [ 1889.591136][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1889.602488][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1889.607721][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1889.613103][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1889.639464][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1889.761333][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1889.770244][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.786853][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1889.800770][T13379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.816469][ T17] usb 2-1: USB disconnect, device number 117 [ 1889.891183][ C0] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1889.951644][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1889.960723][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1889.968833][T13379] usb 5-1: Product: syz [ 1889.973615][T13379] usb 5-1: Manufacturer: syz [ 1890.032300][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1890.042180][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1890.062761][T13379] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device 07:12:52 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="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", 0x128) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x100, &(0x7f0000000f00)={0x5, 0xf, 0x100, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "189b1bc86b5b984712de6a442d01842f"}, @generic={0xd7, 0x10, 0x0, "784e688ff722da3fe152b9921b70cfee60f707da05e414e75ab29ff7f1e179042eaf2c11abc79e2a3c176f06aad92a03f6183fcd911ae789be3d943189213c3ff6a3669ceb3734e002b828a85b3ddc90c136781faa8f5034170536f54c592cf4d97b617da52ca8949afb0a5d106a86592651ad2df64ca35d81cf012dd0c92eec4777f4c29e53d9a83dbbf3b415215a1582f01b2c586e2e7bf29a7f04117d73ad78ea934b6331300ff36a2d09f8a9a5341443bde768a0c13bc92ff3330631ca45794650735b5dd3764a0b9d4fb369b52ee0f63712"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, [0x0]}]}}) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffe0e, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/157) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(0xffffffffffffffff, &(0x7f0000001000)=""/4096, 0x1000) [ 1891.220079][ T5] usb 1-1: USB disconnect, device number 75 [ 1891.226226][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1891.226272][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1891.226287][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1891.226305][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 07:12:52 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x3) 07:12:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 07:12:52 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x48) 07:12:52 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x4) 07:12:52 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x4c) 07:12:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 1891.741404][ T5] usb 1-1: new high-speed USB device number 76 using dummy_hcd 07:12:52 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x50) 07:12:52 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1]) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)=""/166, &(0x7f0000000000)=0x914a2292f9d365dc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x5b5, 0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x82}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x5) [ 1892.142327][ T5] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1892.152579][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.238053][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 07:12:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x2) [ 1892.278552][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:12:53 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="8c0000002c00270d000000090000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000d0001006d61746368616c6c000000005800020054000200500001000c000100736b626564697400240002800600070000000000180002"], 0x8c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x54) [ 1892.422047][T13379] usb 5-1: USB disconnect, device number 63 [ 1892.443278][ T5] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 07:12:53 executing program 4: write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="1df73919a91b9fbd35c77e7881dcd4cb2eb55d1e07bc785063c5719605eeca07805f4133834d6e5f5c29dc7bea62454ed68b04038c3b7d75a43ba3f254f22df52110d6e21f7ba56b386f3b6b655e89d45037a93a4ebb48dd052f6ca7aaae8b6e145c760ebede3d6b686e72e57b46e070c1893bb71fb22dd6bdd2eb408d146a1925ce7579909b254d248fefce67729961c31b7909b48f594e1a820977e858", 0x9e) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="53f3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x0, 0x99, &(0x7f00000002c0)="333d8e3d7ab74e963e724e24ffdf8ab57d41ae54cadbe267614cedff2df002303fc3268c2ccc9deb1699f7445b9b04fdb30c2af7b772f9471ac3f3a71bad882e499eba67c6e348be59ad61b6c857d28ed5a90067aa5d0bbc03abf5aca9cfce6b8b7ff9b73f67faa4c9d8f6bf59d6f3533ebc53f1c5f1728ea3d527ed1e1834c8d278800c2a13b84aace22e14ede41600"/153) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000001000)=""/4096, 0x1000) [ 1892.474203][ T5] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1892.501181][ T5] usb 1-1: Product: syz [ 1892.517408][ T5] usb 1-1: Manufacturer: syz [ 1892.592350][ T5] cdc_wdm 1-1:1.0: skipping garbage [ 1892.601682][ T5] cdc_wdm 1-1:1.0: skipping garbage [ 1892.619630][ T5] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1892.941274][T13379] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1893.321279][T13379] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1893.334796][T13379] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.357960][T13379] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1893.388569][T13379] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.541915][T13379] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1893.550986][T13379] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1893.567563][T13379] usb 5-1: Product: syz [ 1893.575734][T13379] usb 5-1: Manufacturer: syz [ 1893.632464][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1893.637713][T13379] cdc_wdm 5-1:1.0: skipping garbage [ 1893.672651][T13379] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1893.851166][ C0] cdc_wdm 1-1:1.0: unknown notification 61 received: index 46970 len 38478 [ 1893.871197][ C0] cdc_wdm 1-1:1.0: unknown notification 140 received: index 42101 len 41787 [ 1894.131253][ C0] cdc_wdm 1-1:1.0: unknown notification 47 received: index 30720 len 26702 [ 1894.414104][T13379] usb 1-1: USB disconnect, device number 76 [ 1894.421172][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1894.427795][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1894.433882][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1894.532193][T22223] ================================================================== [ 1894.540587][T22223] BUG: KASAN: use-after-free in usb_submit_urb+0x11c7/0x14e0 [ 1894.548092][T22223] Read of size 4 at addr ffff888094d9e018 by task syz-executor.4/22223 [ 1894.556378][T22223] [ 1894.558702][T22223] CPU: 1 PID: 22223 Comm: syz-executor.4 Not tainted 5.10.0-rc7-syzkaller #0 [ 1894.567455][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1894.577707][T22223] Call Trace: [ 1894.580992][T22223] dump_stack+0x107/0x163 [ 1894.585317][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1894.590343][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1894.595362][T22223] print_address_description.constprop.0.cold+0xae/0x4c8 [ 1894.602417][T22223] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1894.607799][T22223] ? vprintk_func+0x95/0x1e0 [ 1894.612403][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1894.617419][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1894.622440][T22223] kasan_report.cold+0x1f/0x37 [ 1894.627201][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1894.632232][T22223] usb_submit_urb+0x11c7/0x14e0 [ 1894.637115][T22223] service_outstanding_interrupt.part.0+0x5f/0xa0 [ 1894.643534][T22223] wdm_read+0x99b/0xbc0 [ 1894.647704][T22223] ? wdm_rxwork+0x200/0x200 [ 1894.652238][T22223] ? security_file_permission+0x248/0x560 [ 1894.657945][T22223] ? wdm_rxwork+0x200/0x200 [ 1894.662444][T22223] vfs_read+0x1b5/0x570 [ 1894.666595][T22223] ksys_read+0x12d/0x250 [ 1894.670845][T22223] ? vfs_write+0xa30/0xa30 [ 1894.675270][T22223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1894.681180][T22223] do_syscall_64+0x2d/0x70 [ 1894.685615][T22223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1894.691508][T22223] RIP: 0033:0x45e159 [ 1894.695413][T22223] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1894.715041][T22223] RSP: 002b:00007febe42a3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1894.723467][T22223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1894.731430][T22223] RDX: 0000000000001000 RSI: 0000000020001000 RDI: 0000000000000005 [ 1894.739391][T22223] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 1894.747362][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 1894.755354][T22223] R13: 00000000016afb7f R14: 00007febe42a49c0 R15: 000000000119c0dc [ 1894.763321][T22223] [ 1894.765632][T22223] Allocated by task 5: [ 1894.769711][T22223] kasan_save_stack+0x1b/0x40 [ 1894.774375][T22223] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1894.779996][T22223] usb_alloc_dev+0x51/0xea0 [ 1894.784502][T22223] hub_event+0x1def/0x42d0 [ 1894.788902][T22223] process_one_work+0x933/0x15a0 [ 1894.793821][T22223] worker_thread+0x64c/0x1120 [ 1894.798500][T22223] kthread+0x3b1/0x4a0 [ 1894.802573][T22223] ret_from_fork+0x1f/0x30 [ 1894.806986][T22223] [ 1894.809300][T22223] Freed by task 13379: [ 1894.813353][T22223] kasan_save_stack+0x1b/0x40 [ 1894.818024][T22223] kasan_set_track+0x1c/0x30 [ 1894.822738][T22223] kasan_set_free_info+0x1b/0x30 [ 1894.827665][T22223] __kasan_slab_free+0x102/0x140 [ 1894.832589][T22223] slab_free_freelist_hook+0x5d/0x150 [ 1894.837945][T22223] kfree+0xdb/0x360 [ 1894.841781][T22223] device_release+0x9f/0x240 [ 1894.846358][T22223] kobject_put+0x1c8/0x540 [ 1894.850961][T22223] put_device+0x1b/0x30 [ 1894.855143][T22223] hub_event+0x1c8a/0x42d0 [ 1894.859545][T22223] process_one_work+0x933/0x15a0 [ 1894.864508][T22223] worker_thread+0x64c/0x1120 [ 1894.869169][T22223] kthread+0x3b1/0x4a0 [ 1894.873223][T22223] ret_from_fork+0x1f/0x30 [ 1894.877650][T22223] [ 1894.879990][T22223] Last call_rcu(): [ 1894.883708][T22223] kasan_save_stack+0x1b/0x40 [ 1894.888369][T22223] kasan_record_aux_stack+0xc0/0xf0 [ 1894.893553][T22223] call_rcu+0xbb/0x700 [ 1894.897624][T22223] netlink_release+0xd43/0x1cf0 [ 1894.902478][T22223] __sock_release+0xcd/0x280 [ 1894.907050][T22223] sock_close+0x18/0x20 [ 1894.911191][T22223] __fput+0x285/0x920 [ 1894.915171][T22223] task_work_run+0xdd/0x190 [ 1894.919688][T22223] exit_to_user_mode_prepare+0x17e/0x1a0 [ 1894.925330][T22223] syscall_exit_to_user_mode+0x38/0x260 [ 1894.930886][T22223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1894.936775][T22223] [ 1894.939085][T22223] Second to last call_rcu(): [ 1894.943661][T22223] kasan_save_stack+0x1b/0x40 [ 1894.948339][T22223] kasan_record_aux_stack+0xc0/0xf0 [ 1894.953570][T22223] call_rcu+0xbb/0x700 [ 1894.957642][T22223] netlink_release+0xd43/0x1cf0 [ 1894.962475][T22223] __sock_release+0xcd/0x280 [ 1894.967064][T22223] sock_close+0x18/0x20 [ 1894.971223][T22223] __fput+0x285/0x920 [ 1894.975216][T22223] task_work_run+0xdd/0x190 [ 1894.979702][T22223] do_exit+0xb64/0x29b0 [ 1894.983842][T22223] do_group_exit+0x125/0x310 [ 1894.988413][T22223] __x64_sys_exit_group+0x3a/0x50 [ 1894.993438][T22223] do_syscall_64+0x2d/0x70 [ 1894.997844][T22223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1895.003720][T22223] [ 1895.006051][T22223] The buggy address belongs to the object at ffff888094d9e000 [ 1895.006051][T22223] which belongs to the cache kmalloc-2k of size 2048 [ 1895.020087][T22223] The buggy address is located 24 bytes inside of [ 1895.020087][T22223] 2048-byte region [ffff888094d9e000, ffff888094d9e800) [ 1895.033353][T22223] The buggy address belongs to the page: [ 1895.038972][T22223] page:00000000c7fb73e4 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x94d98 [ 1895.049118][T22223] head:00000000c7fb73e4 order:3 compound_mapcount:0 compound_pincount:0 [ 1895.057445][T22223] flags: 0xfff00000010200(slab|head) [ 1895.062729][T22223] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888010042000 [ 1895.071340][T22223] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 1895.079904][T22223] page dumped because: kasan: bad access detected [ 1895.086299][T22223] [ 1895.088608][T22223] Memory state around the buggy address: [ 1895.094222][T22223] ffff888094d9df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1895.102270][T22223] ffff888094d9df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1895.110334][T22223] >ffff888094d9e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1895.118376][T22223] ^ [ 1895.123211][T22223] ffff888094d9e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1895.131255][T22223] ffff888094d9e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1895.139295][T22223] ================================================================== [ 1895.147445][T22223] Disabling lock debugging due to kernel taint [ 1895.158386][T22223] Kernel panic - not syncing: panic_on_warn set ... [ 1895.164990][T22223] CPU: 1 PID: 22223 Comm: syz-executor.4 Tainted: G B 5.10.0-rc7-syzkaller #0 [ 1895.175899][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1895.185953][T22223] Call Trace: [ 1895.189247][T22223] dump_stack+0x107/0x163 [ 1895.193579][T22223] ? usb_submit_urb+0x1170/0x14e0 [ 1895.198604][T22223] panic+0x306/0x73d [ 1895.202502][T22223] ? __warn_printk+0xf3/0xf3 [ 1895.207108][T22223] ? preempt_schedule_common+0x59/0xc0 [ 1895.212566][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1895.217600][T22223] ? preempt_schedule_thunk+0x16/0x18 [ 1895.224051][T22223] ? trace_hardirqs_on+0x51/0x1c0 [ 1895.229084][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1895.234106][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1895.239131][T22223] end_report+0x58/0x5e [ 1895.243295][T22223] kasan_report.cold+0xd/0x37 [ 1895.247973][T22223] ? usb_submit_urb+0x11c7/0x14e0 [ 1895.253969][T22223] usb_submit_urb+0x11c7/0x14e0 [ 1895.258839][T22223] service_outstanding_interrupt.part.0+0x5f/0xa0 [ 1895.265255][T22223] wdm_read+0x99b/0xbc0 [ 1895.269420][T22223] ? wdm_rxwork+0x200/0x200 [ 1895.273934][T22223] ? security_file_permission+0x248/0x560 [ 1895.280761][T22223] ? wdm_rxwork+0x200/0x200 [ 1895.285278][T22223] vfs_read+0x1b5/0x570 [ 1895.289439][T22223] ksys_read+0x12d/0x250 [ 1895.293828][T22223] ? vfs_write+0xa30/0xa30 [ 1895.298793][T22223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1895.305795][T22223] do_syscall_64+0x2d/0x70 [ 1895.310262][T22223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1895.316156][T22223] RIP: 0033:0x45e159 [ 1895.320404][T22223] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1895.340016][T22223] RSP: 002b:00007febe42a3c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1895.348462][T22223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e159 [ 1895.357580][T22223] RDX: 0000000000001000 RSI: 0000000020001000 RDI: 0000000000000005 [ 1895.366524][T22223] RBP: 000000000119c110 R08: 0000000000000000 R09: 0000000000000000 [ 1895.374938][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c0dc [ 1895.383581][T22223] R13: 00000000016afb7f R14: 00007febe42a49c0 R15: 000000000119c0dc [ 1895.392439][T22223] Kernel Offset: disabled [ 1895.396773][T22223] Rebooting in 86400 seconds..